This policy describes how Fajrunaa (“the application”) collects, uses and protects information about you when you use the application on iOS or Android.
1. Who publishes Fajrunaa?
Fajrunaa is published personally by Karim Bouchez, under the author name dev&din.
Contact: [email protected] (men) / [email protected] (women).
2. Data processed and purposes
Fajrunaa is designed to minimize data collection. Nearly all processing happens on your phone.
2.1 Geolocation
The application needs your approximate location to compute prayer times (Fajr, Dhuhr, Asr, Maghrib, Isha) for your city. This location is used locally on your device and is not sent to our servers nor shared with any third party.
2.2 Camera (video challenges)
When you complete a “film an object” challenge, image analysis is performed on-device via an embedded machine-learning model (MLKit). No image and no video is saved or transmitted.
2.3 An optional account, for referrals and the subscription
Fajrunaa works without sign-up or sign-in. Your alarms, preferences and saved codes stay on your device only, with or without an account: they are never sent to or stored on our servers. Uninstalling the app erases them for good.
If you wish, you can connect a dev&din account (with Google, Apple or a code received by email). It serves one purpose: getting your referral code, your invitations, your earned months and your subscription back if you change or lose your phone. We then keep your email address, the name provided by Google or Apple if any, and an account identifier. This account is shared across dev&din apps.
You can delete this account at any time from the app: how to delete your account.
2.4 Anonymous usage statistics
We may collect anonymous usage events (screen viewed, challenge completed) to improve the application. This data cannot be tied to your identity.
2.5 Referrals and subscription
If you use referrals or take out a subscription, a technical identifier specific to your device is sent to our referral service, then hashed on our servers. It is used to tie your earned months, invitations and subscription to your device — nothing else. It is not linked to a name, an address or a profile, and it allows no advertising tracking.
The facts sent to that service are deliberately poor: “a Fajr alarm was honoured”, “a code was entered”. Never the time of your alarms, your city, or the content of the app.
Payments are handled by the App Store or Google Play, through RevenueCat: we never see your payment details, only the subscription status tied to that identifier.
Note: this identifier survives uninstalling — that is what gives you back your earned months if you reinstall the app. You can ask for its deletion by email (section 4).
If you connect an account (2.3), these items are tied to that account rather than to your device alone, and deleted with it.
2.6 Advertising
The application shows an ad banner at the bottom of the home screen. Ads are provided by Muslim Ads (muslimads.devndin.com), dev&din's ad network.
For each ad seen or tapped, Muslim Ads receives the time, the ad space, the ad, the language of the application, the phone's system (iOS or Android) and your country. The country is derived from your IP address by the ad network's host.
Your IP address is not kept. Muslim Ads only keeps a fingerprint that changes every day and the type of network, to detect fraud.
Muslim Ads receives no identifier: not your phone's, not your account's, not the advertising ID. No cookie is used. Nothing allows you to be followed from one day to the next or from one app to another.
The “Muslim Ads” badge on each ad explains why you are seeing it.
On this website. If you arrive here from a Muslim Ads ad, the address carries a click identifier (ma_click). The site keeps it for 7 days in your browser's storage. When you tap a download button, it sends it to Muslim Ads. This tells us which ads bring downloads. Nothing else is sent: no cookie, no visitor identifier, nothing about you. If you did not come from an ad, nothing is kept or sent.
3. Legal basis and retention
Processing is based on the performance of the service you use (alarms) and on your explicit consent for sensitive permissions (geolocation, camera). Ad measurement is based on our legitimate interest in funding the application.
Without an account, the only data reaching our servers are anonymous counters (see 2.4), the hashed referral identifier (see 2.5) and the measurement of ads seen or tapped (see 2.6). If you connect an account (2.3), its email address is kept for as long as the account exists, and deleted as soon as you delete it.
4. Your rights
Under GDPR, you have the following rights: access, rectification, erasure, restriction, portability, objection. To exercise these rights, contact us at [email protected] (men) / [email protected] (women). You may also lodge a complaint with the French data-protection authority (CNIL).
5. Security
We implement reasonable technical and organizational measures to protect your data against unauthorized access: TLS in transit, encryption at rest, environment separation, encrypted backups.
6. Sub-processors
We rely on hosting and tooling providers:
- Hosting: OVH (France).
- Sign-in to the optional account: our authentication service (auth.devndin.com); Google or Apple if you choose them.
- Sign-in emails: Amazon SES (eu-west-3 region, Paris).
- Subscription: RevenueCat.
- Advertising: Muslim Ads, dev&din's ad network (muslimads.devndin.com).
- Error tracking: Sentry.
- Anonymous analytics: PostHog (EU).
7. Transfers outside the EU
No systematic transfer of personal data outside the European Union. Where sub-processors occasionally operate outside the EU, standard contractual clauses ensure an adequate level of protection.
8. Changes
We may update this policy to reflect technical or regulatory changes. The effective date at the top of this page is updated with each revision.
9. Contact
For any question: [email protected] (men) / [email protected] (women).