Privacy Policy

1. Information We Collect

We collect only the minimum information necessary to provide Islamic prayer services:

• Account Information: Email address, password (encrypted), full name, username, profile photo (optional)
• Location Data: Real-time GPS coordinates, city, country, timezone - used exclusively for prayer time calculations
• Location History: Stored location records to detect travel and update prayer times automatically
• Device Data: Operating system type and version for compatibility purposes only
• Authentication Data: Supabase authentication tokens for secure access

2. How We Use Your Information

Your data is used ONLY for the following purposes:

• Prayer Time Calculations: GPS location determines accurate salah times for your specific coordinates
• Qibla Direction: Calculate the direction to Mecca from your current position
• Weather Display: Show current temperature and weather conditions for your location
• Travel Detection: Automatically update prayer times when you move to a new location (>1km)
• Profile Display: Show your name, username, and profile photo in the app
• Account Security: Authenticate your identity and protect your account

3. Third-Party Services

We use the following third-party services. Your data is shared ONLY as described:

• Supabase: Database & authentication. Data encrypted at rest and in transit
• Quran Foundation API: NO user data shared. Only Quran text/audio retrieved
• Open-Meteo Weather: GPS coordinates only. NO tracking, NO data retention
• Malaysia Prayer API: GPS coordinates for Malaysian users only
• Singapore Prayer API: Public government API. NO user data shared

4. Data Security

• Encryption: TLS/SSL for data in transit, AES for data at rest
• Access Controls: Limited access to personal information
• Regular Audits: Security assessments and vulnerability testing
• Secure Storage: Enterprise-grade Supabase infrastructure

5. Your Rights

You have complete control over your data:

• Access: View all your data in the Profile screen
• Update: Change your profile photo anytime
• Delete: Permanent account deletion via in-app button (IMMEDIATE)
• Export: Request data export at privacy@algawth.com

6. Malaysia PDPA Compliance

For Malaysian users, we comply with the Personal Data Protection Act 2010:

• Consent: Obtained during account creation and location permission grant
• Purpose Limitation: Data used only for prayer services
• Security: Encryption and access controls implemented
• Access Rights: Contact privacy@algawth.com (respond within 21 days)

7. Singapore PDPA Compliance

For Singapore users, we comply with the Personal Data Protection Act 2012:

• Consent: By using the app, you consent to data collection as described
• Notification: This Privacy Policy serves as notification
• Protection: Data protected with encryption and access controls
• Withdrawal: Delete account via in-app feature to withdraw consent

8. Contact Us

Privacy Inquiries: privacy@algawth.com

• Data Access Requests: Respond within 30 days
• Data Deletion: Use in-app button or email us
• Data Export: JSON format within 30 days
• Privacy Concerns: Respond within 7 business days