Fitya

1. About This App

Fitya is a private Islamic practice companion app operated by the Fitya Initiative. Access is by invitation only — new accounts require manual approval from an administrator. This policy explains what personal data we collect, why we collect it, and how it is handled.

2. Data We Collect

Account information

• Full name — provided during registration, used to identify you within the group.
• Email address — used for authentication and account recovery.

Usage data

• Task completion records — which daily, weekly and monthly practices you have completed and when.
• Quran recital progress — which ayah you have reached in your continuous recital.
• Prayer time preference — whether you use a postcode or device location to fetch prayer times.

Location data (optional)

• If you choose "Use my location" on the prayer times screen, the app requests your approximate device location. This is used only to look up accurate prayer times for your area via the Muwaqqit API. Your coordinates are stored locally on your device only (AsyncStorage) and are not transmitted to our servers.
• You can alternatively enter a postcode. No location data is required to use the rest of the app.

Push notification token

• If you grant notification permission, an Expo push token is stored in our database. This is used solely to send you reminders for your assigned practices and announcements from the administrator.

3. How We Use Your Data

• To provide the app's core features (task tracking, Quran progress, prayer times).
• To send you scheduled reminders and group announcements via push notification.
• To allow the administrator to manage group membership and assign practices.

We do not use your data for advertising, analytics, or any commercial purpose.

4. Data Storage and Security

Your account data is stored in Supabase (a managed PostgreSQL database hosted in the EU). Authentication tokens are stored securely on your device using the platform's secure storage (Keychain on iOS, EncryptedSharedPreferences on Android). We do not store passwords — only a hashed token managed by Supabase Auth.

Prayer time coordinates and your city name are stored only in your device's local storage and are never sent to our servers.

Qada (missed prayer) data is stored entirely on your device and never transmitted anywhere.

5. Data Sharing

We do not sell, rent, or share your personal data with any third parties for commercial purposes. Your data may be processed by the following service providers solely to operate the app:

• Supabase — database and authentication (supabase.com)
• Expo — push notification delivery (expo.dev)
• Muwaqqit / Aladhan — prayer time calculation (coordinates sent, no account data)

6. Data Retention

Your data is retained for as long as your account is active. If you request account deletion, all personal data associated with your account will be removed from our database within 30 days. To request deletion, contact the administrator at qasim386@gmail.com.

7. Children's Privacy

Fitya is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

8. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and associated data.

To exercise any of these rights, contact us at qasim386@gmail.com.

9. Changes to This Policy

If we make material changes to this policy, we will notify members via an in-app announcement. Continued use of the app after changes are posted constitutes acceptance of the updated policy.

10. Contact

For any questions about this privacy policy or your data, contact:
Fitya Initiative
qasim386@gmail.com