Privacy policy

Information on your device

Mizwala uses your selected location for prayer times and Qibla. With your permission, device location services provide a foreground location reading. On the website, Mizwala asks your browser for your location only when you tap Use my location or Detect my location, and your browser then asks for your permission. You can instead enter coordinates or choose a city manually. Selected and saved places, language and appearance, prayer and reminder settings, favorites, counters and other saved tool state are stored on your device.

The website also keeps this data in your browser. Elevation results are kept as one entry per place looked up, stored under its coordinates rounded to about 110 m, with no expiry. Amounts you enter in the Zakat calculator are kept only for that browser tab, in its session storage; your browser normally clears them when the tab is closed. The last metal prices and exchange rates it fetched are kept until newer ones replace them, so the Zakat calculator can show them offline; they are public prices and contain none of your entries.

Native reminders and prayer widgets use saved location and settings. Widget information is shared with the app's widget extension. Notifications and widgets can reveal prayer or location information to someone who can see your Home Screen or Lock Screen.

In the native app, location-based calculations and available elevation values are handled locally. The website can look up missing elevation automatically: when the selected place has no elevation and there is no cached result, it sends that place's latitude and longitude, rounded to 3 decimal places (about 110 m), to Open-Meteo. Open-Meteo also receives connection information, including your IP address. Its free API terms describe server logs that can include geographic coordinates and a 90-day deletion period. That is the provider's stated policy, not a deletion action controlled by Mizwala.

Online features and server records

City search

Submitting a city search sends your search text and interface language to mizwala.app. The server receives your IP address and other connection information needed to handle the request. When it cannot reuse a cached result, it sends the search text and language preferences to OpenStreetMap's Nominatim service. Your stored GPS coordinates are not added to this search request.

The search gateway does not forward your IP address, cookies or authorization headers to Nominatim. Nominatim receives the gateway's connection and an app identifier. Search text itself may identify a place or person, so do not enter confidential information. OpenStreetMap handles requests under its privacy policy, which includes service improvement and analysis of search queries. OpenStreetMap may also use anonymized summaries for research and other purposes and make those summaries publicly available.

The gateway keeps a shared, limited cache of normalized search text, language and results in memory, with entries expiring 24 hours after creation. Entries are not stored under your IP address or a user account. We use this shared cache to reuse results and do not combine its entries with IP counters, access logs or support correspondence to identify you. Separate abuse-control counters use a salted hash of connection identity and a 1-minute window. Cleanup is automatic but is not a promise of exact deletion time or removal of every infrastructure copy.

Older versions or previously cached copies of Mizwala may send city searches directly to Nominatim. In that case, Nominatim receives your device's connection information as well as the search text and language.

Prices and website access

Price requests fetch public metal prices and exchange rates from mizwala.app. These requests do not contain your wealth entries or Zakat calculations. The server uses IP information to limit request rates, with a 1-minute active request window and periodic cleanup. It separately fetches and caches public rates from price providers.

Website and price-service access can generate server records containing IP addresses, request paths, times, response status, browser or app information and referrers when supplied. We use these records to operate the service, diagnose problems and protect against abuse. The city-search route has separate controls to suppress routine access and error logging; this is not a claim that every hosting or network system keeps no information.

The web server uses log rotation, configured for 14 daily rotations. Other system records have separate retention rules. Rotation does not guarantee a fixed deletion date for every record, and provider systems or backup copies may retain information for longer. We do not promise that all server data is deleted when a cache entry expires.

Sharing, files and external links

Opening or sharing a Qibla Maps link includes the selected coordinates and destination. Google Maps, your browser, the operating system's sharing service and a recipient you choose handle that link under their own settings and policies. Other external links send you to the destination you select.

Sharing a calculation, coordinates or a summary can include selected coordinates, amounts, results or text from that feature. Review what you share and who will receive it. Recipients may keep or forward their copies.

Settings export creates a JSON file of supported preferences. Active and saved locations are excluded unless you choose to include them. The preview shows what will be exported. Import reads a file you select and lets you review supported settings before applying them. A document or cloud service you choose may store the file. The app attempts to remove its temporary cache copies afterward. On the website, your browser downloads the file, and the page releases its temporary download link after 60 seconds. Mizwala cannot remove the downloaded file or copies saved by another service or recipient.

A problem report lists the platform, interface language and current screen; in the app it also includes the app version and build. You can review and edit the text first. In the app, you send it with the system sharing interface. On the website, Copy report copies the text, and you can paste it into your own email. Mizwala does not automatically upload that report.

Support correspondence

Email sent to feedback@mizwala.app passes through our domain's forwarding service and is received in Gmail. Darya M. is Mizwala's sole support operator and website administrator. The forwarding, email and hosting providers also process information to deliver their services.

Support records include your email address, any sender name, message text, attachments and correspondence you choose to send. We use them to respond to requests, investigate reported problems and maintain the support history. Avoid sending precise locations, financial details or other sensitive information unless needed for your request.

Support correspondence is deleted two years after the last message, unless an open request or a legal duty requires keeping it longer. You can request access, correction or deletion by emailing feedback@mizwala.app and identifying the correspondence concerned. We review requests individually and explain what action we take, any applicable retention obligations and limitations affecting copies outside our control.

Mizwala is for a general audience and needs no account, and a parent or guardian can ask for a child's support mail to be deleted by writing to feedback@mizwala.app.

Your choices and privacy requests

You can change device location and notification permissions in system settings, and website permissions in your browser. You can enter a location manually and choose whether to use city search, follow external links or share information. In the app, prices are requested only when you choose to refresh them. On the website, prices load when the Zakat page opens or you change the currency, and you can refresh them there. Changing permission does not itself remove a location already saved in Mizwala.

You can change supported preferences and saved places in Mizwala. Your browser or operating system also provides ways to remove locally stored website or app data. Clearing data may remove preferences and other saved state. Manage exported files, sent messages and recipient copies separately.

On iOS, Mizwala asks the system to exclude its main settings storage from device backups. Other data, including widget information, may be handled differently. Do not rely on a device backup to restore all Mizwala data; settings export covers only the supported fields shown in its preview. Device and cloud backup behavior also depends on the platform and your settings. See Apple's iCloud backup information.

On the website, your choices are kept in your browser. Whether browser data is part of a device backup depends on your browser, device and settings.

For information controlled by Darya M., send privacy requests to feedback@mizwala.app. We may need information to identify the relevant records and verify that the request concerns you. Your rights depend on applicable law and may include access, correction, deletion, restriction or objection and contacting a data-protection authority. Removing one copy does not establish that every backup or recipient copy has been removed.

Service providers and policy changes

We use hosting and email services to operate Mizwala and receive support requests. Providers may process information in other countries and retain security, delivery or backup records under their own terms. Relevant policies include Vultr hosting, Namecheap's domain and forwarding services, and Google, including Gmail and Maps. A link to a provider policy does not make every provider copy accessible to us or guarantee identical retention practices.

We may update this policy as features or handling practices change. The date above identifies this version. You can contact feedback@mizwala.app about a change or any privacy concern.