🌙 Noor — Privacy Policy

• Location is used only on your device to calculate prayer times and Qibla direction. It is never sent to us or to any server.
• Your prayer tracking, bookmarks, favourites, and settings are stored locally on your device. They leave it only if you choose to sign in and turn on cloud sync (see below).
• Noor works fully in guest mode with no account. In guest mode we collect no names, emails, contacts, or advertising identifiers.

Noor offers an optional account so you can back up and restore your data across devices. It is off by default and involves two separate choices:

• Sign in (with Apple, or an email + password) creates an identity only. Signing in by itself uploads none of your data.
• Cloud sync is a second, separate switch. Only when you turn it on do your prayer log, favourites, and settings get backed up to your account. Signed-in with sync off stays 100% on your device.

What we collect for an account: a user id; your email address if you sign up with email (Sign in with Apple lets you hide it behind Apple's private relay); and — only if you enable sync — the data listed above. We do not collect or upload your location. We run no advertising, no third-party ad networks, and no cross-app tracking or advertising identifiers, and we use no third-party analytics SDKs. The only usage data we keep is a small, non-identifying aggregate — see Anti-abuse & aggregate counts below.

How it's protected: account data is stored with our database provider (Supabase), isolated per account by row-level security so only you can read it, and encrypted in transit and at rest.

Your control & retention: you can turn sync off at any time, and you can permanently delete your account and all its server data from inside the app (Account → Delete account & data). We keep synced data only until you delete it.

Prayer logs reflect religious practice; we treat them as sensitive and process them only with your explicit opt-in, solely to provide backup and restore.

If you use the Photo mode of the halal scanner, the photo you take of an ingredient label is sent to our server and then to our AI provider (OpenRouter, which routes to Google Gemini) to read the ingredients and return a screening result. The image is processed to generate the result and is not stored by us. Do not photograph anything private.

The Barcode and Text modes of the scanner do not send your photos to us.

To keep the halal scanner running for everyone, our server keeps two minimal, non-identifying records — neither is analytics, advertising, or profiling:

• Aggregate scan count. We increment a single daily number of how many halal scans happen in total (for example, "scans today"). It is a plain counter with no user id, no account link, no device id, and no record of what you scanned — just a number.
• Guest rate limit. If you use the scanner without signing in, we apply a per-day limit per network address to stop automated abuse of the free AI service. This uses a short-lived daily counter keyed to your IP address, used only to enforce that limit — not to identify you, track you across apps, or build a profile. Signed-in users are identified by their account token instead, and this IP counter does not apply to them.

Noor may occasionally show a promotional card inside the app (for example, highlighting a Noor feature or a seasonal reminder). These cards are authored by Noor's owner and delivered from our own server. They are not third-party ads: there are no ad networks, no auction, no tracking, and no profiling. Showing a card requires no personal data from you and does not report back who saw it.

Noor streams and fetches Islamic content directly from third-party providers, so your device's IP address is visible to them when you use those features:

• Quran translations & tafsir — the Quran API (jsDelivr), Quran.com; recitation audio — everyayah.com. The Arabic Quran text itself is bundled inside the app and read offline (no network request).
• Reciters & radio — mp3quran.net, archive.org, Radio Browser, and the broadcasters' streams
• Hadith — the fawazahmed0 Hadith API (jsDelivr)
• Nearby mosques — OpenStreetMap / Overpass
• Barcode lookups — Open Food Facts

We do not control these providers' own data practices.

Data controller: Noor is operated by Omran Alameri. For any privacy request or question, contact omran.m.alamri@gmail.com.

Legal bases we rely on: your consent for the optional account and for cloud sync (which you turn on in two separate steps, and can withdraw at any time); our legitimate interest in preventing abuse of the free halal-scan service (the guest rate limit and aggregate count above); and performing the service you request when you run a photo scan.

Sensitive data: your prayer logs reflect religious practice. We treat them as sensitive and process them only with your explicit opt-in (enabling sync), solely to back up and restore them. You can withdraw this at any time by turning sync off or deleting your account.

Under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and, for users in the EU/EEA and UK, the GDPR, you have the right to:

• Access the personal data we hold about you;
• Rectify inaccurate data (e.g. your display name or email);
• Delete your account and all its server data — available directly in the app (Account → Delete account & data), or by emailing us;
• Portability / export — request a copy of your synced data in a portable format;
• Withdraw consent at any time (turn off sync, or delete your account);
• Object or restrict certain processing, and lodge a complaint with your data-protection authority (in the UAE, the UAE Data Office).

To exercise any of these rights, email omran.m.alamri@gmail.com. Because guest use involves no account, most rights apply only once you have signed in and there is data linked to you.