Privacy is an amanah (trust), and we treat what you share with us as such. This policy explains what personal data Sabiqoon ("we", "us") collects, why, who can see it, how long we keep it, and your rights. Contact: salam@salsabiltechnologies.com.

1The short version

We collect only what we need to run your character-building journey: your account, your progress, your answers, your habits and your partners.
Your answers and reflections can reveal your religious beliefs and practice. We treat them as sensitive data, and never share them with partners or sell them.
Accountability Partners see a limited summary of your progress (section 5). They never see your reflections or answers.
We do not show ads, do not sell personal data, and do not track you across other companies' apps or websites.
You can delete your account from inside the app at any time. When you delete your account, your data is permanently removed from our systems and cannot be recovered (see section 8).

2Data we collect

a) Data you give us

Data	When	Required?
Email address and password (stored securely, never in plain text)	Email sign-up	Yes, for email accounts
Name, email, and a unique identifier from Apple or Google	Sign in with Apple / Google	Yes, for those methods
Display name	Sign-up, Edit Profile	Yes
Profile photo	If you choose to add one	No
Answers to Gem exercises: selections, rankings, sliders, chips, and free-text reflections	As you complete Gems	Needed to use Gems
Habit text, habit start/end dates, and each day you mark a habit done or undo it	Habit Streams and ad-hoc habits	Needed for habits
Daily reminder time and whether daily reminders are on	Profile settings	No
A partner's email address	When you send an invitation	Only if you invite
Accept, decline, remove and block actions; Pokes and Celebrates	Social tab	Only if you use them
Messages you send to salam@salsabiltechnologies.com	When you contact us	No

b) Data collected automatically

Data	Purpose
Account identifiers (user ID), account created and updated dates, last activity date	Operate your account, show streaks
Progress: Qualities started, current Gem, Gems completed and when, Quality status	Resume where you left off, unlock content
Device time zone	Calculate your "today", streaks, reminders, and partners' once-a-day limits
Push notification token, platform (iOS/Android), last active time	Deliver notifications
Notification history (type, related user and name, read/unread) and send status	Show your in-app notifications, retry failed sends
App usage events, linked to your Sabiqoon user ID (never your written answers)	Understand and improve the app
Standard device and app data (device model, OS version, app version, language, approximate country or region, session timing)	Analytics, diagnostics
App version and build number	Shown on About screen, support

c) Data from third parties

Source	Data
Apple / Google sign-in	Name, email (or Apple private relay email), provider user ID
Apple App Store / Google Play	Subscription product, store, start and expiry dates, renewal status, billing issues, purchase events. We never receive card details.
Another user	Your email address, if they invite you before you join

We do not collect: precise location, contacts, camera, microphone, health data, payment card details, government ID, or advertising identifiers. We do not ask your sect, madhhab, gender, age or ethnicity.

3How we use your data

We use your data only to:

Create and secure your account and sign you in.
Deliver Gems, save your answers, tailor Gem flows to earlier answers, and track your progress and habits.
Show your partners the summary in section 5 and deliver Pokes and Celebrates.
Hold an invitee's email so the invitation can link to their account if they join.
Send push notifications and daily reminders you have allowed.
Manage subscriptions, restore purchases, and grant or end Premium.
Understand how the app is used so we can improve it.
Keep the Service safe, prevent abuse and enforce our Terms of Use.
Respond to support requests and meet our legal obligations.

We do not make automated decisions about you that have legal or similarly significant effects. Gem flows branch automatically, but this only chooses which exercise you see next.

Your answers to reflection questions, the habits you commit to, and the Qualities you work on may reveal your religious beliefs, practices and personal struggles. We treat this as sensitive data. We:

4.1
Use it only to provide the Service to you.
4.2
Never share your answers or reflections with Accountability Partners, other users, advertisers or data brokers.
4.3
Do not send your free-text reflections to analytics tools.
4.4
Limit access to the minimum needed to run and support the Service.
4.5
Do not use them to train third-party AI models.

5What other users can see

There is no public profile, feed or search. Other users only see data about you if you are partners:

Who	What they see
Someone you invite	Your display name and email in their invitation
An accepted Accountability Partner	Display name, email address, profile photo, total habit days completed, current Quality and completion %, active habit text and its habit calendar, and whether you Poked or Celebrated them today
A partner, via push notification	Your display name in Poke, Celebrate, request and acceptance messages, which may appear on their lock screen

Partners never see your Gem answers, reflections, subscription status, reminder settings or other partners. Removing or blocking a partner stops all further sharing with them.

We share personal data only with trusted service providers who process it on our behalf under contract, to provide hosting and storage, sign-in, push notifications, analytics, subscription management and customer support. Apple and Google also receive data when you use their sign-in or buy a subscription through their app stores. We never sell your data or share it for advertising.

We may also disclose data to comply with law, a valid legal order, or to protect the safety of any person; to professional advisers; or to a successor if Sabiqoon is merged or acquired, in which case this policy continues to apply. If a request from authorities is unlawful or over-broad, we will challenge it, and we will tell you where we lawfully can.

7Where your data is stored

Our service providers may store and process your data in Canada, the United States and other countries. Privacy laws there may differ from those where you live. We choose providers that protect your data with appropriate safeguards.

8How long we keep data

Deleting your account is permanent. When you delete your account from Profile → Delete Account, your account, profile, profile photo, answers, reflections, progress, habits, partnerships and notifications are permanently removed from our systems. They cannot be recovered, by you or by us.

Data	Retention
Account, profile, profile photo, answers, progress, habits, partnerships, interactions, notifications, devices	Until you delete your account, then permanently removed
An invitee's email (if they never join)	Until the inviter cancels the invitation
Push tokens	Until you sign out, the token expires, or your account is deleted
Subscription records and purchase events	As long as tax and accounting laws require (usually 6 to 7 years)
Analytics data	Up to 14 months, then deleted
Backups	Overwritten within 30 days
Support emails	Up to 2 years after the conversation ends

9Your rights

Depending on where you live, you have the right to:

9.1
Access your data and receive a copy in a portable format.
9.2
Correct inaccurate data. You can edit your name, photo and settings in the app.
9.3
Delete your data (Profile → Delete Account, or email us).
9.4
Object to or limit how we use your data.
9.5
Withdraw consent at any time, for example by turning off notifications, without affecting earlier processing.
9.6
Complain to your local privacy regulator.

California and other US states: you have the right to know, delete and correct personal information, and to opt out of sale or sharing. We do not sell or share personal information as those terms are defined, and we do not use sensitive personal information beyond what is needed to provide the Service. We will not discriminate against you for exercising your rights.

Other regions: users in Canada, Pakistan, the UAE, Saudi Arabia, Malaysia, Indonesia, Turkey, Australia and elsewhere have similar rights under local law, and we honour them.

To exercise a right, email salam@salsabiltechnologies.com from your account email. We respond within 30 days (45 for US state requests) and may need to verify your identity.

10Children

The Service is not directed at children under 13. We do not knowingly collect their data. If you believe a child under 13 has an account, contact us and we will delete it. Users aged 13 to 17 need a parent or guardian's agreement, and we encourage parents to guide young users in choosing partners.

11Security

We protect your data with encryption, both when it travels between your device and our servers and when it is stored. Each user can reach only their own data and the partner summary described in section 5. Profile photos are kept private and shown only to your partners. Passwords are never stored in plain text, and only authorised team members can access our admin tools. No system is perfectly secure; if a breach affects your data, we will notify you and the authorities as the law requires.

12Notifications and device permissions

Notifications: asked for on first use; manage them in your device settings or turn off daily reminders in the app.
Photo library: only when you choose a profile photo. We read only the image you pick.
We do not request location, contacts, camera or tracking permissions.

13Changes to this policy

We will post updates here and change the "Last updated" date. For material changes, we will notify you in the app or by email before they take effect, and ask for fresh consent where the law requires.

14Contact us

Questions or requests about your privacy: salam@salsabiltechnologies.com. We aim to reply within 5 working days, insha'Allah.