1. Our approach
Muslim Flow is built to be private by default. You don’t need to sign in to use the app and most of your data lives only on your device. We do not sell your data we do not show ads and we do not track you across other apps or websites.
2. Data stored on your device (not sent to us)
The following stays on your iPhone unless you choose to sign in for cloud backup:
- Your blocking rules and selected apps.
- Quran reading progress azkar counts dhikr counts prayer tracking and tasks/todos.
- App preferences (language theme onboarding answers such as age range and gender).
- Your answer to the optional period prompt, which pauses prayer rules on the days you tell us you are menstruating.
App selections use Apple Screen Time. When you choose which apps to block Muslim Flow uses Apple’s Family Controls framework. Apple provides these app selections as opaque tokens. Muslim Flow cannot see the names of the apps you select and that information never leaves your device or reaches our servers.
3. Data we receive only if you sign in
Signing in is optional and uses Sign in with Apple. If you sign in:
- We receive a unique Apple user identifier (and if you allow it the name/email Apple chooses to share). You may use Apple’s “Hide My Email” feature.
- We store a backup of your app data listed in Section 2 on our own servers so you can restore it on a new device or after reinstalling.
We use this data only to provide sync and backup. We do not use it for advertising.
4. Religious, health and sensitive data
Your prayer tracking, azkar counts, dhikr counts and Quran reading progress reflect your religious practice. Muslim Flow also has an optional period prompt that records whether you are menstruating so that prayer rules pause for you, and that is health data. We treat both as sensitive data, and under privacy laws such as the GDPR they count as special category data. Here is exactly how we handle them:
- It stays on your device unless you choose to sign in. Signing in is optional, and it is the only thing that sends this data to us.
- When it is synced it is linked to your account and sent over an encrypted connection. We use it only to give you backup, restore and your own stats inside the app. We never use it for advertising, we never sell it and we never share it with anyone.
- Our lawful basis is your explicit consent, which you give by choosing to sign in. You can withdraw that consent at any time by deleting your account from Settings → Account → Delete Account, which erases all of your cloud data.
- Your location is never sent to us. Prayer times are calculated on your device, and your coordinates are not part of what syncs to our servers. When the app needs your city name, Apple’s maps service resolves it, the same lookup Apple Maps does.
- Our analytics never receive any of this. Product analytics are anonymous and carry no detail about your religious activity or your health.
5. Purchases
If we offer paid/premium features purchases are processed by Apple and managed through RevenueCat (our subscription infrastructure provider). We receive purchase status (e.g. whether you have an active subscription) but never your full payment card details. Apple handles payment.
6. Diagnostics & analytics
We use Sentry for crash and error reporting which helps us find and fix bugs. We use PostHog, hosted in the EU, for privacy respecting product analytics: anonymous usage events such as which features are used, never tied to your name, email or account, with no location data and no content (your azkar, todos or reading activity details stay on your device). This data is aggregated/pseudonymous and is not used to identify you personally or for advertising.
7. Notifications
With your permission we send notifications (for example to let you unlock an app after the block screen or reminders tied to your rules). You can disable notifications in iOS Settings at any time.
8. Third parties we rely on
- Apple: Sign in with Apple, Screen Time / Family Controls, App Store purchases, push notifications, and city name lookup for prayer times.
- RevenueCat: subscription management.
- Sentry: crash and error diagnostics.
- PostHog (EU): anonymous product analytics.
- Our own self hosted backend stores your optional cloud backup.
We do not share your data with anyone for advertising or sale.
9. Data retention & deletion
- Local data is removed when you delete the app.
- Cloud data (if you signed in) is kept until you delete it. You can permanently delete your account and all cloud data from Settings → Account → Delete Account in the app. This cannot be undone.
- You may also request deletion by emailing support@muslimflow.app.
10. Children & families
Muslim Flow is suitable for all ages. We collect only the minimal data described above and signing in (the only feature that sends your personal content to us) is optional. If you are a minor please use the app with the guidance of a parent or guardian. If you believe a child has provided us data you’d like removed email support@muslimflow.app and we will delete it.
11. Your rights
Depending on where you live you may have rights to access, correct, export or delete your data. You may also withdraw your consent for us to hold the religious, health and sensitive data described in Section 4, either by deleting your account in the app or by asking us. Contact support@muslimflow.app and we will respond within a reasonable time.
12. Changes
We may update this policy. We’ll post the new version here and update the “Effective date.” Significant changes will be highlighted in the app or on this page.
13. Contact
Questions? Email support@muslimflow.app.