This Privacy Policy explains how the Muslim Widgets Android application (“Muslim Widgets,” “we,” or “the app”) handles information. Privacy questions and deletion requests can be sent to info@iyonya.app.
Optional foreground location for prayer tools
When you choose the prayer tools, Muslim Widgets may request approximate or precise location permission while the app is open. To request prayer times, the app sends latitude and longitude, the requested calendar month, and your calculation preferences to AlAdhan at https://api.aladhan.com over HTTPS. AlAdhan receives these coordinates and network information such as your IP address to return the prayer calendar. The app caches the returned calendar and location preferences on your device; Qibla direction calculations and prayer history also stay local. Coordinates are not added to analytics, advertising or purchase attributes. The app does not request background location or run a location foreground service. Location permission is optional and may be revoked in Android settings; the remaining reading, Dhikr, and widget features remain available.
1. Information stored on the device
Muslim Widgets stores reading progress, favorite ayahs, selected Quran topics, dhikr counts and goals, streaks, theme and font choices, language selection, reminder preferences, onboarding status, and widget state in local application storage. This information supports the features selected in the app. Android backup is disabled for this release.
Clearing Muslim Widgets storage or uninstalling the app removes this local information. Purchase records held by Google Play or Superwall are retained under those providers’ policies and legal obligations.
2. Purchases and premium entitlement
Google Play processes payments. Muslim Widgets does not receive full payment-card or bank details.
Superwall is the app's sole in-app purchase and premium-entitlement provider. It processes a randomly generated anonymous profile identifier together with product, transaction, subscription, price, currency, and access level information. This is used to show products, complete and validate Google Play purchases, restore access, prevent purchase fraud, maintain premium status, and provide aggregate purchase reporting. The app does not provide Superwall with a name, email address, or custom account identifier.
3. Campaign attribution and measurement
Muslim Widgets uses Superwall to operate premium purchases and provide subscription reporting. Superwall is the app's sole purchase and premium-entitlement authority. It requests products and completes purchases and restores through Google Play Billing, validates the resulting transactions, and updates the app's premium access level.
Superwall may process an anonymous profile identifier, app/device/SDK metadata, and subscription-event data. The app disables Superwall's external-data-collection option, blocks the Google Advertising ID permission, and does not send Superwall a name, email address, or custom account ID. Service requests can still expose network information such as an IP address to the receiving provider.
When an advertising integration is enabled in the Superwall dashboard, Superwall may forward configured pseudonymous subscription and campaign-measurement events to that provider, including Meta. These events are used to measure campaign performance and return on advertising spend.
The Android app also uses the TikTok Business App Events SDK for TikTok campaign attribution. The SDK
automatically reports app install and launch events, and the app reports a CompleteTutorial
event once after onboarding finishes. TikTok may process an app-scoped anonymous SDK identifier, Play
Install Referrer and campaign identifiers, event timestamps, app/device/operating-system/SDK metadata, and
network information such as IP address for attribution, advertising measurement, fraud prevention, and
service operation.
The TikTok SDK is configured not to collect the Google Advertising ID, not to auto-track Google Play purchases, not to send enhanced-data-postback events, not to run SDK monitoring, and not to log the optional two-day retention event. Muslim Widgets does not directly send TikTok a purchase, subscription, trial, plan-selection, checkout, Quran-use, or content-view event.
The Meta App Events SDK measures app activation and automatically detected Google Play purchase events for Meta advertising campaigns. It can process app-instance identifiers, product and transaction details, price, currency, event times, device/app/SDK metadata, and network information. Meta Advertising ID collection is disabled. The app does not add manual Meta purchase events or transmit onboarding answers, religious content, names, or email addresses to Meta.
The Meta SDK also sends crash reports and app-not-responding (ANR) diagnostics to Meta to identify and fix SDK reliability problems. These reports can include a stack trace, failure reason, event time, device model, operating-system version, and app version. Diagnostic reports may be retained for analysis rather than processed only in memory for a single request.
Muslim Widgets does not send Quran or ayah content, selected topics, favorites, dhikr activity, reminder content, support messages, a name, an email address, or the Google Advertising ID for campaign measurement. Android advertising and Privacy Sandbox permissions are blocked in the release configuration.
4. Application updates
Production builds may use Expo EAS Update to deliver compatible application code and asset updates. Update requests can process the device operating system, app and runtime versions, project and update identifiers, a randomized installation token, network request information, and operational error or performance data required to deliver and maintain updates.
5. Quran reminders and notifications
If notification permission is granted, Muslim Widgets schedules Quran reminders on the device. Reminder preferences and scheduled verse content are kept in local application storage. The app does not request an Expo or device push token for these reminders.
6. Sharing and external services
When the system share action is selected for an ayah, Android sends the chosen text only to the destination selected by the user. Muslim Widgets does not receive the resulting message or destination.
The app contains links to Quran source pages, legal pages, purchase management, and support pages. Opening a link transfers the request to the selected browser or Android service, whose privacy terms then apply.
Google Play, Superwall, TikTok, Meta, and Expo process information for the purposes described above. Their own privacy terms govern their independent processing. This policy must be reviewed if a new provider or provider integration is enabled.
6a. Optional Muslim Widgets Android AI chat
Android AI chat is available only when the service is enabled and configured for this App. Before sending a message, you must separately allow AI sharing. If you allow sharing and send a message, your current message, selected chat language, and a bounded recent conversation context are sent through our Cloudflare-hosted gateway to OpenRouter and Alibaba Cloud's Qwen model service to produce the reply. The context is limited to the latest five exchanges and the current message, subject to an overall size limit. The language selection is sent with each request. This optional service requires network access and verified Premium access or separately authorized AI reviewer access.
The App does not automatically attach your local profile name, faith or onboarding answers, saved ayahs, reading or Dhikr activity, prayer coordinates, or advertising-measurement data to AI requests. Anything you choose to type, including religious beliefs or personal details, becomes part of the message and may appear in later conversation context or in the generated answer. Avoid including information you do not want these providers to process. The providers process messages under their own applicable terms; provider retention may apply. We do not promise zero data retention, anonymity, or end-to-end encryption. See the Cloudflare Privacy Policy, OpenRouter Privacy Policy, and Alibaba Cloud Privacy Policy.
Chat messages, draft text, and replies are held in the App's current session memory rather than saved as a chat history on your device. Our gateway does not store or log ordinary chat prompts or replies. The separate, voluntary report process below is an exception for an answer you explicitly choose to submit for review. Network providers can see technical connection information, including your IP address, and their own retention practices may apply.
6b. Android AI access and abuse prevention
To protect AI access, the native Android module sends purchase proof and Google Play Integrity information to our gateway for verification with Google. This can include the package, app signing certificate and version, app-recognition and licensing verdicts, device-integrity verdicts, request hash and time, and the purchase token and product identifier needed to verify access. These proofs are used by Muslim Widgets and Google for access verification and fraud prevention; they are not included in requests to OpenRouter or Alibaba Cloud.
A private key kept in Android Keystore signs requests. Muslim Widgets uses pseudonymous installation and purchase references, protected by keyed hashing where applicable, request counters, quota and cost records, and short-lived authorization for approved AI review access to prevent replay and enforce service limits. These security records do not contain the ordinary chat text, but they are not fully anonymous and can outlast a chat session. Private signing keys, purchase and Integrity proofs, and server or model-provider credentials are not exposed to the App's JavaScript chat interface. A reviewer code you enter is processed to request limited access; it is not sent to the AI model providers.
6c. Reporting an Android AI answer
When Android AI reporting is available, use the in-app Report control beside an answer, select a reason, and review and confirm the submission. With your AI-sharing consent and this separate confirmation, the App sends only the selected AI answer, selected reason, chat language, and a signed response receipt, together with the technical information needed to authenticate and protect the submission. It does not automatically attach your question, the full conversation, or your local profile. An answer may itself repeat information you typed; check the selected text before confirming.
Reports go to our private moderation inbox hosted on Cloudflare, not to the AI model providers for another inference request. We use them to investigate objectionable answers and improve safety and moderation. Reports have a 30-day expiry and automated cleanup. The report service applies separate abuse-prevention limits. Reporting a previously received answer does not require renewing Premium or AI reviewer access, but the response receipt must still be valid. This description does not mean the service is enabled in every App version.
7. Retention and deletion
Local information remains until it is reset in Muslim Widgets, app storage is cleared, or the app is uninstalled. Service providers retain operational and purchase information under their documented retention and legal requirements.
To request deletion help for a Superwall record, email info@iyonya.app. Proof of purchase or other information may be requested only as needed to locate the correct record. Deleting a provider record does not erase transaction records that Google Play must retain.
Clear chat removes the current on-device conversation. Revoking AI sharing stops further AI chat and report submissions until you allow sharing again and clears the displayed conversation. These controls do not erase provider-held records, security or quota records, or a report you already confirmed. For an AI privacy request, use the contact above without sending unnecessary chat text.
8. Security
Network communication with the services described above uses encrypted connections. Access to service data is limited to operational needs. No method of transmission or storage can be guaranteed to be completely secure.
9. Children
Muslim Widgets is a general-audience Quran utility and is not directed specifically to children. A parent or guardian should supervise use and purchases by a child where required by local law.
10. Changes and contact
This policy may be updated when the app or its providers change. The current version will be published at the privacy URL shown in Muslim Widgets.
Contact: info@iyonya.app
Website: https://iyonya.app/