Privacy

1. Who we are

Zad (formerly Azkari) is a free Quran, adhkar and prayer times app for Android and iOS, made by Ibrahim Hajjaj. This policy covers the app and this website. It explains what stays on your phone, what leaves it, where it goes, and why.

2. What stays on your phone

• Worship and progress. Adhkar progress, streaks, achievements, Quran bookmarks, khatma plans and your last-read position are kept in a database on your phone and are not uploaded anywhere.
• Settings. Theme, fonts, language, notification and adhan preferences.
• Activity. The app records what you did (used for streaks and achievements) in the same local database only.
• Location. The place used for prayer times, whether it came from your device or a city you picked, is saved on the phone so the times work offline. Prayer times and the qibla direction are calculated on the phone.
• Downloads. Quran pages, recitations, tafsir and translations you download are saved to the phone's storage.

Deleting the app deletes all of it.

3. Crash and performance diagnostics (Sentry)

The app uses Sentry, a crash-reporting service run by Functional Software, Inc. (USA), to find and fix faults. Sentry receives:

• Crash and error reports, with the error and a trail of the app's recent technical events leading up to it. File paths on your phone are removed from that trail before it is sent.
• Performance timings, from a random sample of about 20% of app operations.
• Technical device context: device model, operating system and version, app version, locale, and memory and battery state.
• A random installation identifier made by the Sentry library on your phone. It is not your name, email or an account (the app has no accounts), and it changes if you reinstall the app.
• A note when you send a report: its ID, its category and where you opened the form from, so the report can be read next to any error that came before it. What you wrote is not included; it goes only to our server (next section).

Sentry's optional personal data collection (sendDefaultPii) is off, so diagnostics carry no device name and the library does not attach your IP address. The app does not record your screen: Sentry's Session Replay is switched off. Routine noise, such as an ordinary failed connection, is filtered out on the phone and never sent. Errors from the Android adhan alarm, which can run while the app is closed, are reported under the same rules.

Diagnostics are processed on Sentry's servers in the United States and deleted automatically after a limited retention period.

4. Reports you send us

The app has a report form for translation mistakes, prayer time problems, bugs and feature requests. Nothing is sent until you tap send. A report contains:

• The category and what you write
• Your email address, only if you choose to enter it, used only to reply to you
• App and device: app version, build number and the app update it is running, operating system and version, device model, app language, time zone and locale
• Where you opened the form from (for example Settings or the rating prompt) and the screen you were on before
• Prayer settings: the calculation method and whether you chose it, your time corrections, where the location came from (your device, a city you picked, your phone's time zone, or the Makkah default), the city name and the exact coordinates the app calculates with, today's date and the prayer times the app showed, and the UTC offset of your phone and of the app
• Permissions: whether location and notifications are allowed (on iOS, whether location is precise), and on Android whether exact alarms are allowed and battery optimisation is off for Zad
• Adhan: whether it is on, for which prayers, in which mode, and how many prayer notifications are waiting with the system
• The last lines of the app's own activity log (at most 50 lines, kept only in memory until then)
• The ID of the last error sent to Sentry, so the report and the error can be read together

The coordinates are sent exactly, not rounded, because prayer times shift every few kilometres and a report about a wrong time can only be checked against the place the phone actually used. They are sent only inside a report you choose to send.

On our server the report is stored in a database (Cloudflare D1). Beside it we keep a one-way SHA-256 fingerprint of your IP address, used only to limit abuse (at most 5 reports an hour), and a country code from the connection. Your IP address itself is not stored.

The app remembers the ID our server gives each report and later asks the server what became of it, sending only those IDs, so it can tell you when the problem is fixed. We keep reports for as long as we need them to improve the app. You can ask us to delete yours at any time (see "Your choices").

5. Daily anonymous usage count

So we know how many people use Zad each day, the app sends one small message to our server at most once a day, when you open it. It contains these four things and nothing else:

• A random installation ID the app makes itself the first time and keeps only in its own storage. It is not your device ID, advertising ID, name, email or account, and it is not linked to your reports, your Sentry diagnostics or anything else we hold. Reinstalling the app makes a new one.
• The app version (for example 1.39.0).
• The platform: Android or iOS.
• The region set on your device (a two-letter country code such as EG), read from your device settings, not from your IP address or location.

Our server stores one row per installation per day with those four things and the date. It does not store your IP address, a fingerprint of it, or your user agent. Your IP address is used only for a moment to cap requests per minute and is not written down. Rows older than 400 days are deleted automatically.

To turn it off: in the app, go to Settings, then Privacy, and switch off "Share anonymous usage count". From then on nothing is sent. It is on by default.

6. Other connections the app makes

• Content downloads. Quran pages, recitations, tafsir, translations, fonts, adhan audio, interface languages and video backgrounds come from our server on Cloudflare. A request carries the file being asked for. Like any web server, it keeps standard technical logs of requests to run and secure the service. When a recitation is not stored on our server, our server fetches it from a public Quran audio library (EveryAyah, QuranicAudio, Islamic Network or Tarteel's QUL) and passes it on; your phone does not connect to them.
• App updates. The app checks our update server for a newer version of its own code, sending the platform and the version it is running, and reads a small file that says which store version is the latest. Neither carries anything about you.
• City search (Open-Meteo). When you search for a city by name, the name you typed and the app language go to Open-Meteo's geocoder (open-meteo.com). When the app has no location and falls back to the city of your phone's time zone, that city's name is looked up the same way to show it in your language. When you pick a city, its coordinates (the city's, not your device's) may be sent to Open-Meteo to find its time zone.
• Place names. To show the name of your city from your device location, the app may use your phone's built-in geocoding service, which handles the coordinates under Google's or Apple's privacy policy.

7. Permissions

All of them are optional. The app works without any of them, with less.

• Location: to calculate prayer times and the qibla direction for where you are. Used on the phone; the coordinates leave it only inside a report you send. If you decline, the app uses an approximate place you can change by picking a city.
• Notifications: to remind you of prayer times and adhkar. Every notification is made on the phone; you can turn them off in the app or the phone's settings.
• Alarms and battery (Android): exact alarms and freedom from battery optimisation so the adhan sounds on time.
• Display over other apps (Android): only for floating reminders, if you turn them on.
• Calendar: only when you add an Islamic date to your calendar. The app lists your calendars so you can choose one and adds the event; it does not read your events.
• Photos: to use a photo you pick as the background of a verse card, and to save a card you made to your photos. The app sees only the photo you pick.
• Motion (iOS): the compass for the qibla direction.

8. Where data is kept, and for how long

• Your worship data, settings and progress: on your phone, until you delete the app
• Diagnostics: on Sentry's servers in the United States, deleted after a limited retention period
• Reports: in our Cloudflare D1 database, for as long as we need them or until you ask us to delete yours
• Daily usage count: in the same database, deleted after 400 days
• Download requests: in our server's standard technical logs

9. Who we share data with

Only these service providers, and only as described above:

• Sentry (Functional Software, Inc., USA) processes diagnostics for us.
• Cloudflare, Inc. (USA) hosts our download server, our update server, this website, and the database where reports and the daily usage count are kept.
• Open-Meteo receives a city name you search for, or a picked city's coordinates, to answer that one lookup.

We do not sell your data and do not share it with advertisers or data brokers. The app has no ads and no advertising SDKs.

10. Security

• Every connection between the app, our servers, Sentry and Open-Meteo is encrypted (HTTPS)
• Data on your phone is protected by the operating system's app sandbox
• We keep what leaves the phone small by design: sampling, filtering of routine errors, fingerprinting rather than storing IP addresses, and no screen recording
• The app works offline first; a connection is only needed for downloads, city search, diagnostics, the daily count and reports

11. Your choices

• Daily usage count: turn it off any time in Settings, Privacy. Rows already sent carry no way to reach you and are deleted after 400 days.
• Data on your phone: delete the app and everything it stored is deleted.
• Reports: email support@zadapp.app to have yours deleted. Mention the email you used, or roughly when you sent it and what it said, so we can find it.
• Diagnostics: sampled, tied to a random installation identifier rather than to you, and deleted by Sentry after a limited period.
• Questions: write to us about anything in this policy.

12. Children

• The content is Islamic educational material suitable for all ages
• The app has no ads, no accounts, no chat and no social features
• We do not knowingly collect personal information from children. The optional email field in the report form should be filled in by a parent or guardian
• Diagnostics carry no names or contact details

13. This website

zadapp.app is static pages with no cookies, no third-party requests and no trackers, which is why there is no cookie banner: there is nothing to consent to. It is hosted on Cloudflare, which keeps standard technical logs of requests.

14. Changes to this policy

Changes are published on this page and the date at the top moves with them. We will tell you about important changes in the app. Continuing to use the app after a change means you accept the updated policy.

15. Contact

Questions about this policy, or a request to delete a report: support@zadapp.app. We aim to reply within 48 hours.