Taqwa Daily is operated by Analytics Compliance & Security Solutions LLC. This policy describes what the app actually does today. We collect as little as the product allows. Your private reflections are stored only on your device and are never sent to us.
Creating an account is optional — the daily lesson, prayer times, the du'a library and the journal all work without one. If you do create an account we store your email address in Supabase Auth, which also handles password hashing; we never see your password. A profile row holds your account id, email, subscription tier (either “free” or “supporter”) and, for web purchases only, a Stripe customer id.
Journal entries, their moods and anything you write in a reflection are stored only in your device's local storage. No Taqwa server endpoint accepts journal content, no database table exists for it, and the journal code makes no network calls at all. The same is true of your Journey history, prayer marks, guided-path progress and completed practices. Because this data is local, clearing site data or deleting the app destroys it permanently — use Export first if you want a copy. Supporter status changes how much of your own history the app displays, never whether it exists, and export and delete always cover everything.
Prayer times need an approximate location. If you grant permission, your coordinates are sent to the Aladhan API to calculate times and to Nominatim (OpenStreetMap) to turn them into a place name. We do not store your coordinates on our servers and we do not keep any location history. Both services are independent third parties with their own privacy policies.
Taqwa Supporter is available as a monthly or an annual subscription. Both unlock exactly the same features and differ only in billing period. On iOS, purchases are processed by Apple through In-App Purchase; we never receive your payment details. Entitlements are managed by RevenueCat, and we identify you to RevenueCat using your Taqwa account id so a purchase can be matched to the right account — RevenueCat therefore receives that identifier along with the purchase and subscription status Apple reports. On the web, payments are processed by Stripe, which stores the payment details; we keep only the Stripe customer id.
To understand whether the product works, we record a small set of named events — page views, sign-up and sign-in completions, checkout starts and core feature use. Each record holds the event name, the path within the app, a timestamp and, if you are signed in, your account id. It contains no journal content, no message text and no advertising identifiers. No third-party analytics or advertising SDK is active in the current release. We do not track you across other apps or websites and we do not sell or share data for advertising.
Notifications are optional. Daily and prayer reminders are scheduled on your device. If you enable push notifications we store a device token and your notification preferences — which reminder types you want, your quiet hours and your time zone — so reminders arrive when you asked for them.
Supabase hosts authentication and our database. Netlify hosts the site and its server functions. Apple processes iOS purchases. RevenueCat manages subscription entitlements. Stripe processes web payments. Aladhan provides prayer times and Nominatim (OpenStreetMap) provides place names. Each is an independent company with its own privacy policy. We do not sell your data to anyone.
Account data is kept while your account exists. You can export your journal as JSON or plain text, and delete individual entries or the whole journal, at any time — no account or subscription is required. Deleting your account cancels any active Stripe subscription, then removes your authentication record and profile; a lapsed or cancelled subscription never deletes anything. Usage-event rows are kept for product analysis but are disconnected from you when your account is deleted, so what remains is not linked to any person. Data held on your device is removed when you delete the app or clear site data.
Taqwa Daily is not directed at children under 13 and we do not knowingly collect data from them.
If this policy changes materially we will update the date above and, where the change is significant, tell you in the app. For privacy questions, data requests or security disclosures, contact us through the Contact page.