Privacy Policy

1. What this policy covers

This policy covers the Dua Diary iPhone app and this website (duadiary.app). The two are handled differently, so they are described separately below: the app collects nothing unless you use shared diaries (section 3a), while the website's optional waitlist form does collect an email address.

2. What the app stores, and where

The following are created by you and saved only in the app's own storage on your device:

• Collections and the duas inside them, including any you write yourself
• Personal notes attached to a dua
• Daily reflections
• Your recitation history, repetition counts and consistency record
• Your routines and their reminder settings
• App preferences, such as text size, Arabic style and prayer calculation method

None of this is sent to us, and your personal diary is not synced to any online account of ours. If you turn on iCloud sync in Settings, it syncs privately through your own iCloud account, protected by Apple's encryption, under Apple's Privacy Policy. Shared diaries are the exception — see section 3a.

3. What leaves your device

We would rather be precise than reassuring, so here is the complete list of times any information leaves your phone because of Dua Diary:

• If you type a city for prayer times. When you set your location manually in Settings, the city name you type is sent to Apple's geocoding service to convert it into coordinates. Apple handles that request under Apple's Privacy Policy. Nothing else about you accompanies it, and it is not sent to us.
• If you export your data. Export creates a file and hands it to the iOS share sheet. Where it goes from there is entirely your choice.
• If you share a dua image. The card is rendered on your device and passed to the share sheet, the same way.

• If you subscribe. Dua Diary Premium is sold through the App Store, so the app talks to Apple to load the plans, complete a purchase, and check whether your subscription is still valid. See section 4.

• If you create, join, or add to a shared diary. Shared diaries live on our server. The diary's name, description and the duas people add to it are stored there and shown to everyone who has the link or has joined. See section 3a.
• If you sign in. We store the identifier Apple or Google gives us for you, and your name and email address if you choose to share them. Signing in is only ever needed for shared diaries.
• If you allow notifications for shared diaries. We store your device's push token so we can tell you when a dua is added.
• If you subscribe and sign in. The app sends Apple's signed subscription receipt to our server so it knows whether creating shared diaries is available to you. It carries no payment details.

That is the whole list. The app contains no analytics, advertising, attribution or crash reporting SDKs. The only server of ours it ever contacts is the shared-diaries service described next.

3a. Shared diaries and your account

A shared diary is a diary you choose to put online so other people can add duas to it through a link (duadiary.app/d/…). Everything below applies only if you use this feature.

• What we store. The diary's name, description, icon and settings; each dua added to it, with the optional name and date the person chose to give; who created or joined the diary; and, for people who sign in, the identifier from Apple or Google plus a name and email if shared. We do not store the IP addresses of people who add duas.
• Who can see it. Anyone with the link can add a dua. In a shared diary, anyone with the link can also read and edit the duas. In an dua requests diary, only the owner can read them; people who sign in can see and edit the duas they added themselves.
• Where it is stored. On Cloudflare's infrastructure, which processes it on our behalf under Cloudflare's Privacy Policy. We use it only to run the feature.
• How long. Until the diary or the dua is deleted, or your account is deleted. Deleted items are purged within 30 days.
• Deleting your account. Settings → Account → Delete account removes your sign-in, your push tokens and every dua-requests diary you own. A shared diary that still has other members passes to the earliest member instead of disappearing for them.

Your personal diary on your device is never part of a shared diary unless you add a dua to one yourself.

4. Subscriptions and payment

Dua Diary Premium is an auto-renewable subscription purchased through the App Store. Apple handles the entire transaction.

• We never see your payment details. Your card, billing address and Apple Account credentials go to Apple, never to us. There is no checkout in this app and no payment processor of ours.
• What the app asks Apple. It requests the plans and their prices, and it reads your current entitlement — essentially "is this device's Apple Account subscribed?". That check happens on your device.
• Purchase records. If you never sign in, we hold none: the entitlement is checked on your device. If you sign in for shared diaries, the app sends our server Apple's signed receipt — the product, its expiry date and an anonymous transaction identifier, never payment details — so it knows whether you can create shared diaries, and Apple sends us status updates for that subscription. We cannot connect it to anything in your personal diary.
• Apple's own reporting. Apple gives every developer aggregate sales figures — totals, countries, refund counts. We cannot identify anyone from it, and it is not joined to any app data. Apple's handling of your purchase is governed by Apple's Privacy Policy.

Billing, renewal and cancellation terms are in the Terms of Use. If a subscription lapses, nothing you wrote is deleted — it stays readable and exportable on your device.

5. Device backups

Because your duas live in the app's storage on your phone, they are included in your device's own backups if you back your phone up to iCloud or a computer. Those backups belong to you and are governed by Apple's Privacy Policy, not by us. This is the only way a copy of your content would ordinarily exist off your device.

6. Permissions the app may ask for

Each is requested only when you first use the feature that needs it, and each can be revoked at any time in the iOS Settings app.

• Location — used only to work out prayer times on your device, so a routine set to a prayer window opens at the right moment. Your coordinates are used for that calculation and are not stored by us or transmitted. If you decline, prayer windows fall back to an estimate and the app tells you plainly that it needs your location rather than showing times it cannot vouch for.
• Notifications — used only for the reminders you set up yourself. They are scheduled on your device, so their content never passes through a server. There are no marketing or promotional notifications, and you can have reminders show only "Dua Diary" on the lock screen instead of a collection name.

7. The writing assistant

On iPhones that support Apple Intelligence, Dua Diary can offer to help you express a dua you have started writing. This runs entirely on your device using Apple's on-device model. Your words are not uploaded, are not stored by us, and are not used to train any model. You always see the suggestion first and can keep your own words instead — nothing is changed without your say. The app explains this before the first time you use it.

8. Analytics

Analytics are off unless you turn them on in Settings → Privacy & Data. Even when enabled, the app writes a small number of non-identifying usage events to your device's own system log and nothing more: there is no third-party analytics service, and the events are never transmitted to us or anyone else. We currently have no way to see how anyone uses the app.

9. Your control over your data

• Export — Settings → Privacy & Data → Export my data gives you a copy of everything you have written.
• Delete — Settings → Privacy & Data → Delete all data permanently removes every collection, dua, note, reflection and reminder from the device. It asks you to type a confirmation first, and it cannot be undone.
• Delete account — Settings → Account → Delete account removes your sign-in and the shared diaries you own from our server (see section 3a). "Delete all data" clears this device only; it does not reach the server.
• Uninstall — deleting the app removes its stored data from your device along with it.

10. This website

The site is a set of static pages. It sets no tracking cookies and runs no analytics or advertising scripts, so we do not follow you between visits or across sites.

The one exception is the waitlist form. If you choose to use it, the email address you enter — and your name, if you add it — is submitted through Google Forms and stored in a private spreadsheet only we can open. Google processes that submission on our behalf under its own terms. We use it solely to tell you when Dua Diary is available, we do not add you to any other list, and we do not sell or pass it on. Ask us at any time and we will delete it.

11. Children

Dua Diary is suitable for a general audience and is not directed at children under 13. We do not knowingly collect personal information from children — the app collects none from anyone, and the only information the website collects is an email address you would have to enter yourself.

12. Your rights

If you are in the UK, EU, California or another region with data protection rights, those rights include access, correction, deletion and portability. In practice they apply only to a waitlist email address, since that is the sole piece of personal information we ever hold — your duas are on your device, where we cannot reach them. Write to us and we will act on any such request.

13. Changes to this policy

If the app changes in a way that affects your privacy — for example, if a future version adds optional sync between your own devices — we will update this page and its date before that version ships, and describe plainly what changed.

14. Contact

Questions about your privacy, or about anything on this page: hello@duadiary.app. We would rather answer a question than have you wonder.