Privacy Policy

Last updated: August 24, 2026

Our Commitment

Your worship is between you and Allah. We take that seriously. Nafs is built with privacy at its core — not as an afterthought, but as a founding principle. We don't sell your data, we don't show ads, and we don't have a social feed.

Data We Collect

  • Account information: Email address and display name when you create an account.
  • Ibadah data: Your worship activity (Quran reading progress, adhkar completions, tasbeeh counts, etc.) to power the hasanat system and analytics.
  • App usage data: Which blocked apps you access and for how long, to provide usage insights.
  • Device information: Device type and OS version for app compatibility and bug fixing.
  • Attribution link data: If you click one of our website, Medium, or advertising links, AppsFlyer may process an opaque source and campaign code, the click and resulting install or app open, and basic device, app, and network information. Network information can include an IP address, which may indicate an approximate location.
  • Device and advertising identifiers: AppsFlyer may process a device or advertising identifier where it is available and permitted. On iOS, access to the advertising identifier (IDFA) requires your App Tracking Transparency permission. On Android, this can include the Google Advertising ID, which you can reset or delete in your device settings.

Data We Never Collect

  • Content of your dua journal entries (end-to-end encrypted)
  • Your browsing history or app content
  • Your contacts or photos
  • Your location (unless you explicitly opt in for prayer time calculations)

Encryption & Security

All data is encrypted in transit using TLS 1.3. Your dua journal entries are end-to-end encrypted — we cannot read them even if we wanted to. Account data is encrypted at rest using AES-256. We use industry-standard security practices and conduct regular security audits.

Data Sharing

We never sell or rent your personal data. We never share your ibadah data, your dua journal, or your app usage details with advertisers — not in any form, for any price.

There is one narrow exception, and we want to be plain about it. AppsFlyer helps us understand whether an opaque website, Medium, or advertising campaign led to an app install or first open on iOS or Android. RevenueCat may receive the AppsFlyer identifier and those opaque source and campaign fields so we can understand whether a campaign led to a trial or subscription. Meta may receive measurement data for advertising campaigns where that integration is enabled.

These attribution fields do not contain article titles, search queries, worship data, dua journal content, or details about which apps you block. On iOS, denying App Tracking Transparency permission prevents access to IDFA, but identifier-free technical attribution may still occur. On Android, you can limit advertising-identifier use through Settings > Google > Ads. Nafs carries on working if you deny or limit advertising identifiers.

We may also share anonymized, aggregated statistics (e.g., "users have completed X million adhkar"), but this data cannot be traced back to any individual.

Third-Party Services

We use a minimal set of third-party services:

  • Authentication: For secure sign-in
  • Cloud hosting: For data storage and syncing
  • Analytics: Product analytics, to understand which features are used (no ibadah content or journal entries shared)
  • Attribution and marketing measurement: AppsFlyer, for website, Medium, and advertising links on iOS and Android; Meta (Facebook), for advertising measurement where enabled; and RevenueCat, to connect opaque attribution fields with trial and subscription outcomes
  • Payment processing: For Premium subscriptions (we never see your full card number)

Family Features & Chat

If you use the Family feature, the following data is shared with family group members:

  • Leaderboard data: Display name and weekly ibadah hours are visible to family members.
  • Family chat messages: Messages sent in the family chat are stored on our servers and visible to all family group members. Messages are encrypted in transit and at rest.
  • Not shared: Your dua journal, specific app usage data, and detailed ibadah breakdowns are never shared with family members.

You can leave a family group at any time. When you leave, your leaderboard data is removed and your chat messages are deleted from the group within 30 days.

Your Rights

You have the right to:

  • Access all data we have about you
  • Export your data at any time
  • Delete your account and all associated data
  • Opt out of any optional data collection

Data Deletion

You can request complete deletion of your account and all associated data at any time. To request data deletion:

  • In-app: Go to Settings > Account > Delete Account. This permanently removes your account and all data within 48 hours.
  • By email: Send a request to privacy@getnafs.com from the email address associated with your account. We will process deletion within 30 days.

When your account is deleted, the following is permanently removed:

  • Your account profile and credentials
  • All ibadah and tracking data
  • Your dua journal entries
  • App usage and screen time data
  • Family group membership and chat messages
  • Premium subscription data (subscription itself is managed through your app store)

Deletion is irreversible. We retain no backups of deleted user data. Anonymized, aggregated statistics (which cannot identify you) may persist.

Children's Privacy

Nafs is designed for users aged 13 and older. The Family plan allows parents to manage accounts for younger family members. We comply with COPPA and similar regulations.

App Store Compliance

On iOS, IDFA is available to attribution partners only if you grant App Tracking Transparency permission; denying permission prevents IDFA access but does not necessarily stop identifier-free technical attribution. On Android, AppsFlyer may use the Google Advertising ID where it is available and permitted. We do not send worship data, dua journal content, blocked-app activity, article titles, or search queries in attribution fields, and we do not use this data to build advertising profiles about you.

Changes to This Policy

We will notify you of any material changes to this privacy policy by email and in-app notification. Changes take effect when they are posted here, and the "last updated" date above will always tell you when that was.

Contact

Questions about our privacy practices? Email us at privacy@getnafs.com.