Privacy Policy
Introduction
Zariya X ("we", "us", or "our") operates the Muhsinoon mobile application (the "App"). This Privacy Policy describes how we collect, use, and safeguard information when you use our App.
Information We Collect
Anonymous Device Identifier
When you first launch the App, a cryptographically random device ID is generated and stored locally on your device. This ID contains no personal information and is used solely to authenticate API requests for content delivery.
Tracker & Journal Data
Prayer logs, Quran reading records, Azkar completions, habit tracking, personal journal entries, and Islamic goals are cached locally on your device for offline access, and also synced to our servers under your anonymous device ID — this is what lets your progress survive a reinstall or carry over if you get a new device. This data is linked only to your device ID, never to your name, email, or any other identity, and is never sold, shared with advertisers, or used for profiling.
Google Account Information (Community — opt-in only)
If you choose to join Community, you sign in with Google and we receive your name, email address, and profile photo from Google to create your Community identity. This upgrades your existing anonymous device account in place — your tracker/favorites history is preserved, not replaced — rather than creating a second, separate account. We verify your Google sign-in token directly against Google's own servers; we never see or store your Google password.
Community Content You Post
Posts, photos, comments, and replies you create in Community are visible to other Community members and are stored on our servers, linked to your Google-linked identity (your name and photo, as above). Likes, shares, and reports you make are recorded the same way. Photos you upload are automatically resized into optimized copies for display, and all metadata embedded in the original file — including GPS/location tags your camera may have recorded — is stripped before the photo is ever stored or shown to anyone.
Connections & Blocking
Friend/connection requests you send or receive, and any account you choose to block, are recorded against your Community identity so the App can show the right relationship state and keep blocked accounts from seeing each other's content.
Community Country Preference
Community asks which country's community you'd like to see content from. This is a preference you choose yourself and is never changed automatically — not by travel, a VPN, or a new IP address. The only automated step is a one-time, best-effort suggestion shown when you first open the picker, computed from your IP address at that moment and never stored; you can ignore it and pick any country, and you can change your choice anytime in Settings. This is unrelated to the GPS-based Prayer Times location described below and never uses your device's GPS.
Firebase Analytics (anonymous)
The App uses Firebase Analytics to collect anonymised usage events — such as screen views, dua opened, favourite added/removed, tasbeeh sessions, folder creation, quote views, and Islamic tools usage (Hijri Calendar, Quiz, Seerah Timeline, Dream Guide, Islamic Finance). No personally identifiable information is included in these events. Google processes this data under its Privacy Policy at policies.google.com/privacy.
Firebase Crashlytics (release builds only)
In production (release) builds the App collects crash reports via Firebase Crashlytics. Reports include device model, OS version, app version, and stack traces at the time of a crash. No personal data or user content is included. Crash collection is disabled in debug builds.
Firebase Remote Config
Firebase Remote Config allows us to update certain app settings server-side (e.g. feature flags) without a full release. It does not collect or transmit any personal data.
Location Data (Prayer Times & Related Islamic Features)
The App never requests your device's location automatically. Location permission is requested only after you explicitly choose to use a location-based feature — for example, turning on "Auto-detect location" in Prayer Settings, or tapping "Detect Location" — to calculate accurate Islamic prayer times (Fajr, Dhuhr, Asr, Maghrib, Isha) for your current position. Location is used only for determining prayer times and related Islamic features, and is never used for advertising, tracking, analytics profiling, or marketing purposes. Prayer time calculation itself happens entirely on your device using the open-source Adhan library, and your precise location is not stored on our servers.
To show a readable city/country name instead of raw coordinates, the App may use your device's built-in location services (Android's system Geocoder) to reverse-geocode your coordinates into a place name. Depending on your device, this lookup can involve your coordinates being processed by your device manufacturer's or Google's location services under their own privacy policies — it happens through your device's operating system, not through our servers. If you decline the permission, the App continues to work fully by letting you set your city manually — no location access is required to use prayer times or any other feature.
This is separate from Community's country preference described below — that's a country you pick from a list, never your device's GPS.
Information We Do Not Collect
Outside the optional Community feature, we explicitly do not collect:
- Your name, email address, or phone number
- Your contacts, calendar, or media files
- Biometric data of any kind
- Financial or payment information
- Your location for any purpose other than local prayer time calculation (see Section 2)
If you choose to join Community, your name, email, and profile photo are collected as described in Section 2 — this only ever happens after you explicitly sign in with Google, never automatically.
How We Use Your Information
Your anonymous device ID is used to:
- Authenticate requests to our content API (duas, categories, Islamic quotes)
- Maintain session continuity across app launches
- Analyse anonymised usage events to understand feature adoption and improve the App experience
- Diagnose crashes and performance regressions via Firebase (release builds only)
- Calculate Islamic prayer times locally on your device (location, if permission granted)
If you join Community, your Google-linked identity (name, email, photo) is additionally used to:
- Display your name and photo on posts, comments, and your profile so other members know who they're interacting with
- Show you a feed mixed from your chosen country and global activity, and from people you're connected to
- Deliver notifications about likes, comments, replies, and shares on your own posts
- Prioritise same-country people in Community's suggestions
- Enforce blocking — so a blocked account's content is kept from both sides
We do not use your information for profiling, advertising, or any purpose beyond operating the App's features.
Data Storage & Security
Personal tracker data (prayers, Quran, habits, goals, journal) is cached locally on your device for offline access and synced to our servers under your anonymous device ID, as described in Section 2. Content data fetched from our API (duas, categories) is also cached locally for offline access.
Community posts, photos, and comments you create are stored on our servers and are visible to other Community members — this content is not private. Uploaded photos are processed into resized, optimized copies for faster loading, and all file metadata (including any GPS location your camera embedded) is stripped before storage.
We implement TLS encryption for all API communications.
Third-Party Services
- Google Play Services — app distribution and updates
- Google Sign-In — used only if you choose to join Community, to verify your identity and retrieve your name, email, and profile photo; Google Privacy Policy
- Firebase Analytics — anonymous usage analytics; Google Privacy Policy
- Firebase Crashlytics — crash reporting (release builds only); Google Privacy Policy
- Firebase Remote Config — server-side app configuration; no personal data collected
- Android system location services — used on-device to convert coordinates into a city/country name for prayer time setup, as described in Section 2; Google Privacy Policy
- IP-based geolocation (ip-api.com) — used server-side only to suggest a starting country in Community's country picker; the result is shown to you, never stored, and you can pick any country regardless
Each third-party service operates under its own privacy policy. We are not responsible for their data practices.
Children's Privacy
The App does not knowingly collect information from children under 13. Muhsinoon contains Islamic educational and devotional content suitable for all ages. The App contains no advertisements.
Your Rights & Data Deletion
You can permanently delete your account and all associated data — locally and on our servers — at any time, in any of these ways:
- Open the App → Settings → Delete All My Data, which deletes both your on-device data and your server-stored account
- Email support@zariyax.com if you need help
Deletion is immediate and permanent — your favorites, folders, prayer/Quran/Azkar/habit logs, goals, and journal entries are all removed and cannot be recovered. If you joined Community, this also permanently deletes your posts, photos, comments, likes, connections, and block list — the actual uploaded photo files are removed from our storage as well, not just hidden.
Signing out of Google inside the App only clears your signed-in display locally — it does not delete your Community account or content, which stays intact for if/when you sign back in. Use Delete All My Data for permanent removal.
Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above. Continued use of the App after changes constitutes acceptance of the updated policy.
Contact Us
Questions or concerns about this Privacy Policy:
- Email: support@zariyax.com
- Developer: Zariya X