Welcome to Al-Bader (also known as Adhkar App). We are dedicated to providing a rich, trustworthy, and spiritually uplifting mobile experience while upholding the highest standards of data privacy. This Privacy Policy details how our mobile application handles information, device permissions, media streaming, community features, and in-app purchases.
1. Information We Collect
A. Account Information (Authentication)
Signing in is optional. When you choose to sign in (for example, to manage your community listings), Android uses Google Sign-In and iOS uses Sign in with Apple; Firebase Authentication verifies the sign-in. The identity provider and Firebase receive the information needed to authenticate your account. We may receive and store:
Your name and email address, when provided by the identity provider. Apple may use a private relay email if you choose that option.
Your profile photo URL, if provided by the identity provider.
A Firebase user identifier (UID) used to associate your account with your own listings and saved progress.
We do not receive your Apple or Google account password. Core features such as Adhkar, Quran reading, Dhikr, prayer times, and radio can be used without creating an account.
B. User-Generated Content & Community Submissions
If you actively submit content to our community modules, we collect the information you provide to publish and manage your listing, allow interested users to contact you, prevent abuse, and respond to reports:
Community listings are shown to other users. Only include contact details and personal information that you intend to publish. If you add a photo or image link to a listing, it is associated with that public listing.
C. Madrasa Mark Sheets and Student Records
If an authorized teacher or madrasa administrator uses cloud mark-sheet features, the app may process the madrasa name, registration number, place, administrator/teacher email, exam and class details, subject names, and student records such as names, roll numbers, gender, marks, and attendance. These records are uploaded to our Cloudflare Worker and Cloudflare R2 storage to create, sync, and review results for the authorized madrasa account. The madrasa email and password used to connect may be saved in local app storage for later sync and sent securely to our service when verification is needed. The person submitting student records is responsible for having the authority and any required consent to provide them. Please submit only information needed for the educational record.
D. Tajweed Student Enrollment (Where Available)
On platforms that provide Tajweed student login or enrollment, we may process the student's name, mobile number, 4-digit login PIN, course enrollment/access status, and an app-installation identifier used to verify the login. The phone number and PIN are sent to our Al-Bader service to verify access; enrollment details and access status are stored in the course system. A successful student session is stored locally on that device. A website enrollment form, where offered, may also collect the name, mobile number, PIN, and payment/order reference needed to register and verify enrollment; the payment provider is shown at checkout. iOS course purchases use Apple In-App Purchase; student PIN login is not used to unlock the iOS course.
E. Automatically Processed Information
When the app connects to our services or external providers, those services may receive your IP address and standard request/network metadata needed to deliver the request and protect service reliability. The Android app also requests a public version file from GitHub to check for updates. We do not use advertising identifiers (IDFA/GAID) for cross-app advertising or tracking, and we do not sell personal information.
F. Alarms, Reminders & Local Preferences
Custom alarm settings (such as titles, trigger times, repeat days, and selected sounds), notification preferences, and downloaded media are stored on your device for app functionality. They are not uploaded to our account database. Location-based prayer-time results may be cached locally to avoid repeated requests. You can remove local data by clearing the app's storage or uninstalling the app; uninstalling also removes local alarms and downloads.
Al-Bader provides access to external Islamic multimedia content, including Islamic Status Videos, Audio Recitations (Adhkar, Surahs), and Live Islamic Radio Streams:
Content Delivery Networks (CDNs): Media files are streamed from Cloudflare R2 and external broadcast providers such as Zeno.fm. These providers receive standard connection data, including your IP address and request headers, when you stream or download content.
Local Caching & Offline Storage: Audio files and status videos may be cached locally on your device storage to allow smooth playback and offline viewing. You can clear this cache at any time through the app settings or by clearing app storage.
No Content Profiling: We do not track, profile, or sell your listening or viewing history to any third-party advertisers.
Content Ownership & Integrity: All religious multimedia content, audio recordings, and status videos are curated strictly for non-commercial spiritual, educational, and inspirational purposes with full respect for copyright and content owners.
3. Device Permissions & How They Are Used
Al-Bader requests specific device permissions solely to provide features you explicitly activate:
Location (When In Use): If you grant location permission and use a location-based feature, the app reads your device's latitude and longitude. The coordinates are sent over HTTPS to AlAdhan to calculate prayer times; to BigDataCloud for country/city lookup where needed; and to OpenStreetMap Overpass or Photon (Komoot) when you search for nearby masjids. These requests also expose standard connection data such as your IP address to the relevant provider. The app does not request or use background/Always location access. Location may be cached locally for prayer-time calculations. You can revoke permission in iOS Settings at any time. Each provider handles requests under its own privacy policy.
Camera: Used when you open the built-in QR Scanner (to scan Al-Bader QR codes) or the Halal Food Checker (to scan product barcodes and packaging ingredients). The camera stream is analyzed locally on-device in real time and is never recorded, saved, or uploaded to our servers.
Photos / Photo Library: Used only after you select a photo for a community listing. The selected content and listing details are submitted with that listing and may be visible to other users. We do not access your photo library without your selection.
Notifications & Alarms: Used for prayer alerts, custom alarms, and daily reminders when enabled. Notification delivery and sound are controlled by your device settings. Alarm schedules and selected sounds are stored locally on your device.
4. In-App Purchases & Subscriptions
Optional digital purchases are billed by the store used to make the purchase. The store processes payment details; Al-Bader does not receive or store your payment card number, bank credentials, or billing password. The app receives purchase product and transaction status needed to provide or restore the purchased access.
Apple In-App Purchase / StoreKit for purchases made in the iOS app.
Google Play Billing for purchases made in the Android app.
Purchase details are used to verify, provide, restore, and support the access you purchased. Refund requests for store purchases are handled through the relevant store.
5. Al-Bader AI Chat
If you use Al-Bader AI, your message and recent messages in the current conversation are sent to the Al-Bader server and processed using Cloudflare Workers AI to generate a response. The chat does not require sign-in, and the app does not save the conversation to your Firebase account; it remains in the current app session until you clear it or leave the screen. Cloudflare processes the text to provide the AI response and may handle it under its own privacy terms. Do not include passwords, financial details, health information, children's personal information, or other sensitive personal information in AI prompts.
AI responses are generated automatically and may be inaccurate. You can choose not to use this feature.
6. Advertising & Tracking
No Third-Party Advertising: Al-Bader does not display third-party banner or video advertisements and does not use advertising tracking networks. We do not sell your personal information to third parties.
7. Third-Party Service Providers
We share only the information needed to operate the feature you use with the relevant service provider. These providers process data under their own terms and privacy policies:
Google Firebase Authentication and Cloud Firestore: For optional sign-in, account-linked community listings, and signed-in streak synchronization.
Google Sign-In and Apple Sign-In: Identity providers used when you choose to sign in on a supported platform.
Apple App Store and Google Play: For processing and verifying in-app purchases on their respective platforms.
Cloudflare Workers, Workers AI, and R2: To operate app APIs, process Al-Bader AI chat prompts, store authorized cloud mark-sheet records, and deliver media files.
GitHub: To deliver some public study files and the Android app version-check file when the app requests them.
PhonePe or Razorpay: For website course payments when one of these providers is shown at checkout. The provider processes payment details; we receive the order/payment status and references needed to confirm enrollment.
WhatsApp and external websites: Only when you choose to open a support or external link. The information you send there is handled by that provider under its own privacy policy.
AlAdhan API: For prayer-time calculations using the coordinates you provide through the location feature.
BigDataCloud: For country/city lookup from coordinates when needed by location-based prayer features.
OpenStreetMap Overpass and Photon (Komoot): For nearby masjid search results when you request them.
Open Food Facts: For looking up ingredient lists and product details when you scan or enter a product barcode in the Halal Food Checker. No personally identifiable information is sent with barcode requests.
Zeno.fm and other media hosts: To stream radio or other media that you choose to play.
8. Data Retention, Account & Data Deletion
We believe in giving you complete control over your personal data:
Self-Service Account Deletion: You can permanently delete your sign-in account and its associated Buy & Sell, Job Vacancies, and Matrimony submissions inside the application by navigating to Profile / Account Settings → Delete Account.
What account deletion removes: The in-app deletion flow deletes your Firebase Authentication account, your Buy & Sell, Job Vacancies, and Matrimony listings, and your signed-in streak record from the active Firebase database.
Retention: We keep account and listing information while needed to provide the service. Community listings are generally assigned an expiry period (typically 30 days) and may remain visible until you delete them, the app's cleanup process removes them after expiry, or your account is deleted. Limited records may be retained where required for security, legal, or payment obligations. Service providers may retain request or backup data under their own retention policies.
Separate course and madrasa records: Tajweed enrollment/student records and cloud mark-sheet records are maintained separately from the general Firebase sign-in account. Deleting that sign-in account does not automatically delete those separate records. Contact us at the address below to request their deletion, or use the authorized controls available in the relevant course/madrasa feature.
Local data: Account deletion does not remove local-only settings, alarms, downloads, or caches from your device. Remove those in the app/device settings or uninstall the app.
Manual request: For help deleting a listing or personal data, email salahudheen9745@gmail.com. We will verify the request and respond as soon as reasonably possible.
9. Children's Privacy
Al-Bader provides religious, spiritual, and educational content for a general audience. Children should not create an account or submit personal information without the required parent or guardian involvement. Teachers or madrasa administrators may enter student records, including records about minors, only when authorized and after obtaining any consent required by applicable law. If you believe a child's information was submitted without proper authorization, contact us so we can review the request.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect feature updates or regulatory changes. The latest version will always be accessible via this URL with the updated revision date.
11. Contact Us
If you have any questions, suggestions, or concerns regarding this Privacy Policy or your data, please contact our support team: