Privacy Policy

1. Scope and responsible party

This Privacy Policy explains how Daily Salaah collects, uses, stores, and protects information when you use the Daily Salaah website or Progressive Web App. For purposes of South Africa's Protection of Personal Information Act, 2013 ("POPIA"), Daily Salaah is the responsible party for the personal information processed through the app.

2. Information we collect

Depending on how you use the app, we may process the following information:

• Account information: your email address, Firebase user ID, authentication provider, sign-in method, and password reset activity. Passwords are handled by Firebase Authentication and are not stored by Daily Salaah in plain text.
• Prayer tracking information: prayer statuses for Fajr, Dhuhr, Asr, Maghrib, and Isha; selected dates; Qasr indicators; Qadhā entries; completion timestamps; and related sync metadata.
• Guest mode information: if you continue as a guest, Firebase may create an anonymous user session. Guest data is linked to that guest session and device, and may not be recoverable if the session or local browser data is cleared.
• Device and app preferences: theme preference, analytics consent choice, install prompt state, recent prayer history used for Tracker charts, streak cache, service-worker cache, browser language, timezone, viewport size, and online or offline state.
• Support messages: information you choose to include when you contact support.

3. How we use information

We use information to:

• provide prayer logging, Qasr tracking, Qadhā tracking, and Tracker views;
• authenticate users and sync signed-in data across devices;
• support guest sessions and local app preferences;
• operate offline support and restore the app quickly through PWA caching;
• protect the service from abuse, fraud, and unauthorized access;
• respond to support, deletion, access, or correction requests;
• measure app usage and errors only where analytics consent has been granted.

4. Legal bases for processing

Where a legal basis is required, we process information because it is necessary to provide the service you requested, because you consented, because we have a legitimate interest in securing and improving the app, or because we need to comply with legal obligations. Analytics is processed only with your consent.

5. Analytics consent

Daily Salaah uses Google Analytics 4 only after you grant analytics consent. You can accept, decline, or later manage consent in Settings. Analytics is configured with analytics storage denied by default, ad storage denied, Google Signals disabled, ad personalization disabled, and IP anonymization enabled.

If you consent, analytics events may include app usage events such as sign-in, sign-up, guest sign-in, sign-out, date navigation, online or offline state, errors, and prayer action metadata such as prayer ID or name, selected date, Qasr flag, previous status, and user type. Analytics does not include your email address, password, full prayer journal, or full Qadhā list.

6. Local storage, PWA cache, and cookies

The app uses browser storage to remember your theme, analytics consent, install prompt choices, recent Tracker history, and streak cache. Firebase Authentication uses browser persistence such as IndexedDB to keep you signed in. The PWA service worker caches app files so the app can load when offline or on a weak connection. Clearing browser data may remove guest sessions, local preferences, cached Tracker history, and offline app files.

7. Third-party services

Daily Salaah uses trusted third-party providers to operate the app:

• Firebase Authentication for email/password sign-in, Google sign-in, guest sign-in, and password reset.
• Cloud Firestore for storing and syncing signed-in prayer and Qadhā data.
• Firebase App Check with reCAPTCHA v3 for abuse protection. reCAPTCHA v3 runs invisibly and may evaluate interaction risk without asking you to solve a challenge.
• Google Analytics 4 for consent-based usage analytics.

These providers may process information in countries outside South Africa. Their processing is governed by their own service terms, privacy notices, and data processing terms, including Google's Privacy Policy and Firebase's Data Processing and Security Terms.

8. Data sharing

We do not sell your personal information. We do not share your personal information with third parties for their own marketing. We share information only with service providers needed to operate, secure, host, authenticate, sync, analyze, or support the app; where required by law; or where necessary to protect users, the public, or the service.

9. Retention and deletion

Signed-in prayer data is retained while your account remains active or until you ask us to delete it, unless a longer period is required for legal, security, backup, or dispute-resolution reasons. Local device data remains in your browser until it is replaced by the app, cleared by you, or cleared by your browser. Analytics consent choices remain stored locally until changed or cleared.

You can update prayer entries in the app. To request complete account or cloud data deletion, contact support using the details below.

10. Security

We use Firebase security rules, authenticated access controls, HTTPS, Firebase App Check where configured, and provider security controls to protect the app. No internet service can guarantee absolute security, so you should use a strong unique password and keep access to your email account and devices secure.

11. Your privacy rights

Depending on where you live, including under POPIA, you may have rights to know what personal information is processed, access it, correct it, request deletion or destruction, object to certain processing, withdraw analytics consent, and complain to a regulator. South African users may contact the Information Regulator (South Africa) if they believe their privacy rights have been infringed.

12. Children

Daily Salaah is not directed to children under 13. If you are a minor, use the app only with permission from a parent or guardian. If you believe a child has provided personal information without appropriate consent, contact us so we can review and delete it where required.

13. Changes to this policy

We may update this Privacy Policy to reflect changes to the app, law, or service providers. The latest version will be posted on this page with an updated effective date. Continued use of the app after a change means you accept the updated policy where permitted by law.