Privacy Policy for Mamoolat

Last updated: August 2, 2026

Mamoolat ("the app", "we", "us") is a daily spiritual-practice logging app. This policy explains what information the app collects, how it is used, and who can see it.

Information we collect

To create an account, you choose a username, a PIN, and a display name. We do not ask for your email address, phone number, or real identity. The PIN is stored only as a one-way cryptographic hash — we never store or can see your actual PIN.

Once you're using the app, we store the daily practice entries you log (for example: prayers, Qur'an recitation, azkar counts, sleep and wake times, and an optional one-line reflection), your timezone and preferred day-boundary time, and, if you enable notifications, a push-notification token so we can deliver reminders.

We do not collect precise location, contacts, photos, or device identifiers beyond what's needed for push notifications. The app contains no advertising or analytics SDKs and does not use an advertising ID.

How your information is used

• To save your daily log and sync it across your own devices.
• To show your practice history back to you (e.g. "23 of the last 30 days").
• To send you a local daily reminder, and, if applicable, push nudges from your murabbi (teacher).

Who can see your data

By default, only you can see your logged data. If you join a murabbi (a teacher) using an invite code, that specific relationship gives your murabbi visibility into your practice log, consistent with the app's core purpose:

• Today's entries: your murabbi can see which items you have marked or left unmarked, and their values.
• Past days: your murabbi can see the full detail of what you logged.

This visibility exists only between a student and their own murabbi — never publicly, and never between other students. There are no leaderboards, streaks, or comparisons between users anywhere in the app.

We do not sell your data, share it with advertisers, or share it with any third party for marketing purposes.

Where your data is stored

Your data is stored locally on your device (so the app works fully offline) and synced to our server, hosted on Cloudflare's infrastructure, over an encrypted (HTTPS) connection.

Data retention and deletion

We retain your data for as long as your account is active. You can request deletion of your account and all associated data at any time by emailing us at the address below; we will process deletion requests within 30 days.

Children's privacy

Mamoolat is not directed at children and is not designed to collect information from children.

Changes to this policy

If this policy changes, we will update the "Last updated" date above. Continued use of the app after changes means you accept the revised policy.