Privacy Policy
How we collect, use, and protect your information when you use Munazzim.
Last updated: June 10, 2026
This Privacy Policy explains how Innoviata IA LLC (“Munazzim”, “we”, “us”, or “our”) collects, uses, discloses, and safeguards your information when you use the Munazzim application and website at munazzim.app(together, the “Service”). By using the Service, you agree to the practices described in this Policy. If you do not agree, please do not use the Service.
1. Who we are
The Service is provided by Innoviata IA LLC, a limited liability company organized under the laws of the State of Delaware, United States. For any privacy-related request, you can reach us at support@munazzim.app. Innoviata IA LLC is the data controller responsible for your personal information.
2. Information we collect
2.1 Information you provide
- Account information. When you create an account, we collect your email address and, optionally, a display name. You may sign up with an email and password or through Google sign-in. Authentication is handled by our infrastructure provider, Supabase.
- Content you create. Tasks, notes and descriptions, tags, lists and list items, prayer-completion records, reminder times, and any images you upload to your task notes.
- Preferences. Your chosen language, theme, number of days displayed, and notification settings.
- Support communications. If you email us, we keep your message, email address, name (if provided), and any attachments so we can respond and keep a record of support requests.
2.2 Location information
To display prayer times and Hijri dates, the Service needs an approximate location. You can either grant your browser’s location permission or select/enter a city manually. Prayer-time and Hijri-date calculations are performed locally on your device; we do not send your coordinates to a third-party prayer-time service. If you choose to save your location to your profile, we store the latitude, longitude, and/or city name so your settings persist across devices. You can change or remove this at any time. The default location is Mecca.
2.3 Payment information
Payments and subscriptions are processed by Stripe. We do not collect or store your full card number or other complete payment-card details. Stripe provides us with a customer identifier and limited subscription data (such as plan, status, and renewal date) so we can manage your access. Stripe’s handling of your data is governed by its own privacy policy.
2.4 Information collected automatically
- Authentication cookies. We use cookies that are strictly necessary to keep you signed in and to operate the Service securely.
- Local storage.We store your preferences and a cache of your content in your browser’s local storage so the app loads quickly and works smoothly.
- Server and hosting logs. Our hosting provider (Vercel) processes standard technical data such as IP address and request metadata to deliver and secure the Service.
- Product analytics. We use PostHog to understand how the Service is used (pages viewed, features used) so we can improve it. Our configuration does not store analytics cookies or identifiers on your device; usage of the app while signed in is associated with your account.
We do not use third-party advertising networks or sell your data to advertisers.
3. How we use your information
- To provide, maintain, and improve the Service and your account;
- To calculate and display prayer times, Hijri dates, and reminders you enable;
- To process subscriptions, trials, and payments, and to manage access to premium features;
- To respond to your support requests and communicate service-related notices;
- To keep the Service secure, prevent fraud and abuse, and enforce our Terms;
- To comply with legal obligations.
4. Legal bases (EEA/UK users)
Where the EU/UK General Data Protection Regulation applies, we rely on the following legal bases: performance of a contract (to provide the Service you request); consent (for browser location access and for sending you notifications, which you can withdraw at any time); legitimate interests (to secure and improve the Service); and legal obligation (to meet accounting, tax, and other legal requirements).
5. How we share information
We do not sell your personal information. We share it only with the service providers (subprocessors) that help us run the Service, and only as needed:
| Provider | Purpose |
|---|---|
| Supabase | Authentication, database, and file storage |
| Stripe | Payment processing and subscription management |
| Vercel | Application hosting and delivery |
| Optional “Sign in with Google” authentication | |
| PostHog | Product analytics (usage measurement and improvement) |
| Email provider | Sending and receiving support and account emails |
We may also disclose information if required by law, to protect our rights or the safety of users, or in connection with a merger, acquisition, or sale of assets (in which case we will continue to protect your information under this Policy).
6. International data transfers
We are based in the United States and our providers may process data in the United States and other countries. Where we transfer personal information from the EEA, UK, or Switzerland, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.
7. Data retention
We keep your personal information for as long as your account is active or as needed to provide the Service. When you delete your account, your profile and associated content (tasks, lists, prayer-completion records, and uploaded images) are deleted from our active systems. We may retain limited information where necessary to comply with legal obligations, resolve disputes, or enforce our agreements (for example, transaction records required for tax purposes).
8. Your rights
Depending on where you live, you may have the right to:
- Access the personal information we hold about you;
- Correct inaccurate or incomplete information;
- Delete your information (you can delete your account directly from the app);
- Receive a copy of your data in a portable format;
- Restrict or object to certain processing;
- Withdraw consent at any time (for example, location or notifications);
- Lodge a complaint with your local data-protection authority. California residents may exercise rights under the CCPA/CPRA, including the right to know and delete, and we do not sell or share personal information as defined by that law.
To exercise any of these rights, email us at support@munazzim.app. We will respond within the timeframe required by applicable law.
9. Security
We use industry-standard measures to protect your information, including encryption in transit, access controls, and row-level security so that you can only access your own data. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.
10. Children’s privacy
The Service is not directed to children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.
11. Changes to this Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you. Your continued use of the Service after changes take effect constitutes acceptance of the revised Policy.
12. Contact us
Innoviata IA LLC — support@munazzim.app
Questions about this document? Contact us at support@munazzim.app.