Privacy Policy
1. Data Controller
The data controller for this app is Cemal Kurt, a natural person resident in Türkiye. For any request, complaint or question under Turkey's KVKK or the EU's GDPR, please contact us at privacy-islamhanem@novark.tech.
2. What We Collect
2.1. Directly from You
Nothing. The app does not ask for an account, email, name, or phone number. The approximate location used for prayer-time calculations is processed on your device and is not transmitted to our servers.
2.2. Temporarily on Our Servers
Requests you make to our backend (islamhanem-api.novark.tech) — for features like nearby mosque search, hadith search, and menu suggestions — include your IP address and request parameters, kept in access logs for up to 30 days for security and rate-limiting purposes. These logs are not linked to your identity, not used for ad profiling, and not shared with third parties.
- Nearby Mosque search — at the moment of search, your device coordinates are sent to our server, forwarded to the Google Places API, and cached briefly. Coordinates are not linked to an identity.
- Hadith search — the query text you enter may appear anonymised in access logs for ≤30 days alongside the returned result counts.
- Menu suggestion — parameters such as meal type and season are processed in the same way.
2.3. On Your Device
Your prayer log, chosen city, theme preference, notification settings, and all other app data live only in your device's local storage (AsyncStorage). We cannot access them. Uninstalling the app deletes this data.
3. Third-Party Services
3.1. Google AdMob (Advertising)
To keep the app free, we show Google AdMob banner ads. The AdMob SDK may collect, at Google's discretion: device identifiers (IDFA / Advertising ID), IP address, coarse location, crash and performance data, and ad interaction data. How Google uses this data, and the controls you have over it, is governed by Google:
- Google Privacy Policy: https://policies.google.com/privacy
- How Google uses data from sites or apps that use its services: https://policies.google.com/technologies/partner-sites
- On iOS, if you choose Ask App Not to Track in the App Tracking Transparency dialog, you will only be served non-personalised ads.
- Users in the European Economic Area (EEA), United Kingdom, and Switzerland will be shown Google's UMP (consent) dialog on first launch and can withdraw consent at any time. (This experience is being finalised for the first release — it will appear in-app in the next update.)
3.2. Google Places API (Nearby Mosque)
The Nearby Mosque feature forwards your coordinates to the Google Places API via our backend. Google's use of this data is governed by the Google Privacy Policy linked above.
3.3. AlAdhan (Prayer Times)
We use the AlAdhan API for prayer-time calculations. Your approximate location or chosen city is forwarded to AlAdhan via the API. AlAdhan's privacy policy: https://aladhan.com/privacy-policy
4. Notifications
Prayer-time notifications are scheduled locally on your device by the app itself. They do not go through a push notification service (e.g. Apple Push Notification Service or Firebase Cloud Messaging), so we do not collect your device push token.
5. Legal Basis and International Transfers
KVKK (Law No. 6698 on the Protection of Personal Data): the limited data we process (access logs) is processed under the legitimate-interest basis (securing and maintaining the service), without requiring explicit consent.
GDPR (EU Regulation 2016/679): the same data is processed under Art. 6(1)(f) legitimate interest. For advertising data collected by AdMob in the EEA/UK/CH, the legal basis is consent collected via Google's UMP dialog — where consent is not given, only non-personalised ads are shown.
International transfers: Google services are based in the United States; transfers are made under Google's Standard Contractual Clauses (SCCs). Our backend servers are hosted in Germany.
6. Your Rights
Under KVKK Art. 11 and GDPR Arts. 15–22 you have the right to:
- Access your data and receive a copy;
- Request rectification, erasure, or restriction of processing;
- Object to processing;
- Withdraw consent where processing was based on consent (e.g., personalised ads);
- Lodge a complaint with Turkey's KVKK authority (KVKK) or with the supervisory authority in your EU member state.
To exercise any of these rights, write to privacy-islamhanem@novark.tech. We respond within 30 days.
7. Children's Privacy
Islamhanem is not directed at children under the age of 13 (or 16 in certain EU member states). We do not knowingly collect data from anyone under that age. If you believe a child's data has been processed, please contact us and we will delete the relevant records promptly.
8. Data Security
Our backend traffic is encrypted with TLS. Access logs are available only to authorised personnel, and database passwords and API keys are kept off-device. No internet transmission is 100% secure; we do our best with reasonable care, but absolute security cannot be guaranteed.
9. Changes to This Policy
We may update this policy occasionally. Material changes will be posted on this page with an updated "Effective date" and announced in-app. Please revisit this page from time to time.
10. Contact
For any question, complaint or request:
Email: privacy-islamhanem@novark.tech