Privacy Policy

This Privacy Policy explains how IMANORA ("we", "our" or "us") handles information when you use the IMANORA Android application or visit our website at imanora.space.

Operator: Zach Solution, the company operating IMANORA.
Privacy contact: contact@imanora.space.

1. Information handled by the IMANORA app

IMANORA provides spiritual features including prayer times, Adhan notifications, Qibla direction, digital Tasbih, daily Adhkar and the 99 Names of Allah. The app also offers optional ways to support its continued development.

• Location information. IMANORA can request foreground location permission to obtain your device location for prayer-time calculations and Qibla direction. Your latitude and longitude are processed locally on your device and are not transmitted to IMANORA's billing backend. Location information may be cached locally on your device. The app also uses the device's native geocoding functionality to display a readable city or country name. You can decline location permission and manually select a city instead.
• Notifications and Adhan. Prayer notifications and Adhan reminders are scheduled locally using Android notification and alarm functionality. The app does not use a remote push-notification server to deliver these prayer reminders. Notification preferences and scheduled notification identifiers are stored locally.
• Language and app preferences. Your selected language, prayer calculation method, madhab, text-size preference, notification settings and other app preferences are stored locally on your device. These preferences are not transmitted to IMANORA's billing backend.
• Anonymous device identifier. The app generates a random anonymous UUID on your device. This identifier is stored using Android-backed secure storage. It is sent to the IMANORA billing backend when needed for purchase verification, entitlement management and purchase restoration. It is not your name, email address, phone number or hardware serial number.
• Google Play purchases. Optional support purchases and ad-free purchases are processed through Google Play Billing. Google handles the payment process and the payment information you provide to Google. When you make or restore a purchase, the app sends relevant purchase information to our backend for verification. This may include the product identifier, Google Play purchase token, order ID and anonymous device identifier.
• Purchase and entitlement records. Our backend maintains records needed to verify purchases and recognise entitlements. These records may include a one-way hash of the purchase token, an encrypted purchase token, order ID, product ID, purchase status, purchase timestamps, verification timestamps, anonymous device identifier and entitlement status.
• Audio and microphone. The app plays Adhan audio locally. It does not provide a voice-recording feature and does not record or transmit microphone audio. A microphone permission may appear in the Android application manifest because of a multimedia library dependency. The audited app code does not use this permission to record audio.
• Advertising and promotional content. The audited app does not include commercial third-party advertising SDKs and does not access the Google Advertising ID. It does not use behavioural advertising or cross-app advertising tracking. The app may display its own promotional Support IMANORA card. This is an internal promotion for IMANORA, not a third-party advertising network. The promotional card is hidden when an active ad-free entitlement is recognised.
• Analytics and diagnostics. The audited app does not include third-party analytics, crash-reporting or telemetry SDKs. No remote analytics or crash-reporting service was identified in the audited implementation.

2. Information collected through this website

The IMANORA website provides information about the app, its features and ways to contact us. The audited website code does not include user accounts, contact forms, analytics tools or advertising scripts. Its fonts, images and other website assets are served from the website itself.

When you visit the website, our hosting infrastructure and hosting provider may process standard technical information such as IP address, requested pages, browser information and access times to deliver and secure the website.

Website hosting logs and their retention are subject to the applicable services and policies of our hosting provider.

If you email us, we receive the email address and message you choose to send. We use this information to respond to your enquiry or privacy request.

3. How we use information

We use information for the following purposes:

• To calculate and display prayer times and Qibla direction.
• To schedule prayer notifications and Adhan reminders.
• To process, verify and restore Google Play purchases.
• To recognise eligible lifetime and subscription ad-free entitlements.
• To protect the purchase-verification system and prevent misuse.
• To maintain and secure the app, website and backend.
• To respond to messages and privacy requests.

4. Third-party services and sharing

IMANORA uses the following external services to provide its functionality:

• Google Play and Google Play Billing: Processes purchases and provides purchase information used to verify transactions.
• Google Play Developer API: Allows our backend to verify and acknowledge purchases.
• Cloudflare Workers and Cloudflare D1: Hosts our billing API and purchase-entitlement database. The backend processes the anonymous device identifier and relevant purchase information, including encrypted purchase tokens and purchase records.
• Website hosting provider: Delivers the IMANORA website and may process standard technical information needed to serve and secure it.

Location coordinates, language preferences and ordinary app settings are not sent to the IMANORA billing backend according to the audited implementation.

We do not operate a commercial advertising network or transmit an advertising ID through the audited app implementation.

5. Data storage and retention

App preferences and cached location information are stored locally on your device. The app uses local storage for ordinary preferences and Android-backed secure storage for the anonymous device identifier and signed entitlement information.

Purchase and entitlement records are stored in Cloudflare D1. Purchase tokens are protected using AES-256-GCM encryption, and a one-way SHA-256 hash is used for purchase-token identification.

Purchase hashes and entitlement records are retained permanently in the audited backend database to support lifetime purchase recognition and restoration after reinstalling the app.

The backend does not store raw IP addresses in its application database. It retains a two-letter country code obtained from Cloudflare's country header for purchase and device reconciliation. Backend application logs are limited to temporary system-error diagnostics and are not intended to contain purchase tokens or personal information.

The retention periods of website hosting logs and email correspondence may also depend on the relevant hosting and email service providers.

6. Your privacy rights and data deletion requests

Depending on the laws applicable to you, you may have rights to request access to, correction of or deletion of personal information, and to object to certain processing.

How to request deletion

To request deletion of information associated with your use of IMANORA, email contact@imanora.space with the subject line IMANORA Data Deletion Request.

In your message, explain that you are requesting data deletion and provide enough information for us to identify the relevant records. For purchase-related requests, this may include your Google Play order reference or information about the device associated with your IMANORA purchase. Do not email passwords, payment-card details or Google Play purchase tokens.

What information can be deleted

We will review requests to delete eligible personal information and device associations held by the IMANORA billing backend, subject to applicable law and the need to verify the request. Information stored locally on your device can generally be removed by clearing the app's data or uninstalling the app; uninstalling the app does not itself delete records already held by our backend.

Purchase and transaction records

Some purchase and entitlement records may need to be retained to verify transactions, prevent fraud or misuse, support purchase restoration, maintain transaction integrity or comply with legal obligations. Where information must be retained, we will explain the applicable reason where required by law. A data deletion request does not automatically cancel a Google Play subscription. You must manage or cancel subscriptions through your Google Play account.

We may ask for information reasonably necessary to verify your identity or locate the relevant records. We will assess and respond to valid requests under applicable privacy laws.

For privacy questions or help with a deletion request, contact contact@imanora.space.

7. Children's privacy

IMANORA is designed as a general Islamic prayer and remembrance companion for a broad Muslim audience, including adults and families. It is not specifically designed or marketed as a children's game or children's social platform.

The app does not provide user accounts, public profiles, chat, comments or user-to-user messaging. It does not intentionally collect children's names, email addresses or voice recordings through its app features.

Parents or guardians who have questions about a child's use of IMANORA may contact us at contact@imanora.space.

8. Security and international processing

IMANORA uses technical measures intended to protect information handled by its services.

• Communication between the app and billing backend uses HTTPS/TLS.
• Purchase tokens stored by the backend are encrypted using AES-256-GCM.
• Purchase-token hashes are used for database identification.
• The app stores its anonymous device identifier and signed entitlement token using Android-backed secure storage.
• Entitlement information is digitally signed so the app can verify its authenticity.

Our backend uses Cloudflare infrastructure, and purchase verification also involves Google services. These providers may process information in countries other than your own, subject to their applicable infrastructure, terms and data-protection arrangements.

No method of electronic storage or internet transmission can be guaranteed to be completely secure.

9. Changes to this Privacy Policy

We may update this Privacy Policy when our app, services, data practices or legal obligations change. The latest version will be published on this page with an updated revision date.

10. Contact us

For questions about this Privacy Policy, data access, correction or deletion requests, contact:

contact@imanora.space