Privacy Policy

This Privacy Policy explains how Innoviata IA LLC (“Munazzim”, “we”, “us”, or “our”) collects, uses, discloses, and safeguards your information when you use the Munazzim application and website at munazzim.app(together, the “Service”). By using the Service, you agree to the practices described in this Policy. If you do not agree, please do not use the Service.

1. Who we are

The Service is provided by Innoviata IA LLC, a limited liability company organized under the laws of the State of Delaware, United States. For any privacy-related request, you can reach us at support@munazzim.app. Innoviata IA LLC is the data controller responsible for your personal information.

2. Information we collect

2.1 Information you provide

• Account information. When you create an account, we collect your email address and, optionally, a display name. You may sign up with an email and password or through Google sign-in. Authentication is handled by our infrastructure provider, Supabase.
• Content you create. Tasks, notes and descriptions, tags, lists and list items, prayer-completion records kept from earlier versions (prayers are no longer ticked), reminder times, and any images you upload to your task notes.
• Preferences. Your chosen language, theme, number of days displayed, and notification settings.
• Onboarding answers.Before subscribing we ask for a first name and three short questions: what you most want to take back control of, the broad field you work in, and how you heard about Munazzim. We use the first to address you and to tailor what we show you, the second to understand who the Service serves, and the third to know which channels bring people here. None of these are special-category data, none are sold, and none are shared with advertisers. You may object to this use or ask us to erase these answers at any time (see Section 8) without losing access to the Service.
• Support communications. If you email us, we keep your message, email address, name (if provided), and any attachments so we can respond and keep a record of support requests.

2.2 Location information

To display prayer times and Hijri dates, the Service needs an approximate location. You can either grant your browser’s location permission or select/enter a city manually. Prayer-time and Hijri-date calculations are performed locally on your device; we do not send your coordinates to a third-party prayer-time service. If you choose to save your location to your profile, we store the latitude, longitude, and/or city name so your settings persist across devices. You can change or remove this at any time. The default location is Mecca.

2.3 Payment information

Payments made on our website are processed by Stripe; purchases made in our mobile apps are processed by Apple (App Store) or Google (Google Play). We do not collect or store your full card number or other complete payment-card details. These providers give us a customer or transaction identifier and limited subscription data (such as plan, status, and renewal date) so we can manage your access. Their handling of your data is governed by their own privacy policies.

2.4 Information collected automatically

• Authentication cookies. We use cookies that are strictly necessary to keep you signed in and to operate the Service securely.
• Local storage.We store your preferences and a cache of your content in your browser’s local storage so the app loads quickly and works smoothly.
• Server and hosting logs. Our hosting provider (Vercel) processes standard technical data such as IP address and request metadata to deliver and secure the Service.
• Product analytics. We use PostHog to understand how the Service is used (pages viewed, features used) so we can improve it. Our configuration does not store analytics cookies or identifiers on your device; usage of the app while signed in is associated with your account. PostHog may also record sessions (clicks, scrolls and screens, with the text you type masked) to help us find and fix usability problems.
• Mobile app analytics. Our Android and iPhone apps send usage events (for example, that a screen was opened or a feature was used) to Google Analytics, linked to a random installation identifier and, once you are signed in, to your account identifier. Your email address is never sent.
• Website measurement and advertising. Our website loads Google Analytics and the Google Ads tag, the Meta Pixel and the TikTok Pixel. They set cookies or similar identifiers and tell these companies which pages were visited and which actions were taken (for example, creating an account), so we can measure and improve our own advertising campaigns. When you create an account or sign in on the website, we send Meta and TikTok a one-way hash (SHA-256) of your email address and of your account identifier, so they can match these actions to their users; they do not receive your email address in readable form. In the European Economic Area, the United Kingdom and Switzerland we ask first: the Meta and TikTok pixels load only if you accept, and the Google tags run without cookies until you do. You can change your choiceat any time, limit this through your browser settings and your ad preferences with Google, Meta and TikTok, or write to us (see Section 12).
• Error monitoring. We use Sentry to receive technical reports when an error occurs, so we can fix it.

We do not sell your data. The measurement tools above are used only to measure and improve our own campaigns and the Service.

3. How we use your information

• To provide, maintain, and improve the Service and your account;
• To calculate and display prayer times, Hijri dates, and reminders you enable;
• To process subscriptions and payments, and to manage access to the Service;
• To tailor what we show you and to understand how people find and use the Service, using the onboarding answers described above;
• To respond to your support requests and communicate service-related notices;
• To keep the Service secure, prevent fraud and abuse, and enforce our Terms;
• To comply with legal obligations.

4. Legal bases (EEA/UK users)

Where the EU/UK General Data Protection Regulation applies, we rely on the following legal bases: performance of a contract (to provide the Service you request); consent (for browser location access and for sending you notifications, which you can withdraw at any time); legitimate interests (to secure and improve the Service, and to understand who it serves and which channels bring people to it, using the optional onboarding answers); and legal obligation (to meet accounting, tax, and other legal requirements).

5. How we share information

We do not sell your personal information. We share it only with the service providers (subprocessors) that help us run the Service, and only as needed:

We may also disclose information if required by law, to protect our rights or the safety of users, or in connection with a merger, acquisition, or sale of assets (in which case we will continue to protect your information under this Policy).

6. International data transfers

We are based in the United States and our providers may process data in the United States and other countries. Where we transfer personal information from the EEA, UK, or Switzerland, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

7. Data retention

We keep your personal information for as long as your account is active or as needed to provide the Service. When you delete your account, your profile and associated content (tasks, lists, prayer-completion records, and uploaded images) are deleted from our active systems. We may retain limited information where necessary to comply with legal obligations, resolve disputes, or enforce our agreements (for example, transaction records required for tax purposes).

8. Your rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you;
• Correct inaccurate or incomplete information;
• Delete your information (you can delete your account directly from the app);
• Receive a copy of your data in a portable format;
• Restrict or object to certain processing;
• Withdraw consent at any time (for example, location or notifications);
• Lodge a complaint with your local data-protection authority. California residents may exercise rights under the CCPA/CPRA, including the right to know and delete, and we do not sell or share personal information as defined by that law.

To exercise any of these rights, email us at support@munazzim.app. We will respond within the timeframe required by applicable law.

9. Security

We use industry-standard measures to protect your information, including encryption in transit, access controls, and row-level security so that you can only access your own data. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

10. Children’s privacy

The Service is not directed to children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

11. Changes to this Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you. Your continued use of the Service after changes take effect constitutes acceptance of the revised Policy.

12. Contact us

Innoviata IA LLC — support@munazzim.app