Privacy Policy

1. Information that stays on your phone

Most of Deen Scroll works entirely on your device, with no account and no connection. The following is stored only on your phone unless you create an account (section 2):

• your reading position, progress, reading days, khatams and reading plans;
• the ayat you save and the notes you write;
• your settings, including the tradition you choose (Sunni or Shia), layers, translation, tafsir, reciter, text size and theme;
• your downloaded audio.

Location. If you allow it, the app uses your phone's location (only while the app is open) to calculate prayer times and the qibla on your device, or you can pick a city instead. Your location is stored on the phone, rounded to about one kilometre. It is never sent to our servers as part of an account, and never included in usage statistics or crash reports. The only time a location leaves your phone is in Mosques nearby. To look up mosques around you, the app sends that rounded position and a search radius to our server. When you open a mosque on the iPhone's map, it sends the rounded position and that mosque to our server, which asks Apple Maps for the driving time: Apple receives the rounded position and the mosque's location from our server, never from your phone, and nothing that identifies you. Our server uses them to answer and does not store them.

Notifications (prayer times, the daily ayah, plan and trial reminders) are scheduled on your phone. We don't run a push-notification service and don't collect a notification token.

Widgets read the same information from your phone and show it on your home or lock screen.

If you delete the app, this information is deleted from your phone, except where your phone's own backup (iCloud or Google) keeps a copy under your control.

2. If you create an account (optional)

You can sign in with Apple or Google so your data follows you to a new phone. When you do:

• We receive your email address and an account identifier from Apple or Google. If you use Apple's "Hide My Email", we receive a relay address instead of your real one. We don't receive your password.
• We store and sync: your saved ayat, your notes, your reading position and progress (ayat read, reading days, completed surahs and khatams), your reading plans, and these settings: your tradition, layers, translation, tafsir, reciter and theme.
• Your tradition is religious information. Without an account it never leaves your phone. With an account it is stored with your settings so the app can set itself up the same way on another phone, and for no other reason.
• Location is never synced, with or without an account.

Signing out keeps everything on your phone. Deleting your account removes the copy we hold (section 8).

3. Purchases

Subscriptions are sold by Apple (App Store) or Google (Google Play), who process your payment. We never see your card or payment details. We use RevenueCat to manage subscriptions: it receives a purchase record from the store (which product, when it started, whether it renews) and an app user identifier, and tells the app whether Premium is active. If you have an account, that identifier is your account's ID. We keep a copy of your subscription status on our server so Premium content can be unlocked.

4. Usage statistics

To understand which parts of the app are used and what to improve, the app sends anonymous usage events to PostHog, hosted in the United States. Examples: that the app was opened, that a layer was switched on, that a surah was finished, that the paywall was shown. Events never contain your notes, the text you search for, your location or your contacts. PostHog is set to discard your IP address, so it isn't kept, and the app doesn't use automatic screen recording, automatic event capture or advertising identifiers. Events are tied to a random ID created on your phone, and to your account ID only if you sign in.

You can switch this off in the app under You › Privacy promise. When it is off, the app doesn't contact PostHog at all, and every feature works the same.

5. Crash reports

If the app crashes or hits an error, it sends a technical report to Sentry so we can fix it: the app version, device model and operating system, and what the app was doing. Reports are set up to exclude your IP address, email and personal details; they never include your notes, your location or what you typed. If you are signed in, a report may carry your account's ID so we can find related problems.

6. Content and services the app connects to

• Quran content. Translations, transliteration, word-by-word data, tafsir and recitation come from Quran Foundation. Content packs are delivered through our server (Supabase). Recitation audio streams directly from Quran Foundation's servers. Like any website, these servers see your IP address when your phone requests a file.
• Our server runs on Supabase (United States). It stores accounts and synced data, answers mosque searches and receives content reports. To prevent abuse, it keeps a short-lived count of requests per device, using a random ID created by the app (not your phone's hardware ID).
• Reporting a content issue. If you report a problem with a translation or recitation, we receive the ayah, the kind of problem, your message and the app version. Reports aren't linked to your account.
• Contacting support opens your own mail app. We receive what you choose to send.

7. Who we share information with

We share information only with the service providers above, so they can run the app for us:

We don't sell or rent personal information, and we don't share it with advertisers or data brokers. We may disclose information if the law requires it, or to protect the safety of our users or the public.

8. How long we keep it, and deleting your account

• Account data is kept until you delete your account.
• Delete your account any time in the app: You › Account › Delete account. This deletes your email and sign-in, the synced copy of your saved ayat, notes, progress and settings, and your subscription record on our server. It doesn't delete what is on your phone. Deleting your account doesn't cancel a subscription; cancel it in the App Store or Google Play. You can also ask us to delete your account by emailing support@okhlabs.com from the address on your account. See deenscroll.app/delete-account.
• Usage statistics and crash reports are kept for a limited period by PostHog and Sentry under their retention settings, then deleted.
• Content reports are kept while we look into them.

9. Your rights

Depending on where you live (including under the GDPR in the EU and UK, and US state laws such as California's), you may have the right to access, correct, delete or receive a copy of your information, to object to or restrict how it is used, and to withdraw consent. Most of these you can do yourself in the app; for anything else, email support@okhlabs.com and we will respond within the time the law requires. You can also complain to your local data protection authority.

Where the GDPR applies: we process account data to provide the service you asked for (contract); your tradition, if you create an account, with your consent, which you can withdraw by deleting your account or changing the setting; usage statistics and crash reports for our legitimate interest in keeping the app working and improving it, which you can switch off. Some providers are outside your country; where required, transfers use safeguards such as the European Commission's standard contractual clauses.

10. Children

Deen Scroll is suitable for all ages but is not directed at children under 13, and we don't knowingly collect personal information from them. The app can be used fully without an account. If you believe a child under 13 has created an account, contact us and we will delete it.

11. Security

Data is encrypted in transit. Your account's sign-in token is kept in your phone's secure storage (Keychain on iPhone, Keystore on Android). Our database only lets each account read its own rows. No method is perfectly secure, but we work to protect your information.

12. Changes to this policy

If we change this policy, we will update the date above and, for significant changes, tell you in the app before they take effect.