Privacy Policy · ibbadah

In short

ibbadah has no account, no login and no server run by us.
We use no advertising, analytics, crash reporting or tracking tools. There will never be ads.
Your location, name, progress and records are kept on your device (and, if backup is on, in the backup in your own Apple or Google account); they are never sent to us.
The Quran reader downloads Mushaf pages and recitations from mp3quran.net; that server sees your IP address.
Purchases are handled by Apple and Google; we never see your payment details.
If you email us, we keep that correspondence only to answer your request (section 11).

1. Who we are

ibbadah is developed and published by Eray Altıntaş, an individual developer based in Türkiye, who is the data controller under the Turkish Personal Data Protection Law No. 6698 (KVKK) and, where it applies, the EU General Data Protection Regulation (GDPR). Contact: info@ibbadah.com.

As explained below, the app sends no personal data about you to us, and we collect no personal data through the app. If you email us, we handle that correspondence as described in section 11.

2. What we do not do

No account and no login. We create no record tied to your identity.
We run no server of our own; the app sends no requests to any address of ours.
No advertising and no ad networks.
No analytics, crash reporting, attribution or tracking SDKs. We do not read your advertising identifier (IDFA or Android advertising ID) and we do not track you across apps or websites.
We do not sell any data, and we share none beyond the recipients listed in section 10.

3. Information processed on your device

The following is stored on your device, in the app's own storage; if backup is on, it may also be included in the backup in your own Apple or Google account (section 8). The app does not send it to us and we cannot see it.

Location (precise or approximate): If you grant permission, used to calculate prayer times, the qibla direction and the nearest mosques. The last location (latitude, longitude, altitude, city name, country code, time zone) is saved for the next launch. Location is only read while the app is open; it is never used in the background. Without permission you can pick your city manually.
Compass and motion sensor: Read live to show the qibla direction; not stored.
Your name: Optional; shown in the greeting on the home screen.
Profile photo: Optional. The single photo you take or pick is copied into the app's folder. The app does not look at the rest of your photo library.
Prayer log: Optional "prayed" marks and excused days.
Dhikr: Counters, goals and dhikr phrases you write yourself.
Learning progress: Completed lessons, scores, your current lesson and the preferences you chose for lessons.
Quran reading records: Last read position, bookmarks, khatm plan, reciter and speed preference.
Favourite duas and settings: Preferences such as notifications, adhan sound and text size.
Downloaded Quran files: Mushaf pages and recitations (section 5).

4. Location and operating system services

Prayer time, qibla and nearest-mosque calculations run entirely on your device. The mosque list is read from an OpenStreetMap data file shipped with the app; no internet request is made for it.

To show the name of your city, your coordinates are passed to your phone's operating system location service:

On iPhone this is Apple's service, governed by Apple's privacy policy.
On Android this is the device's system Geocoder, on most devices provided by Google Play services and governed by Google's privacy policy.

This lookup goes directly through the operating system; your coordinates never reach us.

On iPhone, the nearest-mosque map is shown with Apple Maps; map tiles for the visible area are requested from Apple. Android shows a list instead of a map. When you tap "directions" for a mosque, your device's maps app opens with the mosque's coordinates, not yours.

5. Internet connections

The app connects to the internet only in these cases:

mp3quran.net: when you use the Quran reader, Mushaf pages not yet on your device, the audio file of a surah you play or download, and the timing data for verse follow-along are downloaded from this site. A request contains only what file is wanted (page or surah number, reciter) plus, as with any internet connection, your IP address and standard connection information (including the app name "ibbadah"). No name, location, device identifier or cookie is sent. The connection is encrypted (HTTPS). We do not operate this server: its operator may see your IP address and the requested file in its own logs, which are subject to its own practices. If you do not use the Quran reader, no such connection is made.
Apple and Google system services: the city name lookup and the iPhone map described in section 4.
App Store and Google Play: purchases and subscriptions (section 6).

The app connects nowhere else. No remote (push) notifications are used.

6. ibbadah Premium and payments

Premium purchases and subscriptions are made only through the Apple App Store or Google Play. Payment and billing details are processed by these stores; we have no access to them. The app learns whether Premium is active from the store framework on your device. The stores' own privacy policies apply.

7. Notifications

Prayer time notifications, reminders and similar alerts are scheduled locally on your device. No remote notification service is used and no push token is created. You can turn notifications off in the app or in your device settings.

8. Backups

Manual backup: "Back up progress" (Profil > Ayarlar > Yedekleme) copies your records as text to the clipboard; you decide where to paste it. Your last GPS location and profile photo are not included; a city you picked manually and your name are.
Your iPhone's own backup: if iCloud Backup or a computer backup is on, iOS automatically includes the app's data (including the profile photo) in the backup in your Apple account. Downloaded Quran pages are excluded.
iCloud sync: the app's own iCloud backup is not in use today. When it is enabled, this will be stated on the Backup page, and your progress and settings (excluding your last GPS location; including a manually picked city and your name) will be stored only in your own iCloud account.
Android backup: if Google backup is on, Android may include the app's settings and records (including your name and last saved location) in the backup in your Google account and in device-to-device transfers. The profile photo and downloaded Quran files are excluded.

We have no access to any of these backups. You can manage and delete them in your Apple or Google account settings.

9. Retention and deletion

Your records stay on your device until you delete them or remove the app. Inside the app you can delete:

Your name: clear the field in Profil > Profili düzenle (Edit profile).
Profile photo: Profili düzenle > Fotoğrafı kaldır (Remove photo).
Prayer log: Namaz defteri > Kayıtları sil (Delete records).
Downloaded Quran pages and audio: Kur'an ayarları > İndirilenler (Downloads).
Favourite duas: by removing them from favourites.

Other records (last location, dhikr counters, learning progress, Quran reading records) are deleted from your device when you remove the app. Copies in an iCloud or Google backup are deleted from that account's settings. Since the app sends us no data, there is no app data for us to delete on our side. If you emailed us, we delete that correspondence as described in section 11.

10. How data is collected, legal basis and recipients

How it is collected. The information in section 3 is created automatically on your device to the extent you enter it or allow it while using the app (name field, photo choice, location permission, records you keep by tapping). When a Quran file is requested, your IP address and the request go directly from your device to mp3quran.net; we are not in between.

Purpose and legal basis. This processing lets the app provide the features you ask for (prayer times, qibla, nearest mosque, Quran reader, saved progress). Its legal basis is that it is necessary to perform the agreement formed by the terms of use (KVKK Art. 5(2)(c); GDPR Art. 6(1)(b)). Information that needs an operating system permission, such as location, is only used if you grant it, and you can withdraw the permission at any time in your device settings.

Outside Türkiye. The mp3quran.net server is located abroad; when you use the Quran reader, the request goes from your device directly to that server at your action. Apple's and Google's services may also run on servers abroad.

Recipients. Your personal data reaches only the following recipients, and only when you use the related feature:

The operator of mp3quran.net: IP address and the requested file (section 5).
Apple and Google: city name lookup, the iPhone map, purchases and the device backups you turn on (sections 4, 6 and 8).
Our email provider (Microsoft): only if you email us (section 11).
Cloudflare: when you visit this website (section 12).

We share no data with anyone else and sell none.

11. When you email us

If you write to info@ibbadah.com for support, a question or a rights request, we process: your email address, your name if you give it, your message, any attachments (such as a screenshot) and the device model you mention. This information comes from the email you send, not from the app.

Purpose: to answer your request and fix the bug you report.
Legal basis: it is necessary to answer your request (KVKK Art. 5(2)(c); GDPR Art. 6(1)(b)) and our legitimate interest in fixing bugs in the app (KVKK Art. 5(2)(f); GDPR Art. 6(1)(f)). For rights requests, also our legal obligation (KVKK Art. 5(2)(ç); GDPR Art. 6(1)(c)).
Provider and transfer abroad: info@ibbadah.com is hosted on Microsoft 365 email, provided through GoDaddy. Microsoft's servers are located outside Türkiye, so the email you send us is stored on servers abroad. This is a transfer abroad within the meaning of KVKK Art. 9. If you prefer not to use email, you can send your request by post (section 14).
Retention: we keep the correspondence for at most 2 years after your request is closed, then delete it.
Deletion: if you want our correspondence deleted sooner, just write to info@ibbadah.com. If the law requires us to keep a record (for example the answer to a rights request), we keep only that.

We do not add your address to any list and do not send you advertising or newsletters.

12. This website

ibbadah.com uses no cookies, analytics, advertising or tracking tools. Fonts and images are loaded from the site itself; no request goes to another site. The site is hosted on Cloudflare Pages (Cloudflare, Inc., USA). As with any website, your IP address reaches Cloudflare when your browser requests a page; Cloudflare may process it in its own logs to deliver the page, for security and abuse prevention (outside Türkiye). We have no access to these logs; Cloudflare's privacy policy applies.

13. Children

ibbadah can be used by people of all ages. We do not collect personal data through the app from children, or from any other user. Optional information such as a name or photo is never sent to us; it stays on the device (and, if backup is on, in the device owner's Apple or Google backup), and parents can delete it as described in section 9.

14. Your rights

Under Article 11 of KVKK, by applying to the data controller you have the right to:

learn whether your personal data is processed,
request information about it if it is,
learn the purpose of the processing and whether the data is used for that purpose,
know the third parties in Türkiye or abroad to whom it is transferred,
request correction if it is incomplete or inaccurate,
request erasure or destruction under the conditions of KVKK Art. 7,
request that corrections and erasures be notified to the third parties the data was transferred to,
object to a result against you that arises solely from automated analysis of the data,
claim compensation if you suffer damage from unlawful processing.

Where the GDPR applies, you also have the rights of access, rectification, erasure, restriction of processing, data portability and objection.

The records on your device are already in your hands; you can view and delete them as described in section 9. The only personal data we may hold is your email correspondence, if you wrote to us (section 11).

How to apply. Send your request in Turkish, clearly stating your name, surname, contact details and what you are asking for, by one of these routes:

in writing by post (our postal address for written requests is given when you write to info@ibbadah.com),
by email to info@ibbadah.com signed with a secure electronic signature or mobile signature,
by email to info@ibbadah.com from an address you have used to write to us before and that is in our records.

Your request will be answered free of charge within 30 days at the latest.

Complaints. You must apply to us first. If your request is refused, you find the answer insufficient or you receive no answer within 30 days, you may complain to the Turkish Personal Data Protection Board within 30 days of learning our answer and in any case within 60 days of your application (KVKK Art. 14). If you live in the EU, you may also complain to the data protection authority in your country.

15. Changes

We may update this policy as the app evolves. If a feature changes how data is handled (for example a new service provider or a server), this page will be updated before that feature is released and the effective date above will change. If the Turkish and English versions differ, the Turkish version prevails.

16. Contact

Eray Altıntaş · info@ibbadah.com