Privacy Policy

Last updated: April 1, 2026

Our Commitment

Your worship is between you and Allah. We take that seriously. Nafs is built with privacy at its core — not as an afterthought, but as a founding principle. We don't sell your data, we don't show ads, and we don't have a social feed.

Data We Collect

  • Account information: Email address and display name when you create an account.
  • Ibadah data: Your worship activity (Quran reading progress, adhkar completions, tasbeeh counts, etc.) to power the hasanat system and analytics.
  • App usage data: Which blocked apps you access and for how long, to provide usage insights.
  • Device information: Device type and OS version for app compatibility and bug fixing.

Data We Never Collect

  • Content of your dua journal entries (end-to-end encrypted)
  • Your browsing history or app content
  • Your contacts or photos
  • Your location (unless you explicitly opt in for prayer time calculations)

Encryption & Security

All data is encrypted in transit using TLS 1.3. Your dua journal entries are end-to-end encrypted — we cannot read them even if we wanted to. Account data is encrypted at rest using AES-256. We use industry-standard security practices and conduct regular security audits.

Data Sharing

We do not sell, rent, or share your personal data with third parties for marketing purposes. Period. We may share anonymized, aggregated statistics (e.g., "users have completed X million adhkar") but this data cannot be traced back to any individual.

Third-Party Services

We use a minimal set of third-party services:

  • Authentication: For secure sign-in
  • Cloud hosting: For data storage and syncing
  • Analytics: Privacy-respecting analytics (no personal data shared)
  • Payment processing: For Premium subscriptions (we never see your full card number)

Family Features & Chat

If you use the Family feature, the following data is shared with family group members:

  • Leaderboard data: Display name and weekly ibadah hours are visible to family members.
  • Family chat messages: Messages sent in the family chat are stored on our servers and visible to all family group members. Messages are encrypted in transit and at rest.
  • Not shared: Your dua journal, specific app usage data, and detailed ibadah breakdowns are never shared with family members.

You can leave a family group at any time. When you leave, your leaderboard data is removed and your chat messages are deleted from the group within 30 days.

Your Rights

You have the right to:

  • Access all data we have about you
  • Export your data at any time
  • Delete your account and all associated data
  • Opt out of any optional data collection

Data Deletion

You can request complete deletion of your account and all associated data at any time. To request data deletion:

  • In-app: Go to Settings > Account > Delete Account. This permanently removes your account and all data within 48 hours.
  • By email: Send a request to privacy@getnafs.com from the email address associated with your account. We will process deletion within 30 days.

When your account is deleted, the following is permanently removed:

  • Your account profile and credentials
  • All ibadah and tracking data
  • Your dua journal entries
  • App usage and screen time data
  • Family group membership and chat messages
  • Premium subscription data (subscription itself is managed through your app store)

Deletion is irreversible. We retain no backups of deleted user data. Anonymized, aggregated statistics (which cannot identify you) may persist.

Children's Privacy

Nafs is designed for users aged 13 and older. The Family plan allows parents to manage accounts for younger family members. We comply with COPPA and similar regulations.

App Store Compliance

Nafs complies with Apple App Store and Google Play Store privacy requirements, including App Tracking Transparency (ATT) on iOS. We do not track users across apps or websites.

Changes to This Policy

We will notify you of any material changes to this privacy policy via email and in-app notification at least 30 days before they take effect.

Contact

Questions about our privacy practices? Email us at privacy@getnafs.com.