Privacy Policy

ImanLock ("we", "our", or "the app") is committed to protecting your privacy. This Privacy Policy explains how your information is handled when you use ImanLock.

Our Core Principle

ImanLock is privacy-first. The vast majority of your data is stored locally on your device and never leaves it. There are no analytics and no behavioral tracking. Some optional features (AI Chat, Cloud Sync, Accountability Buddy, Dua Board) require sending limited data to our servers — these are detailed below. You can use the core app fully offline without an account.

Information Stored on Your Device

ImanLock stores the following information locally on your device (via SQLite database and SharedPreferences) to function properly:

• Location data: Your approximate location is used solely to calculate accurate prayer times and Qibla direction. It is stored locally and never transmitted.
• Prayer completion records: Which prayers you've completed each day, used for streak tracking and calendar view.
• Streak data: Current and longest streak counts, Haid mode status.
• App lock settings: Which apps you've selected to lock and your lock rule preferences.
• Installed app list (Android only): Read to display the app selection screen. Never transmitted.
• Override log: Records of emergency override usage for accountability purposes.
• Quran progress: Bookmarks, favorites, reading progress, and khatam goals.
• Learning progress: Quran learning levels, XP, badges, quiz results.
• Sunnah tracking: Completion records for daily Sunnah practices.
• Prophet story progress: Chapter reading progress and favorites.
• Umrah journey data: Checklist completion, lap counts, phase progress.
• Fasting entries: Dates, types, and notes for fasting records.
• Calendar events: Personal Islamic calendar events and mood check-ins.
• User preferences: Calculation method, language, theme, notification settings, spiritual goal selection, and other preferences.

AI Chat (Imam AI & Spiritual Companion)

When you use the AI Imam or Spiritual Companion feature, the messages you send and the AI's responses are processed as follows:

• Sent to OpenAI for processing. OpenAI processes your messages under their data processing terms and does not use them to train their models. See OpenAI's policy at openai.com/policies/privacy-policy.
• Stored on our servers (Supabase, hosted in the European Union) so you can resume conversations across devices and so we can enforce safety limits (rate limits, content moderation).
• Linked to your user account.

Content moderation is performed automatically using OpenAI's Moderations API on both your messages and the AI's responses, to block harmful content. No human at ImanLock reads your chat content under normal operation.

You can permanently delete a chat at any time from within the app. Deletion removes the conversation from our servers immediately.

AI responses may be inaccurate. Always verify Quranic citations and rulings with a qualified scholar.

Internet Usage

ImanLock is an offline-first app. Internet is required only for:

• AI Chat: Imam AI and Spiritual Companion (sign-in required).
• Account & Cloud Sync: Optional sign-in for cross-device sync of streaks, prayers, and AI chat history.
• Accountability Buddy: Real-time syncing of buddy stats via Supabase Realtime.
• Dua Board / Shared Reading Plans: Community features that require server connectivity.
• Quran audio downloads: Downloading surah audio files from cdn.islamic.network for offline listening.
• Word-by-word Quran translation: Fetching per-word translations from the Quran.com API.
• Nearby mosques (Prayer Spaces): Optional feature using Google Maps and Supabase for mosque location data.
• Quran audio streaming: If a surah has not been downloaded for offline use.

All other features work completely without an internet connection.

Permissions

Location Permission

Used to calculate prayer times and Qibla direction based on your geographic position. Your location is stored on your device only.

Screen Time / Family Controls (iOS 16+)

Used to provide system-level app blocking during prayer windows via Apple's Family Controls, ManagedSettings, and DeviceActivity APIs. App selection is stored in a shared App Group (group.com.salahlock.salahLock) between the main app and the DeviceActivityMonitorExtension. No data is sent externally.

Usage Access (Android)

Required to detect when a locked app is opened during prayer time. This permission is used only for lock enforcement.

Display Over Other Apps (Android)

Required to show the lock screen overlay when a blocked app is opened during prayer time.

Notification Permission

Used to send prayer time reminders, streak risk alerts, Jumu'ah reminders, and spiritual goal notifications. All notifications are generated locally on your device.

Compass / Magnetometer

Used for the Qibla compass feature to determine prayer direction.

Authentication (Optional, Required for AI)

ImanLock offers sign-in via email/password, Apple, or Google. Sign-in is required for AI Chat (so we can enforce per-user rate limits and prevent abuse) and is optional for cross-device cloud sync, Accountability Buddy, Dua Board, and Shared Reading Plans.

If you choose to sign in via Apple or Google, your authentication credentials are managed by them. We store only a user identifier (UUID) and your email address (used for password reset and account communication) on Supabase.

Data Security

Local data is protected by your device's own security measures (lock screen, encryption). Server-side data (AI chat history, account, buddy pairings) is protected by Supabase's row-level security policies, which ensure your records are only accessible by you when authenticated. All transit is encrypted with TLS.

Children's Privacy

ImanLock is not directed at children under the age of 13. We do not knowingly collect personal information from children.

Third-Party Services

• OpenAI: Processes AI Chat messages (Imam AI and Spiritual Companion). Subject to OpenAI's privacy policy. OpenAI does not train on your data.
• Supabase (EU): Backend for AI Chat history storage, Authentication, Cloud Sync, Accountability Buddy, Dua Board, Shared Reading Plans, and Prayer Spaces. Hosted in the European Union.
• Sentry: Crash and error reporting in production builds. Sends only crash dumps and exception messages — no email, no IP address, no device identifiers, and no chat content. PII collection is disabled.
• RevenueCat: Manages subscription purchases and receipt validation through Apple App Store and Google Play Store. Receives an anonymous app user ID and purchase receipts only.
• Google Maps: Used to display nearby prayer spaces on a map. Subject to Google's privacy policy.
• Quran.com API: Used for word-by-word Quran translation data. No personal data is sent.
• Islamic.network CDN: Used for Quran audio streaming and downloads. No personal data is sent.
• Apple Sign In / Google Sign-In: Authentication providers. Only used if you choose to sign in.

Analytics, Tracking & Crash Reporting

ImanLock does not use analytics, behavioral tracking, or advertising frameworks. We do not collect usage statistics or behavioral data.

We use Sentry for crash and error reporting in production. Sentry receives crash dumps and exception messages only — no email, no IP address, no device identifiers, and no chat content. Crash data is used solely to identify and fix bugs.

Data Deletion

Local data: Uninstalling the app or clearing app data through your device settings deletes everything stored on-device.

Server data (if signed in): You can delete your AI chat history at any time from within the app. To delete your account and all associated server-side data (cloud sync, AI chats, buddy pairings, dua board posts), email support@imanlock.app and we will process the request within 30 days.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated date.

Contact

If you have questions about this Privacy Policy, please contact us through the contact form on our website or email support@imanlock.app.