Privacy Policy

The short version

• We do not sell your data. Ever.
• We do not run ads, and the app contains no advertising SDKs.
• We do not track you across other apps or websites.
• The only push notifications we send are the adhan, five times a day.
• Everything we can keep on your device, we keep on your device. The little that needs to sync between your own devices uses your personal iCloud — we never see it.
• You can audit this for yourself from inside the app: Settings → “Privacy receipt” shows, line by line, what is stored locally and what (if anything) has been opted in to leave the device.

Who we are and how to reach us

• Publisher: Lumen Labs
• App: Athan (iOS bundle com.lumenlabs.athan, Android package works.lumenlabs.athan)
• Support email: [email protected]
• Responses: We aim to reply within 48 hours.

For privacy-specific requests — access, deletion, correction, objection — use the same support email and put “privacy request” in the subject line. We respond to all such requests within 30 days, as required by GDPR / UK GDPR / CCPA / similar laws.

1. Data Athan collects

1.1 Location

• What: Your approximate or precise location (latitude and longitude), OR a city name that you enter manually.
• Why: Prayer times and the Qibla bearing are computed from your geographic position. There is no way to provide accurate times without it.
• Where it lives: On your device. The latitude/longitude are stored in AsyncStorage and never transmitted to a Lumen Labs server. We do not log your location. We do not share it with third parties.
• Your control:Revoke location permission at any time in your operating system’s Settings. You can also enter a city manually instead of using GPS; the app works fully in that mode.

1.2 Settings and preferences

• What:Calculation method (ISNA, MWL, Umm al-Qura, Egyptian, Karachi, Tehran, etc.), madhhab choice (Hanafi / Shafi’i / Maliki / Hanbali), adhan voice, theme, saved cities, notification preferences, and per-prayer overrides.
• Why: So the app behaves the way you set it up.
• Where it lives:On your device. If you have iCloud enabled on iOS, these settings sync between your own devices through Apple’s NSUbiquitousKeyValueStore (iCloud Key-Value sync). Lumen Labs cannot read that data — only your devices and Apple can. On Android the data stays on the device unless you have configured Android Backup.

1.3 Optional account information

• What:If you choose Sign in with Apple, we receive an opaque Apple user identifier (a string that is unique to your Apple ID and our app) and, if you opted in, an Apple “Hide My Email” relay address.
• Why: To restore your Athan Plus purchase on a new device.
• Important: Sign-in is optional. The app works fully without an account. We do not store your real name. We do not store your real email.
• Where it lives: With our purchase provider, RevenueCat, tied only to that opaque identifier.

1.4 Purchase data

• What: Which Athan Plus plan you hold (annual, monthly, or lifetime), plus an Apple- or Google-issued purchase identifier.
• Why: To unlock Athan Plus features across the devices where you have purchased them.
• Processed by: Apple App Store (or Google Play Billing) handles the transaction. RevenueCat validates the receipt and tells the app whether you hold the pro entitlement.
• What we do not see: Your payment method, card number, billing address, full Apple ID, or full Google account. Apple and Google never share these with us.

1.5 Crash diagnostics (opt-in, off by default)

• What:A technical snapshot of the app’s state at the moment of a crash — stack trace, OS version, app version, device class. Personally identifying values are scrubbed before transmission. Location data is never included as a breadcrumb.
• Why: To find and fix bugs.
• Processed by: Sentry. Reports are retained for up to 90 days and then deleted.
• Your control:Off until you explicitly enable it in Settings → Privacy → “Send anonymous crash reports”. You can turn it back off at any time and any previously transmitted reports will age out within 90 days.

1.6 Anonymous usage analytics (opt-in, off by default)

• What: Aggregate funnel events — for example, that someone opened the Qibla screen, tapped Unlock, or completed onboarding. No IP address. No device identifier. No location. No advertising ID.
• Why: To understand which features matter and which to remove. We use this internally only.
• Processed by: PostHog, on EU-hosted infrastructure operated by Lumen Labs.
• Your control:Off until you explicitly enable it in Settings → Privacy → “Send anonymous analytics”. You can turn it back off at any time.

2. What Athan does NOT collect

• We do not collect your name.
• We do not collect your phone number.
• We do not collect your contacts, photos, microphone audio, camera frames, calendar, body sensors, health data, files, SMS, or call log.
• We do not use advertising identifiers (IDFA on iOS, GAID on Android).
• We do not embed third-party advertising SDKs of any kind.
• We do not sell, rent, share, license, or “make available” data to data brokers.
• We do not send marketing emails or “we miss you” push notifications. The only pushes the app sends are the five daily adhans.
• We do not maintain a public profile of you.

3. Third parties

The complete list of third parties that may process limited data on Athan’s behalf:

• Apple App Store / Google Play — receive your purchase receipt, to process the Athan Plus purchase.
• Apple Sign in / iCloud — receive an opaque user identifier and an encrypted KV-store payload, for optional sign-in and settings sync between your own devices.
• RevenueCat — receives the purchase receipt and opaque identifier, to validate the receipt across devices.
• Sentry — receives scrubbed crash diagnostics, only if you opted in, for bug fixing.
• PostHog (EU-hosted by Lumen Labs) — receives anonymous funnel events, only if you opted in, for internal analytics.

That is the entire list. There are no advertising SDKs, no data-broker relationships, no affiliate trackers, and no marketing attribution tooling.

We review this list every release. If we ever add a fifth or sixth provider, this section is updated before the release ships.

4. How long we keep data

• On-device data(location, settings, saved cities, audio cache, and your family prayer circle): retained until you delete the app, sign out, or clear it from Settings → Privacy → “Erase local data”.
• Crash reports (only if opted in): up to 90 days, then deleted.
• Anonymous analytics events (only if opted in): up to 12 months in aggregate form.
• Purchase identifiers: retained for as long as Apple or Google requires for receipt validation of your Athan Plus purchase, then deleted.

5. Your rights

Depending on where you live (GDPR, UK GDPR, CCPA, LGPD, and similar), you have rights to:

• Access the data we hold about you.
• Correct inaccurate data.
• Delete your data.
• Object to or restrict certain processing.
• Port your data to another service in a machine-readable form.
• Opt outof any “sale” of personal information — although we do not sell data to anyone.
• Withdraw consent at any time for any of the opt-in collection (crash reports, analytics). The app respects this immediately.

You also have the right to lodge a complaint with your local data-protection authority.

To exercise any of these rights, email [email protected]. We respond within 30 days. We will never charge you for a privacy request.

6. Children

Athan is suitable for all ages and is rated 4+ / Everyone. We do not knowingly collect personal data from children under 13 (or the equivalent minimum age in your jurisdiction). The app does not direct advertising content to children, because there is no advertising content at all.

7. International transfers

If you opt in to anonymous analytics, those events are processed on EU-hosted infrastructure regardless of where you live. Purchase receipt validation via RevenueCat may be processed in the United States. We use the standard contractual clauses and provider-level data-processing agreements that the respective laws require.

8. Security

• All optional network calls (crash reports, analytics, RevenueCat receipt validation) happen over HTTPS.
• iOS data is protected by the standard iOS file-protection class and stored inside the app sandbox.
• Android data is stored inside the app’s scoped storage area.
• We never bundle a hard-coded secret that lets a third party read your data.

We do not promise that any digital system is invulnerable. We do promise that we minimise what is collected so that even a worst-case breach has very little of yours to leak.

9. Changes to this policy

If we materially change this policy, we will update the effective dateat the top and surface an in-app notice before the change takes effect. Trivial edits (typos, clarifications, new contact addresses) will only update the “Last updated” date.

10. Contact

Privacy questions, requests, or concerns: [email protected].

Lumen Labs · publisher of Athan.