Privacy Policy

Introduction

Ja'fari Shia ("we", "us", or "our") operates the Ja'fari Shia platform at https://jafarishia.com, the native Android application on Google Play (package app.vercel.jafria_toolkit.twa), and related APIs (together, the "Service"). We built this Service for the global Ja'fari Shia Muslim community — prayer times, Quran, duas, ziyarat, Islamic calendar, mosque finder, qibla, azan reminders, and related devotional tools.

This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have. It applies to the website and the Android app unless a section says otherwise. By using the Service, you agree to this policy. If you do not agree, please do not use the Service.

Who is responsible for your data

Ja'fari Shia is the data controller for personal information processed through the Service, except where a third-party provider processes data under its own terms (see Third-party services below).

For privacy questions or requests, contact us at [email protected].

Information we collect

We collect only what is needed to run the Service. The categories below depend on which features you use and whether you use the website, the Android app, or both.

• Preferences and settings — theme, language, font size, prayer display options, Hijri moon-sighting offset, Quran/reader display options, and similar choices. On the website these are stored in your browser (localStorage). On Android they are stored on your device (app preferences / local database).
• Location — latitude, longitude, location label, and timezone when you allow location access or enter a location manually. Used for prayer times, qibla, mosque search, azan scheduling, and calendar display. Location for mosque search is sent to our servers only as coordinates for that request. We do not sell location data.
• Device sensors — compass and device orientation for qibla (website and Android), only after you grant permission. Sensor readings are processed on your device for bearing; they are not stored as a history on our servers.
• Reading activity — bookmarks, reading progress, audio position where applicable, and reader display preferences stored locally. If you sign in, this data may sync to your account on our managed database service across website and Android.
• Notes and tasbeeh — content you create stays primarily on your device unless you use account sync where applicable.
• Account information — if you register: email address and credentials (passwords stored hashed). Optional profile fields you provide. Signed-in users may sync bookmarks and reading progress between website and Android via our APIs.
• Notifications and alarms (Android) — if you enable azan or related reminders, the app schedules local notifications and exact alarms on your device. Alarm times are derived from your location and prayer-calculation settings. Notification content is generated on-device; we do not sell notification data.
• Audio playback (Android / website) — Quran and content audio may stream from our media CDN or trusted third-party CDNs when you press play. Playback position for some readers may be saved locally and, if signed in, synced with your account.
• Technical data — standard request logs on our cloud hosting infrastructure may include IP address, device or browser type, pages or API endpoints requested, and timestamps for security and reliability (website and Android clients). We do not use third-party advertising trackers.
• Admin and content operations — authorised administrators may access CMS data; text-to-speech for kids stories sends story text to Microsoft Edge online TTS and stores audio on our media CDN under our configuration.

Android app permissions

The Google Play app (app.vercel.jafria_toolkit.twa) may request the following permissions. You can deny or revoke them in system settings; some features will then be limited or unavailable.

• Internet / network state — load content, prayer data, maps, and audio from our Service and providers.
• Approximate and precise location — prayer times, qibla, mosque finder, and location-based calendar display (only when you grant access or enter a place manually).
• Notifications — azan and other reminders you enable.
• Exact alarms / alarm clock — schedule azan at calculated prayer times (used as core alarm functionality, not for advertising).
• Foreground service (media playback) — keep Quran or content audio playing while the screen is off, with a media notification.
• Boot completed / wake lock / vibrate — restore scheduled azan after device restart and deliver timely alerts.
• Full-screen intent — show azan alerts when the device is locked, where the system allows it.

How we use information

We use collected information to:

• Provide core features: prayer times, Quran reading, duas, ziyarat, Islamic calendar, qibla, mosque finder, azan reminders, biographies, and related tools.
• Remember your settings and, when signed in, sync bookmarks and reading progress across website and Android devices.
• Improve reliability, security, and performance of the Service.
• Respond to support requests sent to [email protected].
• Comply with legal obligations and enforce our terms.

Legal bases (EEA / UK users)

Where the GDPR or UK GDPR applies, we rely on: (a) performance of a contract — providing the Service you request; (b) legitimate interests — security, hosting logs, and product improvement that does not override your rights; (c) consent — location, sensors, notifications, and optional account features where required by law; (d) legal obligation — where we must retain or disclose data by law.

Local storage, cookies, and on-device data

Website: most preferences are stored in your browser localStorage (for example the key jafari-shia-settings) so the app works offline and without an account. We do not use cookies for cross-site advertising. If you sign in, we use session cookies or similar tokens to keep you authenticated.

Android: preferences, offline caches (for example prayer times and content summaries), bookmarks, and reading progress may be stored in on-device app storage (including encrypted preferences and a local database). Clearing app data or uninstalling removes local data.

You can clear website local data via browser settings. Signed-in account data remains on our servers until you delete your account or ask us to delete it.

Third-party services

Some features rely on trusted providers. Each processes data under its own privacy policy:

• Cloud hosting — request logs (IP address, browser type, pages visited, timestamps) for security and reliability.
• Managed database — accounts, editorial content, and optional user sync data.
• Media CDN — images and audio for site and admin content.
• Google Play — distribution of the Android app; Google processes install and update data under Google Play’s privacy policy.
• MapTiler — map tiles for mosque finder and qibla map preview when enabled.
• OpenFreeMap / open map styles — fallback map tiles when our map style endpoint is used without a commercial map key.
• OpenStreetMap / Overpass API — mosque point-of-interest search (coordinates sent in queries).
• Nominatim (OpenStreetMap) — reverse geocoding when detecting location (coordinates only).
• Islamic Network / AlQuran.cloud — Quran audio streaming from their CDN when you play recitation.
• Microsoft Edge online TTS — admin text-to-speech for kids story audio (admin-only; story text sent for synthesis).
• Google Qibla Finder — optional external link only; we do not embed Google services on the qibla page. If you open it, Google's terms and privacy policy apply.

Sharing and disclosure

We do not sell your personal information. We may share data with service providers listed above solely to operate the Service, with professional advisers where required by law, or when compelled by valid legal process. We may share aggregated or de-identified statistics that cannot reasonably identify you.

Data retention

Local browser or on-device app data persists until you clear it or uninstall the app. Account and sync data are retained while your account is active and for a reasonable period afterward for backup and legal compliance. Server logs are retained according to our host's policies, typically on the order of weeks unless needed for security investigations.

You may request deletion of account data by emailing [email protected].

Security

We use industry-standard measures including HTTPS, hashed passwords, and access controls on admin systems. The Android app communicates with our APIs over encrypted connections. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

Children's privacy

The Service includes family-friendly kids content. We do not knowingly collect personal information from children under 13 (or under 16 in the EEA where required) without appropriate parental consent. If you believe a child has provided us personal data, contact [email protected] and we will take appropriate steps to delete it.

International transfers

We and our providers may process data in countries other than your own (including the United States and European Union). Where required, we rely on appropriate safeguards such as standard contractual clauses or equivalent mechanisms offered by our processors.

Your rights and choices

Depending on your location, you may have the right to:

Exercise these rights by emailing [email protected]. We may need to verify your identity. California residents may have additional rights under the CCPA/CPRA; we do not sell or share personal information for cross-context behavioural advertising as defined by those laws.

• Access, correct, or delete personal data we hold about you.
• Object to or restrict certain processing.
• Withdraw consent where processing is consent-based (for example location or notifications) via device or browser settings, or by contacting us.
• Data portability for account data, where applicable.
• Lodge a complaint with your local data protection authority.
• On Android: revoke permissions, disable notifications, or clear/uninstall app data at any time in system settings.

Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the "Last updated" date. Material changes may be highlighted on the Service. Continued use after changes constitutes acceptance of the updated policy.

Contact

Questions about this Privacy Policy or our data practices:

Email: [email protected]

Website: https://jafarishia.com/privacy

Android package: app.vercel.jafria_toolkit.twa