Privacy Policy

What we collect

• Account and profile information, such as email, authentication details, optional name, guest/permanent account status, and privacy preferences.
• Prayer activity, including check-in records, prayer names, masjid, date, source of check-in, undo status, streaks, goals, and related attendance summaries.
• Location information when you check in or use auto check-in. For manual check-ins we use your location to verify proximity. If you enable native auto check-in, iOS may provide background location or region-entry events so we can attempt check-ins near your selected masjid. We do not build or sell a raw GPS history.
• Notification data, including notification preferences, push subscription/device tokens, delivery/event logs, and local notification settings for prayer, masjid, friend, leaderboard, digest, and engagement reminders.
• Community data, including friend requests, friend lists, groups, posts, reports, leaderboard settings, names/aliases, and visibility preferences.
• Masjid and admin data, including masjid listings, addresses, coordinates, prayer schedules, iqamah settings, screen/display settings, admin access, claim requests, and verification submissions such as phone/EIN information or documents.
• Payment and finance data needed for optional donations and accountability pledges. Stripe handles card, Apple Pay, and payment method details; we store non-sensitive identifiers, settings, charge records, pledge/donation amounts, destination masjids, and status summaries.
• Device/app data, such as app version, iOS capability flags, widget/pass payloads, browser/device metadata, diagnostics, logs, and feedback/support messages.

How we use data

• Provide check-ins, auto check-in, streak tracking, prayer history, dashboards, widgets, wallet passes, and leaderboards.
• Verify check-in eligibility, enforce prayer time and location rules, detect abuse, and protect the integrity of streaks and leaderboards.
• Send notifications you enable, including prayer reminders, missed check-in reminders, auto check-in confirmations, friend/community updates, masjid posts, and recaps.
• Operate community features such as friends, groups, posts, rankings, nudges, reports, and visibility controls.
• Operate masjid and admin tools, including listings, schedules, screens, attendance exports, claim requests, verification, and masjid communication.
• Process optional donations, Stripe Connect onboarding, saved payment methods, Apple Pay setup, and accountability pledges.
• Provide support, respond to feedback, debug reliability issues, improve performance, and maintain safety and security.

Visibility and sharing inside SalahStreak

• Your check-ins, streak counts, rank, display name, alias, and profile visibility may appear in leaderboards or friend/community views depending on your settings and the feature being used.
• Masjid admins may see attendance and aggregate participation data for masjids they manage, and may export attendance where the admin dashboard allows it.
• Masjid posts, public masjid listings, verification badges, and screen/display content may be visible to users or visitors.
• Private masjid/listing settings limit discoverability, but admins and authorized service providers may still process the data to operate the service.

Service providers

We do not sell your personal data. We share data with service providers needed to operate SalahStreak, such as Supabase for authentication/database/storage, Stripe for payments and Connect, Apple/Google platform services for sign-in, wallet, notifications, widgets, and app functionality, Render or similar hosting providers, email/support tools, and analytics or logging tools used to maintain reliability. We may also disclose information when required by law, to protect rights and safety, or in connection with a business transfer.

Location, notifications, and device permissions

Location and notifications are permission-based. You can change permissions in your browser or iOS settings. Auto check-in is optional and is designed for users who enable the required native permissions, including background location where supported. iOS and browsers may still limit delivery, timing, or accuracy.

Retention and account deletion

We keep information for as long as needed to provide the service, comply with legal/payment obligations, resolve disputes, prevent abuse, and maintain records. You can request or use in-app account deletion where available. Some records may remain if needed for security, compliance, payment processing, masjid administration, backups, or aggregated analytics.

Security

We use reasonable technical and organizational measures to protect data, including managed authentication, database access controls, and payment processing through Stripe. No online service can guarantee perfect security.

Children

SalahStreak is not intended for children under 13. If you believe a child provided personal information, contact us so we can review and remove it where appropriate.

Contact

Questions or privacy requests? Use the “Request a feature” link in the footer or contact the platform admin.