Privacy policy
Effective 20 October 2026
At Salah Flow, we're committed to protecting your privacy. This policy explains how we collect, use, and safeguard your information.
What we collect
We collect your email address for account creation and updates, prayer tracking data including prayer times, completion status, streaks and statistics, location data (only when you grant permission for prayer time calculations), and authentication details when you sign in through Google or Apple.
How we use it
Your data is used to sync your prayer tracking across devices, send important app updates including launch notifications and beta invitations, calculate accurate prayer times for your location, and improve the app experience based on anonymised usage patterns. We never use your data for advertising or sell it to third parties.
Anonymous usage statistics
To improve the app, we count which screens are opened and which features are used, through PostHog. These counts carry a random ID made on your phone, never linked to your account or email. They can say that a prayer was marked (which one, and on time or late), but never its date, your prayer times, your location or anything about menstruation mode. They are never sold or used for ads.
Prayer times and places
To work out your prayer times, the app sends your approximate position (rounded to about a kilometre) to the Aladhan prayer times service, and to BigDataCloud to show the name of your town. If you type a city instead, its name goes to Open-Meteo to find it. They receive only what they need to answer and nothing that identifies you; we don't store your location on our servers.
Menstruation mode
Menstruation mode stays on your phone unless you have an account. With an account, whether it is on and which prayers are excused sync with your account, like your other prayer records, so they appear on your other devices. They are never included in usage statistics and are deleted with your account.
How we protect it
All data is encrypted in transit and at rest. We use Supabase for secure data storage with industry-standard security practices. Email communications are managed through Loops.so, a GDPR-compliant service. We implement authentication through trusted providers (Google, Apple) with secure OAuth protocols.
Data retention
We retain your data for as long as your account is active. You can delete your account at any time in Settings › Account › Delete account, in the app or at app.salahflow.com; we then permanently delete your personal data within 30 days.
Your rights
You have the right to access your data, request corrections, request deletion, export your data, and withdraw consent for data processing. You can exercise these rights by contacting us at contact@salahflow.com. You can also unsubscribe from emails using the link in any message.
Children
Salah Flow is meant for people aged 13 and over and is not directed at children. We don't knowingly collect personal data from children under 13. If you believe a child under 13 has created an account, contact us at contact@salahflow.com and we will delete it.
Changes to this policy
We may update this privacy policy from time to time. We'll notify you of significant changes via email. Your continued use of the app after changes take effect constitutes acceptance of the updated policy.
Contact
For questions about this privacy policy, contact us at contact@salahflow.com.