Privacy Policy

Sirat ("Sirat", "we", "us") is a mobile application for Islamic remembrance — dhikr walks, prayer times, Qur'an and hadith listening, and optional community features. This Privacy Policy explains what we collect, why, and your choices. The app is operated by Strategic Services Group, LLC.

If you do not agree with this policy, please do not use Sirat.

1Information we collect

Account information. When you create an account we store your email address and, optionally, a display name, username, and avatar image. We use Supabase (and, if you choose it, Sign in with Apple) for authentication.

Phone number (optional). You may add a phone number in Settings so friends can find you. It is used only for friend discovery, is never shown on your profile or to other users, and you can remove it — or turn off discoverability entirely — at any time.

Contacts (optional). If you use "Find friends from contacts," the app reads the email addresses and phone numbers in your address book and sends them securely to our server to check for matches against members who have chosen to be discoverable. Your contacts are matched transiently and never stored; results show only members' public profiles (name, username, avatar).

Location. With your permission, we use your device location ("when in use") to calculate accurate prayer times for your area and to show local walking weather. Your approximate coordinates are sent to third-party services (Aladhan for prayer times, OpenWeather for weather) to return this data. We do not continuously track your location in the background.

Motion & fitness (steps). With your permission, we read step counts from your device's motion sensor during an active walk so we can show and save your steps for that walk. We do not access other health data.

Activity & content you create. Dhikr counts, completed walks, streaks, goals, intentions ("niyyah"), prayer-method preferences, and—if you use the community features—friend connections, circles you create or join, and reports you submit.

Usage & diagnostics. We use PostHog (product analytics) and Sentry (crash and error reporting) to understand how the app is used and to fix problems. This includes app events, device type, OS version, and crash logs.

Information from other users. If someone invites you to a circle or follows you, we associate that connection with your account.

We do not sell your personal information.

2How we use your information

• Provide core features (prayer times, weather, dhikr walks, Qur'an/hadith).
• Maintain your account, streaks, achievements, and preferences.
• Operate community features (friends, circles, leaderboards).
• Keep the app secure, prevent abuse, and respond to reports.
• Improve the app through analytics and fix crashes.
• Communicate with you about your account or important changes.

3How information is shown to other users

If you use the community features, your display name, username, and avatar may be visible to other users (for example in friend lists, circles, and the leaderboard). Your email address, phone number, location, goals, and intentions are private and are never shown to other users. Friends can find you by exact email or phone match only if your Discoverable setting is on; partial searches are not possible. You can block and report other users from within the app.

4Third-party services

We share the minimum necessary data with service providers that help us run the app. Each processes data under its own terms:

5Data retention

We keep your information while your account is active. When you delete your account (Settings → Delete account), your account and associated personal data are deleted from our systems. Backups and third-party logs may persist for a limited period before being overwritten.

6Your rights and choices

• Access / correction: view and edit your profile in the app.
• Deletion: delete your account at any time in Settings → Delete account.
• Permissions: you can revoke Location or Motion access in your device Settings at any time (some features will stop working).
• Analytics: [describe any opt-out you offer, or remove this line].
• Depending on where you live (e.g. EEA/UK, California), you may have additional rights to access, port, restrict, or object to processing. Contact us to exercise them.

7Security

We use industry-standard measures including encrypted connections (HTTPS) and row-level security on our database so that users can only access their own data. No method of transmission or storage is 100% secure.

8Children's privacy

Sirat is not directed to children under 13 (or the minimum age in your country), and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

9International users

Your information may be processed in countries other than your own, including where our service providers operate. We rely on appropriate safeguards where required.

10Changes to this policy

We may update this policy. We will post the new effective date here and, for material changes, notify you in the app.

11Contact

Questions or requests: go@siratapp.net.
Strategic Services Group, LLC.