Salah OnBoard — Privacy Policy

Overview

Salah OnBoard ("we", "our", or "the app") is made by Al-Maqdisi Productions LLC. Prayer is personal, and we built the app so that your data stays that way. This policy explains, plainly, what the app does with information on your device, what leaves your device, and to whom. There are no user accounts, no advertising, no data brokers, and we never sell or rent any data. We do not run servers of our own; every service that receives anything from the app is named below, together with exactly what it receives.

Information the app uses

Location

• Purpose: to calculate prayer times and the Qibla direction for where you are.
• On your device: the exact GPS position is used only on your device for the calculation. A copy of your last known position is kept on the device so the app starts quickly.
• What leaves your device: coordinates rounded to about 1 km (two decimal places) are sent to the place-name service (to show "Makkah, Saudi Arabia" instead of numbers) and to the elevation and time-zone service, so the app can name your location and adjust for altitude. Like any online map, the map-tile provider receives requests for the area of the map you are viewing. Your coordinates are never sent to our analytics; the only location information analytics ever receives is a two-letter country code (for example SA), and only when you drop a pin on the map, build an offline flight route (departure and arrival countries), or submit a prayer-time report (see "Usage analytics").
• Compass / motion sensors: used in real time for the Qibla compass; never stored or sent anywhere.

Flight information (optional)

• Purpose: when you enter a flight (airline and flight number), the app looks up the aircraft's position to calculate prayer times for where the plane is.
• What leaves your device: to find your aircraft, the app downloads OpenSky Network's public live-aircraft feed and matches your flight on the device; once found, each refresh asks OpenSky for that one aircraft by its public transponder address (an aircraft identifier, not a personal one). When you search for a city to correct your position, the text you type is sent to the place-name service.
• On your device: flight details and the current flight position are stored on the device only while the flight is active.

App preferences

• Calculation method, madhab, language, theme, notification settings and similar preferences are stored on your device. When you change one, our analytics records which setting changed and its new value (for example "calculation method → Umm al-Qura") so we can see which options matter; nothing else about your preferences leaves the device.

Dua progress and support badges

• Your dua/adhkar streak, hasanaat total and any support badges are stored on your device only and cannot be transferred between devices. Our analytics does record which dua category you open, which duas you complete, how far through a session you got and the hasanaat earned in it (identifiers and counts, never the text you read).

Usage analytics

We collect a small amount of usage data to understand which features are used and to find bugs. It is sent to PostHog (posthog.com), an analytics service. Here is exactly how it works:

• A random, non-identifying ID. When the app is first opened it generates a random ID (a string like anon_…) and stores it on your device. This ID is sent with each analytics event so that we can count returning installs and see how the app is used over time. It is not linked to any account, name, email address, phone number, advertising identifier or anything else that identifies you, so it cannot be linked to you personally — neither we nor our analytics provider has any way to connect it to a person. It is deleted when you uninstall the app (on Android it is also excluded from cloud backups, so it does not follow you to a new phone).
• What is sent: app opens, which screens and features are used, your app language and your device's language-and-region setting (for example en-US), app version and platform (iOS / Android), timing of network requests, and error diagnostics (error type, an error code such as "404", the feature involved, and for an unexpected crash the error's message with paths and addresses removed — never your input or coordinates). On Android, the first launch also records the phone's make and model, Android version, screen class and memory class so we can test on the devices people actually use. Settings changes and dua activity are recorded as described above. A prayer-time report (the optional community time-report feature) is sent only when you tap Submit, and contains the date, your country code, the prayer times the app showed, the times you reported, and your elevation rounded to the nearest 100 m — the details that make the report useful for improving prayer times in that region.
• What is never sent to analytics: your GPS coordinates or city; advertising identifiers (IDFA / GAID); any account, name, email or phone number — we never ask for one (the only free text is feedback you choose to write, below). We do not build a device fingerprint to recognise you across apps or websites; the Android device details above are model-level, not unique. We switch off PostHog's own IP-based location lookup on every event, so no city or coordinates are ever attached to your data. As with every internet service, the request itself reaches PostHog from your device's internet address; we do not store it or use it for anything.
• Feedback you type: if you use the in-app "Share Feedback" form, the text you write is sent to PostHog together with the random ID above so that we can read it. Please do not include personal details in feedback; we do not ask for any and do not need any to act on it.
• Anonymity: because the random ID is linked to nothing that identifies a person, this data cannot identify you. It is never used for advertising, profiling, selling, or tracking you across other apps or websites.

In-app purchases (optional support)

• You can optionally tip to support development. Payments are processed entirely by Apple's App Store or Google Play; we never see card numbers, billing addresses or bank details.
• Purchases are managed through RevenueCat, which receives the purchase receipt and an anonymous app-user identifier it generates; it does not receive your name or email from us.
• A local record of your support level (for badge display) is stored on your device.

Third-party services — the complete list

Every service below receives only what is stated. There are no others.

Data security and retention

• Everything the app stores is on your device. We do not operate servers or databases holding user data.
• Analytics data is held by PostHog under its retention settings; the random ID cannot be linked to you personally by us or by PostHog.
• Uninstalling the app removes all data stored on the device.

Children's privacy

The app does not knowingly collect information from children under 13 and does not require any personal information to function.

Changes to this policy

We will update this page and the "Last Updated" date whenever what the app does changes. The in-app link (Settings → Help & Support → Privacy Policy) always opens the current version.

Contact

• Email: contact@almaqdisiproductions.com
• Support: https://almaqdisiproductions.com/support/salah-onboard/

Your rights

• Access: all data the app holds about you is on your device; analytics data is not linked to you and cannot be looked up by person.
• Deletion: uninstalling the app deletes everything on the device, including the random analytics ID.
• Location: you can deny or revoke location permission in your device settings; the app then falls back to a city you choose.