Privacy Policy
simple dhikr app ("the app") is made by Lilac Bread ("we"). It collects only what it needs to save your dhikr counts and let you sign in. It has no ads, no analytics and no tracking, and we never sell your data.
What we collect
| Data | When it's collected | Why |
|---|---|---|
| Email address and display name | You sign up with email, or sign in with Google | To create your account, sign you in and show your name in the app |
| Password | You sign up with email | Only to sign you in. Firebase Authentication stores it in protected (hashed) form; we never see it |
| Your Google account's name and email | You choose "Continue with Google" | Same as above. Google shares these with the app when you agree |
| A random guest ID | You choose "Continue as Guest" | To keep a guest's data separate. No name or email is collected |
| Your dhikrs (name, daily target, colour) and your count for each day, with the time it last changed | You use the app | To show your counts, history, calendar and streak, and to keep them in sync across your devices |
| Your current streak | You count | To show your streak |
| Sign-in records, such as the time of sign-in and your IP address | You sign in | Collected by Google as part of the sign-in service, for security and to prevent abuse |
Some settings stay only on your device and are never sent to us: dark mode, vibration settings, and whether the daily reminder is on and at what time. Reminder notifications are scheduled on your device.
We do not collect your location, contacts, photos, advertising identifiers or app-usage analytics.
Who processes your data
We use these Google services to run the app. Google processes the data on our behalf under its own terms and privacy policies:
- Firebase Authentication handles sign-in. Google may process this data in countries other than your own.
- Cloud Firestore (part of Firebase) stores your profile, dhikrs and daily counts in Google's London, UK data centre region (europe-west2).
- Google Sign-In, if you choose to sign in with Google.
- Google Fonts. The app downloads its typeface from Google's servers, so Google receives your device's IP address when the fonts load.
We do not sell, rent or share your data with anyone else.
How your data is protected
Data travels between the app and Firebase over encrypted connections, and Firebase encrypts stored data. Our database rules let each account read and change only its own data. No system is perfectly secure, but we take reasonable steps to protect your information.
How long we keep it, and deleting it
- We keep your data for as long as your account exists.
- Delete your account in the app under Profile → Delete Account. This permanently deletes your profile, dhikrs, daily counts and streak, and then the account itself.
- Guest accounts can't be signed back into once you log out, so logging out of a guest account deletes its data.
- Deleting a single dhikr removes it from your list. Its past daily counts stay in your history until you delete your account.
- You can also email [email protected] to ask us to delete your account and data. We will do so within 30 days.
- Google may keep deleted data in its backups for a limited time, under its own retention policies.
Your rights
You can see and correct your data in the app at any time, and delete it as described above. Depending on where you live (for example under UK or EU data protection law), you may also have the right to request a copy of your data, to object to how it is used, or to complain to your local data protection authority. To exercise any of these rights, email [email protected].
Children
The app is meant for a general audience and is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has created an account, email us and we will delete it.
Changes to this policy
If we change this policy, we will update it on this page and change the effective date above. If a change is significant, we will also let you know in the app.
Contact
Lilac Bread · [email protected]