Privacy Policy
Salah Buddy (“the app”, “we”, “us”) is operated by Salah Buddy. This policy explains what data the app collects, why, how it is stored, and the choices you have. By using the app you agree to this policy.
1. Data we collect
| Data | Why | Where it is stored |
|---|---|---|
| Email address | To create and secure your account (sign-in). | Firebase Authentication (Google). It is not stored in our database. |
| Display name / username | Shown on your profile and the public leaderboard. | Cloud Firestore. |
| Profile photo (only if you sign in with Google) | Shown on your profile and leaderboard. | URL stored in Cloud Firestore; image served by Google. |
| Approximate or precise location | To calculate accurate daily prayer times for where you are. | Used in-memory and sent to the AlAdhan prayer-times API; cached on your device. We do not store your coordinates in our database. |
| Prayer completion records, streaks and statistics | The core feature — tracking which prayers you have marked complete and your streak history. | Cloud Firestore. |
| App preferences (theme, notification style, calculation method, selected region) | To remember your settings. | Stored locally on your device. |
We do not collect contacts, messages, photos from your gallery, browsing history, or advertising identifiers. The app contains no ads and no third-party analytics or tracking SDKs.
2. How location is used
When you allow location access, your device's latitude/longitude (or a city you manually select) is sent to the AlAdhan API (aladhan.com) to return that day's prayer times. Location is used only for this purpose. You can instead pick a city manually in Profile → Prayer Time Region and the app will not request GPS. If you deny location permission, the app still works once you select a region.
3. Notifications
With your permission, the app schedules local notifications on your device for prayer times (optionally with an adhan sound). These are generated on-device and are not sent through any server.
4. Who we share data with (sub-processors)
- Google Firebase (Authentication, Cloud Firestore, App Check, Crashlytics) — stores your account and app data and reports crashes. See Firebase privacy.
- Google Sign-In — if you choose to sign in with Google.
- AlAdhan API — receives your location or selected city to return prayer times.
We do not sell your data or share it with advertisers.
5. Data security
- Account credentials are handled by Firebase Authentication; we never see your password.
- All data is transmitted over encrypted connections (HTTPS/TLS).
- Database access is restricted by Firebase Security Rules so that you can only read and write your own private data. The public leaderboard exposes only a username, optional photo and streak counts — never your email.
- Firebase App Check is used to block requests that do not originate from the genuine app.
6. Data retention and deletion
Your data is kept while your account exists. You can permanently delete your account and all associated data at any time:
In the app: Profile → Delete Account. This immediately and permanently removes your account from Firebase Authentication and deletes your profile, leaderboard entry and prayer history from our database. This cannot be undone.
By request: email support@salahbuddystreak.app and we will delete your account and data within 30 days.
7. Children's privacy
The app is rated for general audiences and is not directed at children under 13. We do not knowingly collect data from children under 13.
8. Changes to this policy
We may update this policy from time to time. The “Last updated” date at the top will change, and significant changes will be reflected in the app's store listing.
9. Contact
Questions or data requests: support@salahbuddystreak.app