Last updated: 6 October 2026
You can use the local plan without creating an account. Your first name, onboarding answers, age, sleep, focus and rest data, Qur’an reading, prayer records, bookmarks and progress are stored on your device. The account features described below do not send these records to our account service or synchronize them.
When enabled and available, you can choose Sign in with Apple, an email address and password, or a phone number verified by SMS. The app shows the methods available to you. Using a different sign-in method does not automatically merge your accounts.
The service keeps an account identifier, its verified identity and the information needed for sessions and, where applicable, referrals and rewards. Verified email addresses and phone numbers are stored encrypted for account operation. Separate security hashes are used to look up identities. Passwords are stored as hashes with random salts, not as plaintext. Necessary Apple identity and session credentials are also processed; stored refresh tokens are encrypted.
Apple handles Sign in with Apple. Resend delivers email verification and password-reset codes. Twilio Verify sends and checks SMS sign-in codes. These providers receive the email address or phone number and the information needed for that verification. These messages do not enroll you in marketing.
The providers process necessary delivery and security data under their own retention terms. These account features do not send them your five-pillar records. Sign-in requests temporarily process the necessary contact details and codes; our application code does not write these to its logs.
Successful account deletion removes sessions, password hashes, encrypted contact details, sign-in credentials, pending verification requests and personal reward records from the service. Applicable Apple authorizations are revoked. To limit abuse, a hashed identity may be retained for 365 days after deletion, then removed along with old invitation codes by daily cleanup.
Some account identifiers and referral accounting links remain to preserve rewards already earned by other people. Deletion therefore does not mean that every ledger row is erased. Backups and data held by providers have separate retention and deletion processes. An access record already issued for offline use can remain valid until it expires, up to 24 hours after issuance.
Deleting an account does not itself erase the app’s local records or cancel an App Store subscription. Subscriptions are managed separately through Apple.
If you opt in, the app can record interactions, screens visited and purchase outcomes to improve the experience and offers. Events use a random pseudonymous identifier: they are not truly anonymous and can be linked to one another. You can turn this collection off in Settings.
Events do not include your name, email address, phone number, personal onboarding answers, sleep values, prayer records, verses read or the names of selected apps. The analytics identifier is not sent by the account features.
Apple processes subscription payments through StoreKit. The app receives the product and entitlement information needed to manage access; it does not receive the card numbers used to pay.
App selection and blocking are handled on your device through Apple’s Family Controls and Screen Time. This selection is not sent to our account or analytics services.
For questions about your data or a deletion request, use the support page.