Privacy Policy

Last updated: 2026-06-01

Draft. This is a practical draft for development and is not attorney-reviewed legal text. Have it reviewed by a qualified professional before public launch.

Dua (“the app”) helps you track dhikr and duas. This policy explains what we collect, how we use it, and your choices. Questions: support@dua.platox.net (placeholder — replace with your real support contact).

Information we collect

Account information: your email address, and an optional name and/or username.
Authentication: sign-in via email/password, Google, or Apple (when enabled). We store provider account identifiers, not your provider passwords.
Your religious-practice content: dhikr entries you create, goals, and (where applicable) favorites and settings.
Count & progress data: the dhikr counts you record and the progress/totals derived from them.
Sync metadata: a per-device identifier (deviceId) and a per-event identifier (clientEventId) used to sync counts across your devices without duplicating them.

How we use your data

To provide your account and authenticate you.
To store and sync your dhikr, goals, counts, and progress across your devices.
To keep the service secure and prevent abuse.
To send account-related email (verification and password reset) when email is configured.

We do not sell your data

We do not sell your personal information. We do not use your religious-practice content for advertising.

Account & data deletion

You can permanently delete your account at any time from the in-app Account screen. Deleting your account removes your profile and all associated data — your dhikr entries, goals, counts, favorites, and settings — via cascading deletion. This action cannot be undone.

Data retention & security

We retain your data while your account is active and delete it when you delete your account. Access to your data is scoped to your authenticated account and enforced on the server.

Third-party services

We use service providers to operate the app, which may process limited data on our behalf: authentication providers (Google, Apple) and an email provider (Resend) for verification and password-reset messages. (Update this list to match your production configuration.)

App Store privacy labels

For App Store submission, this app's data collection (account email, optional name/username, and app usage/content used for app functionality) should be reflected in the App Privacy “nutrition label.” This section is provided to align that declaration and should be finalized during submission.

Changes to this policy

We may update this policy; material changes will be reflected by the “Last updated” date above.

Privacy Terms Sign in