Privacy Policy

1. Introduction

SiratSync (“we”, “our”, or “us”) is an Islamic lifestyle application dedicated to facilitating daily spiritual growth, authentic worship, and mindful living. Our features include the Noble Quran (Arabic text + translations), authenticated Hadith collections, accurate prayer calculations, Qibla compass, authentic Duas, digital Tasbih counter, Ramadan mode for prayer and fasting, habit streaks and tracking, traditional litanies (including Aurad-e-Fatiha), public Community sharing, and the Sirat AI Assistant.

We believe personal devotion is sacred. SiratSync is built from the ground up with privacy by design: we do not serve commercial advertisements, we do not track you across other apps, and we never sell, rent, or monetize your personal data.

2. Information We Collect

We collect only the minimum amount of information necessary to deliver authentic, reliable, and secure functionality:

A. Information You Provide Directly

• Account Credentials & Profile: When you register or sign in via Google Sign-In or Email/Password, we store your display name, email address, and optional avatar URL. This information is used solely to authenticate your account, identify your author profile on community posts, and synchronize your habit streaks, bookmarks, and preferences across devices.
• Community Posts & Interactions: Any text, reflections, duas, or comments you share in the public Community section. Please note that community posts are visible to other registered users. Do not post sensitive personal information, private phone numbers, physical addresses, or financial data in public community contributions.
• Support Messages: If you contact us via email (Siratsync@gmail.com) or WhatsApp, we retain your communication history, email address, and supplied context solely to diagnose bugs and provide customer support.

B. Technical & Authentication Identifiers

• Firebase System Identifiers: Unique user IDs (UIDs) and authentication tokens generated by Google Firebase. These identifiers are strictly functional and used solely for session management, database security rules, and account authorization. They are never used for commercial advertising, user profiling, or cross-app tracking. SiratSync does not integrate Firebase Analytics or commercial tracking SDKs.
• Background Synchronization: The App may execute periodic, lightweight background tasks solely to update local prayer time schedules, refresh upcoming Adhan notification timers, and synchronize streak counts. No additional personal data is collected or transmitted during these background tasks.

C. Location Data (Optional)

We request access to your device location strictly to calculate accurate local Prayer Times and the precise Qibla bearing based on your astronomical coordinates.

• Location access is entirely optional and requested via Android runtime permissions.
• Coordinates are processed locally on your device while the feature is active.
• SiratSync does not store your location history, track your movements over time, or transmit your precise location coordinates to third-party data brokers.

D. Sirat AI Assistant & Chat Data

When you interact with the Sirat AI Assistant:

• Your messages are transmitted securely via encrypted HTTPS to our dedicated backend API server hosted on Render.
• Inference is powered by Groq’s high-speed execution of the open-weights LLaMA language model.
• Active conversation context is temporarily cached in an in-memory Redis instance (hosted on Upstash) to enable natural multi-turn conversations. This cache expires automatically after a period of inactivity.
• Chat conversations are stored in Google Cloud Firestore linked to your account so you can view your personal chat history across app launches. Chat records remain stored until you delete the conversation or delete your account.

E. Local Storage & Offline Content

To enable seamless offline functionality, the App downloads and stores curated resources directly on your local device storage (including Quranic text, English translations, Hadith collections, Aurad-e-Fatiha, and cached prayer calculation schedules). This data remains on your device and does not require cloud synchronization.

3. How We Use Your Information

Collected information is used exclusively to operate and enhance the App:

• To calculate and present accurate prayer schedules, Suhoor/Iftar alerts, and Qibla direction based on your local coordinates.
• To authenticate your identity and synchronize your habit streaks, reading progress, and saved bookmarks.
• To display and manage your public posts, comments, and interactions in the Community section.
• To process user queries through the Sirat AI Assistant and preserve your personal conversation history.
• To deliver reliable, battery-efficient local notifications for prayer times and daily habits.
• To safeguard the community against spam, abusive behavior, and security vulnerabilities.
• To send critical transactional communications (such as password reset emails).

4. Third-Party Services & Data Processors

SiratSync relies only on trusted, industry-standard infrastructure providers to guarantee high availability, low latency, and enterprise-grade data protection:

Commercial Advertising & Data Selling Policy: SiratSync has never sold, rented, leased, or bartered user data to commercial data brokers, advertising agencies, or marketing companies, and we never will. Data is disclosed only if strictly required by lawful subpoena, regulation, or court order.

5. Data Security & Storage

We employ robust technical and organizational safeguards to protect your personal information against unauthorized access, loss, or alteration:

• Encryption in Transit: All communication between the SiratSync mobile application, our Render API backend, and Firebase cloud servers is encrypted using modern TLS 1.3 / HTTPS protocols.
• Storage Security: Cloud data is safeguarded by Google Cloud's hardened data center infrastructure, encrypted at rest, and governed by strict Firestore security rules ensuring users can only modify their own authorized records.
• Access Controls: Administrative access to cloud infrastructure is restricted through multi-factor authentication (MFA) and least-privilege principles.

While no digital system or internet transmission is 100% infallible, we continually review and strengthen our security posture to maintain the sacred trust of our users.

6. Community Content & Public Sharing

When you post reflections, duas, or questions in the Community section, this content is published openly to all registered users of the App. By submitting content, you grant SiratSync a non-exclusive, royalty-free license to display, format, and index your contribution within the App.

All community contributions must adhere to our Community Guidelines. We reserve the right to review, moderate, or remove content and suspend accounts that post inappropriate, abusive, sectarian, or fabricated religious material.

7. Open Data, Dataset Attributions & Credits

SiratSync respects the rigorous work of Islamic scholars, digital preservation projects, and open-source contributors:

• The Noble Quran: Original Arabic Quranic text is in the public domain. English translation is by Umm Muhammad (Saheeh International), sourced via Tanzil.net under the Creative Commons Attribution 3.0 License (CC BY 3.0). Structural Quran data schema is based on rn0x/Quran-Data on GitHub.
• Hadith Collections: Structured Hadith JSON datasets (Sahih al-Bukhari and Sahih Muslim) are sourced from the open Hadith-JSON repository compiled by Ahmed Abdelbaset (GitHub). All classical rights belong to the original compilers and publishers.
• Duas & Supplications: Sourced from authentic classical Islamic supplications and open-source datasets (such as dua.json) for non-commercial educational and devotional usage.
• Aurad-e-Fatiha: Curated traditional litanies included for offline devotional recitation.

If any dataset owner, publisher, or contributor identifies an attribution discrepancy or requests modification or removal of content, we will review and comply promptly and respectfully.

8. Zero Ads & Voluntary In-App Support

SiratSync is completely free of third-party banner ads, popups, and intrusive promotional videos. To support continuous app development and server infrastructure, users may make optional one-time voluntary contributions.

• All voluntary contributions are processed securely through Google Play Billing.
• SiratSync never collects, sees, stores, or handles your credit card numbers, debit card pins, or banking credentials.
• Voluntary contributions do not lock, paywall, or restrict core Islamic features, which remain accessible to everyone.

9. Data Retention & Your Rights

We retain your personal data only for as long as your account remains active or as necessary to provide service functionality. You possess complete autonomy over your data under applicable data protection laws:

• Right of Access & Portability: You may review your profile information directly within the App or request a copy of your stored records by contacting support.
• Right to Rectification: You may edit your profile name and preferences at any time in App Settings.
• Right to Erasure (Account Deletion): You have the right to permanently delete your account and all associated cloud data at any time. You can perform this self-service operation directly inside the App by going to Settings → Danger Zone → Delete Account. For detailed step-by-step instructions, see our Account Deletion Guide. Once deleted, your account credentials, habit streaks, bookmarks, and chat history are permanently purged from our servers.
• Permission Revocation: You can revoke location access or notification permissions at any time via your device’s Android Settings without deleting your account.

10. International Data Transfers

SiratSync utilizes globally distributed cloud infrastructure provided by Google Firebase, Render, and Upstash. As a result, your information may be processed and stored on secure servers located outside of your home country or territory. By accessing or using the App, you consent to the transfer and storage of your information across international facilities in accordance with this Privacy Policy and applicable data protection laws.

11. Children’s Privacy

SiratSync is not directed at children under the age of 13. We do not knowingly solicit or collect personal identifiable information from children under 13. If we discover that a child under 13 has provided personal data without verified parental consent, we will take immediate steps to delete the information from our servers. If you believe a minor has supplied personal data, please contact us immediately at Siratsync@gmail.com.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect modifications in our features, technical infrastructure, or legal obligations. When changes are made, we will update the “Last updated” date at the top of this page. We encourage you to review this policy periodically. Continued use of SiratSync following posted revisions constitutes your acceptance of the updated terms.

13. Related Agreements & Cross-References

For comprehensive terms governing platform usage and community standards, please review our complementary policies:

• Terms of Service: Legal agreement covering eligibility, permitted use, AI disclaimers, and liability limits.
• Community Guidelines: Standards of etiquette (Adab), allowed topics, and zero-tolerance violations.
• Account Deletion Guide: Walkthrough on permanently removing your account and data.

14. Contact Information

If you have questions, feedback, or privacy concerns regarding this Privacy Policy or your personal information, please reach out to us: