Privacy Policy

This policy explains how we handle your data in Ishraqa. We collect as little data as possible, never sell it, and show no ads.

1. Without an account

Stored on your device only and never sent to our servers: favorites, saved articles, streaks, points and badges, reading goal and book progress, greeting name, interests, theme and notification settings.

2. When you create an account

• Email address: to sign you in with a one-time code. Never used for marketing.
• Your public profile: display name (a pseudonym is fine), photo, bio, region and country, and social links if you add them. These are publicly visible.
• What you post: "Your Culture" posts and images, comments, voice recordings in "Grandma's Wisdom", and articles if you are an Ishraqa writer. Shown publicly under your display name, some after review.
• Your activity: likes, follows, reports and block lists.
• Notification preference and your in-app notification inbox.

Microphone permission is requested only when you tap record. Nothing is recorded in the background.

3. Notifications

• Morning, reading and deadline reminders are scheduled on your device.
• Daily-article, Ishraqa news and account-activity notifications are sent via Firebase using a device notification token, linked to your account only when signed in and removed when you sign out.
• Control each type in Settings, or turn them off in your phone settings.

4. Analytics and crash reports

We use Google Firebase for anonymous usage analytics (screens and events) and crash reports to improve the app. They are not linked to your name or email, and we removed the advertising ID from the app, so it is never collected. Article read counts are aggregate counters that do not record who read.

5. How we use data

Only to run the app: sign-in, content and interactions, follows, notifications, content review and reports, and protecting the community from abuse. We do not sell your data or share it for advertising.

6. Who processes data with us

We do not sell your data or share it for advertising. We rely on a small number of trusted service providers to run the app; they process data on our behalf, only under our instructions, and are bound to protect it:

• Cloud hosting: database, file storage and sign-in, on secure servers in the European Union.
• Notifications, analytics and crash reports: through Google Firebase, including Google Analytics for Firebase. Learn more about how Google uses data.
• Email delivery: only to send your sign-in code.
• Payments: optional support is processed by Google Play; we never see your card details.

We may disclose data if required by law, or to protect the safety of our users.

7. Retention and deletion

• Account data is kept while your account exists.
• Delete your account: Account → Delete account. Your account, public profile, posts, comments, likes, follows, recordings, images and notifications are deleted immediately. Encrypted backups may persist for up to 30 days, then are deleted automatically.
• You can also request deletion through our contact page; we act within 30 days. See Delete account.

8. Your rights

You may access, correct (via "Edit profile") and delete your data, object to processing, or request a copy through our contact page.

9. Children

The app is for a general audience. Accounts are for users aged 13 and over. We do not knowingly collect data from younger children; tell us and we will delete such an account.

10. Security

Data travels over encrypted connections (HTTPS), and database access rules prevent any user from viewing another user's private data or modifying it. We review and test these rules continuously.

11. Changes

If we make material changes we will notify you in the app; the last-updated date appears at the top.

Who we are and how to reach us

We are OtwoX Digital Solutions, the team that builds Ishraqa and looks after your data. For any question or request about your privacy or account, contact us or use Account → Contact us in the app; we reply within 30 days at the latest.