The short version
Your du’as stay on your phone. We don’t have a copy of them, and we can’t read them. We don’t show ads, we don’t track you, and we never sell your data.
1. Introduction
1.1 This Privacy Policy explains how My Dua Diary (“My Dua Diary”, “we”, “us” or “our”) handles information in connection with the My Dua Diary mobile application (the “App”) and the website at myduadiary.com (the “Website”, and together with the App, the “Services”). In this policy, “you” means the person using the Services.
1.2 My Dua Diary is the controller of the personal data described in this policy for the purposes of the UK General Data Protection Regulation, the Data Protection Act 2018 and, where it applies, the EU General Data Protection Regulation (together, “Data Protection Law”).
1.3 The App is built so that we need to know as little about you as possible. This policy sets out the little that does leave your device, and why.
2. What stays on your device
2.1 Your du’as, notes, folders, chains, reminders, saved du’as, dhikr history, name, city and prayer times (together, “Device Content”) are stored on your device and are not sent to us. We have no copy of Device Content and no means of reading it.
2.2 If you use iCloud Backup, the backup of your device includes Device Content. That backup is held by Apple under your own Apple Account, is governed by Apple’s privacy policy, and is not accessible to us.
2.3 The App also allows you to create a backup file. Any such file is held by you, wherever you choose to keep it, and is not accessible to us.
3. What we never do
3.1 We do not show advertising, and we do not sell your information or share it with anyone for their own use.
3.2 We do not track you. The App does not access your device’s advertising identifier, does not build a profile of you, does not follow you across other apps or websites, and does not record which screens you open or what you tap.
3.3 The Website sets no cookies and uses no analytics.
4. What leaves your device
4.1 Your account. We do not need to know who you are. When you first open the App, it creates an account identified only by a randomly generated number (the “Account ID”). If you sign in with Apple, we also receive the email address Apple provides, which you can choose to hide behind a private relay address created by Apple. We never send marketing email.
4.2 Guided Du’a. Guided Du’a only runs when you ask it to. We do not store your words or photographs in a form we can read, and no one at Dua Diary sees the content you send or receive. We keep a count of the Guided Du’as you use, so we know how many you have left and what the service costs to run.
4.3 Premium. Apple takes the payment, and we never see your card details. Our subscription provider tells us whether your account has Premium.
4.4 Crash reports. If the App crashes or stops responding, it sends a report of what went wrong and on what kind of device, so that we can fix it. It does not contain your du’as, your name, your email or your Account ID. You can switch crash reports off at any time in the App’s Settings. A report of a fault on our server may include your Account ID, but never your words.
4.5 Location. If you allow the App to use your location, it is used on your device to work out prayer times. To show a city name for where you are, your device asks its own built-in service, which is provided by Apple. Your location is never sent to us.
4.6 If you write to us. We receive your email address and your message, and use them only to reply.
4.7 The Website. Our website hosting provider handles technical information, such as your IP address, only as needed to deliver the Website and protect it from abuse.
5. Why we use it
5.1 We use the information in section 4 only for the purpose given there. Data Protection Law requires us to state the legal basis for each use:
- your account, Guided Du’a and Premium: these are needed to provide the service you asked for (performance of a contract);
- the count of Guided Du’as, crash reports and server error reports: in our legitimate interest in keeping the Services working, secure and affordable to run;
- replying to you: in our legitimate interest in helping the people who use the Services; and
- meeting a legal requirement, where one applies.
5.2 Because My Dua Diary is a prayer app, what you send through Guided Du’a may show your faith. We only send it with your agreement, which you give by choosing to go ahead after the notice the App shows the first time. You can stop at any time by not using Guided Du’a.
6. Who receives it
6.1 We use a small number of service providers. Each acts only on our instructions, under a written contract, and only for the job described:
- a hosting provider in the European Union, which runs our server and database;
- an AI provider in the United States, which runs Guided Du’a;
- a subscription provider in the United States, which tells us whether Premium is active;
- a crash-reporting provider in the European Union, which receives crash reports;
- a website hosting provider, which delivers the Website; and
- an email provider, which carries our correspondence with you.
6.2 Apple handles sign-in with Apple, payments, the App Store, iCloud and the naming of your city under its own privacy policy.
6.3 Where information goes to the United States or another country outside the UK and the European Economic Area, it is protected by the safeguards Data Protection Law requires, such as standard contractual clauses.
7. How long it is kept
7.1 We keep as little as we can, for as short a time as we can:
- your account and the count of Guided Du’as you use: until you delete your account. An account that has never been signed in to is deleted automatically after 30 days without use;
- Guided Du’a requests at our AI provider: up to 30 days, to check for abuse;
- crash reports: up to 90 days; and
- technical logs at our hosting providers: a short period set by each provider.
8. Your rights
8.1 You have the right to ask us for a copy of the information we hold about you, and to ask us to correct it, delete it, restrict how we use it, give it to you in a form you can take elsewhere, or stop using it where we rely on legitimate interests.
8.2 To use any of these rights, write to us at the address in section 13. We will reply within one month, free of charge.
8.3 You can also complain to a data protection authority. In the United Kingdom, that is the Information Commissioner’s Office (ico.org.uk). In the European Union, it is the authority where you live or work.
9. Deleting your account
9.1 You can delete your account at any time in the App, under Settings, then Account, then Delete account. This deletes your account and everything we hold about you, straight away.
9.2 Deleting your account does not cancel a Premium subscription, which belongs to your Apple Account. You can cancel it in your device’s Settings.
10. Security
10.1 Everything sent between the App and our server is encrypted, and access to our systems is restricted.
11. Children
11.1 The Services are not directed at children under 13, and we do not knowingly collect information from them. If you believe a child under 13 has sent us information, contact us and we will delete it.
12. Changes to this policy
12.1 If this policy changes, the date at the top changes with it. Where a change is significant, the App will tell you before it takes effect.
13. Contact us
13.1 If you have any question about this policy, or want to use any of your rights, write to us at: