Privacy Policy

Last updated: August 17, 2026

Noor Journal ("Noor" or "the app") is a Ramadan journal and worship tracker operated by Fitrah Creative Labs LLC ("we", "our", or "us"). Your privacy is important to us. This policy explains what data we collect, how we use it, and your rights.

1. Data We Collect

Account Information: When you create an account, we collect your email address and a display name. If you sign in with Apple or Google, we receive your name and email from those providers. Authentication is handled securely by Supabase.

Worship & Journal Data: Your prayer tracking, Quran reading progress, journal entries, dhikr counts, wellbeing metrics, and other worship data are stored locally on your device only, encrypted at rest. This data is never sent to our servers.

Location: If you grant permission, we use your approximate location solely to fetch accurate prayer times from a third-party API (Aladhan). Your location is stored locally on your device and is not sent to our servers.

Usage Analytics: We record a small set of product events - starting or completing a muhasaba session, completing a station, viewing the upgrade screen, and completing a purchase - so we can understand how the app is used and where to improve it. Each event is stored with a randomly generated device identifier, your account identifier if you are signed in, your platform, and the app version. These events never contain your journal entries, reflections, prayer records, or any other personal content.

2. How We Use Your Data

• To authenticate your account and maintain your login session
• To provide accurate prayer times based on your location
• To measure how the app's features are used so we can improve them

We do not use your data for advertising, and we do not build advertising or behavioural profiles about you. We do not sell or share your personal data with third parties.

3. Data Storage & Security

• Account authentication is handled by Supabase with industry-standard security practices
• All worship, journal, and personal tracking data is stored locally on your device, encrypted with a key derived from your user account
• All network communication uses HTTPS/TLS encryption

4. Third-Party Services

• Supabase: Provides authentication and hosts our usage analytics. Your email, account details, and the product events described above are stored securely in Supabase's infrastructure
• Aladhan API: Used to fetch prayer times based on your location. No personal data is shared - only latitude and longitude coordinates
• Apple / Google Sign-In: If you choose to sign in with Apple or Google, authentication is handled by their respective services under their own privacy policies

5. Permissions

• Location: Optional. Used only to provide accurate prayer times
• Notifications: Optional. Used only to remind you about iftar dua and Quran reading
• Biometrics (Face ID / Fingerprint): Optional. Used only to unlock the app securely. Biometric data never leaves your device

6. Data Retention & Deletion

Your on-device data can be deleted at any time by clearing the app's data or uninstalling the app. To delete your server-side account and associated data, please contact us at the email below.

7. Children's Privacy

Noor is not directed at children under 13. We do not knowingly collect data from children under 13.

8. Your Rights

You have the right to access, correct, or delete your personal data. Since most data is stored on your device, you have direct control over it. For server-side account data, contact us using the details below.

9. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be reflected on this page with an updated date.

10. Contact

If you have questions about this privacy policy, please contact us at: privacy@noorjournal.app

Fitrah Creative Labs LLC
www.fitrahcreativelabs.com