Privacy Policy

Last updated: September 1, 2026

This Privacy Policy explains how Duha ("the app", "we", "us"), a mobile application by kodmap, handles information when you use it on iOS and Android. Duha has no account and no sign-in. Your prayer times are computed on your device, and your worship data stays there.

The short version. Duha is free, ad-free, private and works offline. We do not ask for your name, email or phone number, and we never sell your data. Your location is used on your device to work out prayer times and the Qibla — it is not uploaded and not sold. The only things that leave your device are anonymous usage and crash diagnostics (which you can turn off), your subscription status, and the occasional content you choose to download.

1. Information we process

  • Your worship data — prayer logs and streak, Qur'an bookmarks and last-read position, tasbih (dhikr) counts, khatm (hatim) progress, fasting log, and your settings such as calculation method and reciter. All of this is stored locally on your device in the app's own database. It is not sent to us.
  • Location — used on your device to calculate accurate prayer times, point the Qibla compass toward the Kaaba, and set the Hijri date. Your coordinates are not uploaded to us and never sold. The one exception is the mosque finder — see section 2. You can choose to enter a city manually instead of granting location.
  • Diagnostics — a random per-install device identifier, anonymous product-interaction analytics (which screens and features are used), and crash reports, via Firebase. See section 3a.
  • Purchase & subscription status — whether you have an active Duha Plus subscription, via the Apple App Store or Google Play. We never see or store your payment card details; billing is handled entirely by the stores.

2. The mosque finder, and content you download

Two features reach the network on your behalf. Neither is tied to your identity, because we do not have one.

  • Mosque finder. When you open the mosque finder, the app sends your approximate coordinates to a maps/places provider to return mosques near you and draw the map. That request is anonymous and is only made when you use the feature. If you never open it, no coordinates leave your device this way.
  • Downloaded content. Qur'an audio (reciters), extra translation languages and similar assets are downloaded on demand from a content host when you request them. As with loading any web page, that host can see the request and your IP address; we do not attach your identity to it.

3. What we do not collect

We do not collect your name, email address, phone number, or contacts. Duha has no account, so there is nothing to sign in to and no profile to build. We do not use your data for advertising, and we do not sell it. There are no ads inside your worship.

Prayer and adhan reminders are scheduled as local notifications on your device; they do not require us to know where you are.

3a. Analytics, crash reporting and the device identifier

Duha uses Firebase for two things. Neither involves an account, and neither is used for advertising.

  • Product analytics — which screens are opened and which features are used, so we know what to improve. Events carry no Qur'an bookmark, no prayer log, no location and no personal content.
  • Crash reporting — when the app crashes, the stack trace plus the device model and OS version, so the bug can be found. We do not receive the contents of your screen.

For these purposes Firebase assigns your install a random identifier. It identifies an installation of the app, not you, and we never join it to anything else. Reinstalling the app produces a new one.

4. Third-party services

Duha relies on these processors, each under their own privacy terms:

  • Google Firebase (Analytics, Crashlytics) — usage analytics and crash reports, as described in section 3a.
  • Apple App Store / Google Play — payment processing and subscription state for Duha Plus.
  • Maps/places and content providers — the mosque finder and on-demand downloads described in section 2.

4a. Legal basis, and how to opt out (GDPR / UK GDPR)

If you are in the EU, the UK or Switzerland, we process the limited diagnostics in section 3a on the basis of legitimate interest (Art. 6(1)(f) GDPR): knowing which screens are opened and why the app crashed is what lets us fix and improve it. We do not process any special category of data. Your religious observance stays on your device; we do not receive it.

You can object at any time, and it takes one tap: open Settings → Privacy → Usage statistics and turn it off. Analytics and crash reporting stop immediately on that device — no account, no email, no waiting for us.

We do not run advertising or cross-app tracking, so no consent banner is shown and the App Tracking Transparency prompt does not apply. If that ever changes, this page changes first and you will be asked before anything starts.

4b. Your rights

Wherever you live, you can ask us to confirm what we hold, to correct it, to delete it, or to stop processing it, and you may complain to your local data protection authority. In practice most of it is already in your hands: your worship data never leaves your device, location is used on-device and not uploaded, the usage toggle is yours, and uninstalling ends everything. For the rest, write to the address in section 8 — see also Data Deletion.

California residents: we do not sell or share personal information as those terms are used in the CCPA/CPRA, and we do not process it for cross-context behavioural advertising. The same toggle and the same contact address serve as your opt-out and your request channel.

5. Children

Duha is suitable for all ages and is not directed at children under 13 in a way that collects their information. We do not knowingly collect personal information from children.

6. Your choices and your data

Because your worship data lives on your device, you control it directly. Usage statistics can be turned off in Settings → Privacy (section 4a). Location permission can be revoked in your system settings at any time; you can enter a city manually instead. Uninstalling the app removes all local data. See Data Deletion for the full picture, including subscription data.

7. Changes to this policy

If this policy changes materially — in particular if we begin collecting a new category of data, or add a processor — we will update this page and change the date above.

8. Contact

Questions about this policy: Contact.