Privacy

Last updated 15 October 2026

This page says what Alauddin collects, why, where it is kept, and how to ask about it.

Alauddin is run by an individual, not a named company. No company name is published on this page. Write to contact@alauddin.app.

Why we keep it

A Plus account is how we carry out the purchase you made and restore it on a device. That is a contract between you and Alauddin.

We also keep a little information because we need it to keep the app secure, to prevent abuse, and to count basic use. That is a legitimate interest. It covers error reports, safety notes, invite counts, and the totals and campaign tags on this page.

Optional features stay off until you turn them on. Turning one on is your consent.

Anything that would reveal your religion needs a clear yes. That is the consent box before you pay for Plus, tradition sync, and Verse Finder. Each one stays off until you agree. You can take that yes back.

This answer stays on your device unless you turn on sensitive sync.

What we collect

A daily cleanup removes old rows. It runs once a day, so a row can stay a short while past the time below. It does not delete a row at an exact minute.

  • Your journal stays on your phone. Verse Finder is off unless you turn it on. Turning it on is your consent to send your words, without your name, to our server and to Google, only so an id can be chosen from a fixed list of Holy Quran verses. Alauddin does not save those words. The verse on screen is from our verified text. For guidance, consult a qualified scholar. Switch it off to withdraw that consent. Notes can include health details (Washington My Health My Data). They're sent only to pick a verse and aren't stored.
  • We store a count of matching calls, and a daily hash used to limit how often matching runs. We do not store the raw network address. A daily cleanup deletes that daily hash after 2 days.
  • As you use the app, we store an event name and, when the link had them, campaign tags: source, medium, campaign, and content. A daily cleanup deletes those after 13 months. You can ask us to delete them sooner. They are stored in Cloudflare D1.
  • The first link that opens the app can leave a source and an invite code in this browser’s localStorage, under the name alauddin_x_source_v1. A later link does not replace it. We attach that source to analytics events. We keep the record for 30 days. Clearing your browser’s site data removes it. That record is not joined with a faith answer, a location, or a journal entry. We do not send it to the account or referral endpoints.
  • We store counts of shares, landing views, installs, and journal entries. A landing view can include the page name. These are totals. We keep them until you ask us to delete them. They are stored in Cloudflare D1.
  • We count how often some features are used, as anonymous daily totals that are not linked to you.
  • If you share an invite, we store the invite code and a day. The network address is hashed with a secret salt. We do not store the raw network address. We do not read the alauddin_vid cookie. A session cookie named alauddin_ref remembers the invite until that browser session ends. The owner token for invite counts stays in this browser’s storage under the name alauddin_referral_owner_token_v1. It is not a cookie. A daily cleanup deletes click and visit records within 30 days. We delete your invite code and join record when you delete your account. Pending reward rows stay until Plus launches, and for 90 days after that launch. You can ask us to delete them sooner. Invites are not available yet. When they are, invite and reward data will be stored in Supabase, our database provider.
  • If you join a list in the app, the email stays on this device. It is not sent to our servers.
  • If you pay for Alauddin Plus, Stripe handles the card. We do not store your card number. We keep the email, the customer id, the plan, and whether Plus is active, so we can send a receipt and restore Plus on a device. A daily cleanup deletes those 7 years after the last payment. They are stored in Cloudflare D1. Stripe keeps its own payment record.
  • If the app hits a problem, it may send technical error details: a short message, a stack, and the page path. Coordinates and journal text are removed before we store them. A daily cleanup deletes them after 90 days. You can ask us to delete them sooner. They are stored in Cloudflare D1.
  • If you ask us to remove an intimate image, we keep the email you give, a content hash, and your note, used only to handle your request. A daily cleanup deletes that request one year after we receive it. If a safety note is stored, a daily cleanup deletes it one year after we receive it. It is stored in Cloudflare D1.
  • If you email us, Cloudflare forwards the message to our inbox, which Google hosts. We keep it so we can reply, and we delete it if you ask. If we also store a copy in our database, a daily cleanup deletes that copy after 24 months.
  • A region check can read a country code Cloudflare already attaches to the request. We do not store it.
  • We do not collect your precise location.
  • If you agree to a reminder, we store the push address and its keys, your time zone, and the UTC times for the next few days. Each time carries only a type id. Prayer times are calculated on your device. We do not store your location, the calculation, the Asr choice, or how many minutes before. We delete those times when you turn reminders off. If the push service says the subscription is gone, we delete the address and the send times immediately. Other repeated delivery failures are deleted after 30 days. It is stored in Cloudflare D1. A detailed daily verse, if you turn that on, is the same verified text already in the app. We do not write a new one.

Location, prayer times, and the qibla

Alauddin uses your location on your device to find the qibla direction and your prayer times. It's never sent to our servers or shared.

The phone asks only after you tap Find qibla or Use my location. It does not ask when a page opens, and it does not ask in the background. The reading stays in memory on your device long enough to calculate the direction and the times, then it is discarded. It is not sent to our servers, analytics, sync, logs, or error reports, and it is not placed in a link.

Remember my area is off unless you turn it on. If you turn it on, this device stores an approximate area only: a city name, or a latitude and longitude rounded to a tenth of a degree. That stays on the device. It is not synced. You can delete it in Settings, or in the prayer page.

If you do not allow location, you can choose a city. The city list is part of the app. What you type is not sent anywhere.

A precise reading is never sent. Prayer times are calculated on this device. A reminder does not include them.

Cookies and this device

We use storage in the browser for things you set here: that you confirmed you are 18 or older, the time of that confirmation, and the terms version. We do not store a birth year on this device. We also store your theme, your journal, and similar preferences. An invite sets a session cookie, alauddin_ref, which the browser drops when the session ends. We do not set or read alauddin_vid for an invite. If an older visit left that cookie, the next page load clears it. This tab keeps campaign tags in sessionStorage as alauddin_utm_v1, and the names of events already counted as alauddin_funnel_session_v1, until you close the tab. After you restore Plus, a cookie named alauddin_plus can remember it on this device for 400 days. We do not use advertising cookies.

We do not sell or share your personal information. We do not use it for advertising on other sites.

We treat a Global Privacy Control signal as a request to opt out of sale and sharing. We don't sell or share, so nothing changes, and we will keep honoring it.

Reminders you asked for

Prayer reminders and the daily verse stay off until you turn them on. The words are: Send me prayer reminders. This will store reminder times on our server.

We store the push address and its keys, your time zone, and the UTC times for the next few days. Each time carries only a type id. Prayer times are calculated on your device. Opening the app sends the next few days again. We do not store your location, the calculation method, the Asr choice, how many minutes before, a city name, or an account.

Show details on lock screen stays off until you turn it on. Off, a prayer reminder says Alauddin reminder, and the daily verse says Your daily reading is ready. On, the daily verse is the verified text and one citation.

At most five prayer reminders you turned on, and one daily verse, can arrive in a day. Quiet hours hold the daily verse. Prayer reminders you've turned on still arrive.

Turning reminders off deletes the address and the send times immediately. Delete everything on this device does that too. If the push service says the subscription is gone, we delete the address and the send times immediately. Other repeated delivery failures are deleted after 30 days. This stays off on alauddin.app and www.alauddin.app.

Delivery can go through the push service your browser uses. That can be a service run by Google, Mozilla, or Apple, depending on the browser.

Who handles this

Cloudflare hosts Alauddin and stores the records above in D1. Google runs Verse Finder, only if you turn it on. We send the words without your name, and we don't save them. Google may keep them for a limited time to prevent abuse, and does not use them to train its models. Google also hosts our email inbox. Stripe processes Plus payments. Resend sends email, including receipts and replies.

Processors

Updated 18 October 2026

ProcessorDetails
Cloudflare

Cloudflare hosts Alauddin and stores the records above in D1.

Covered by its data processing agreement. Transfers outside your country use standard contractual clauses where applicable. How long each record is kept is stated on this page.

Stripe

Stripe handles the card. We do not store your card number. We keep the email, the customer id, the plan, and whether Plus is active, so we can send a receipt and restore Plus on a device. A daily cleanup deletes those 7 years after the last payment. They are stored in Cloudflare D1. Stripe keeps its own payment record.

Covered by its data processing agreement. Transfers outside your country use standard contractual clauses where applicable.

Resend

Resend sends receipts and replies from Alauddin <contact@alauddin.app>. No marketing.

Data: the email address and the message content.

Covered by its data processing agreement. Transfers outside your country use standard contractual clauses where applicable. We do not set how long Resend keeps a message.

Google Verse Finder

Google runs Verse Finder, only if you turn it on. We send the words without your name, and we don't save them. Google may keep them for a limited time to prevent abuse, and does not use them to train its models.

Transfers outside your country use standard contractual clauses where applicable.

Google (email inbox)

Google hosts the contact inbox. If you email us, Cloudflare forwards the message to our inbox, which Google hosts. We keep it so we can reply, and we delete it if you ask. If we also store a copy in our database, a daily cleanup deletes that copy after 24 months.

Transfers outside your country use standard contractual clauses where applicable.

Health details

Notes can include health details (Washington My Health My Data). They're sent only to pick a verse and aren't stored. Verse Finder stays off until you turn it on.

Where data is processed

Cloudflare, Google, Stripe, and Resend may process this information outside the place where you live. They do that under their standard contractual clauses or equivalent safeguards.

Email

We email you only for receipts and to restore access to Plus. We do not send other mail unless you write to us first.

Adults only

Alauddin is for adults 18 and older. It is not for children.

Categories we keep

  • Identifiers, such as an email you give us.
  • Commercial information, such as a Plus plan.
  • Internet activity, such as funnel events.
  • Sensitive information: religious belief, and only with your consent.

Sources: you, and your device.

We use this to run the app, to keep it secure, to count basic use, and to carry out a purchase you made.

We do not sell or share personal information. We do not use it for targeted ads. We do not use it to profile you for ads.

A notice at collection is the Privacy link beside the Verse Finder choice and at checkout.

Your data

You can ask us to see, correct, export, or delete your data, to restrict how we use it, or to object to how we use it. Write to contact@alauddin.app. We answer within 30 days. We may need to confirm the request is yours. We won't treat you differently for asking.

If we refuse, reply to that answer at contact@alauddin.app and we will look again. We decide an appeal within 45 days and tell you where to send a complaint.

Your journal is on your device. You can delete notes in the app, or clear this site’s data in your browser.

We have retired an earlier marriage feature. If any safety reports, appeals, blocks, or removal requests were stored for it, we keep them only as long as needed to finish handling them or as the law requires, and then delete them. Any future version will launch only after strong safety controls are in place. To ask about your records, write to contact@alauddin.app.

Learning reminders

Learn to Read is for adults learning to read the Quran. If you turn on a reminder, it is only for that short review. It is off until you turn it on. Lesson progress and saved words stay on this device. Sync is not open.

We store the push address and its keys so a note can be delivered. We do not store your location, your city, or your prayer times with it. We do not keep a history of notes we already sent. Each send time is deleted once the note goes out.

Delivery can go through Google FCM, Mozilla autopush, or Apple Push, depending on your browser. If you turn the reminder off, we delete the address. We also delete it when the push service says it is no longer valid, and after 90 days without opening Learn to Read.

You can turn it off in Learn to Read or in Settings. Snooze waits one day or one week.

If we make a material change, we'll post the new version here with its date and show a notice in the app at least 30 days before the change takes effect, unless the law or someone's safety requires a change sooner.

For help staying safe, read the safety page. Write to us any time at contact@alauddin.app.