Muraq Privacy Policy

Effective date: 4 October 2026

Muraq is operated by Abdul Wasay ("we", "us", or "our"). This policy explains how information is handled when you use Muraq and its account, planning, prayer, reflection, alarm, and AI features.

Privacy contact: wasayiqbal2@gmail.com

Information we handle

Account information. When you sign in, we process your email address, account identifier, and information supplied by your chosen sign-in provider, such as your name. Sign in with Apple may supply a private relay email address. We retain an authentication session on your device so you can remain signed in.

Profile and activity information. We handle information you enter, including your name, city, optional profile details, intentions, habits, completion records, notes, and sleep entries. Some settings and planner information are stored locally on your device. Account-connected features also store supported records in our cloud database.

Muhasabah information. Your tracked patterns and reflection logs may include dates, outcomes, intensity, triggers, and personal notes. Signed-in Muhasabah history is stored in our cloud database under your account, with access rules designed to prevent other users from reading it. Guest history is stored locally. When offered, importing guest history into an account is optional. Offline changes may remain on your device until successfully synchronized.

Information you choose to enter may reveal sensitive matters, including religious beliefs, wellbeing, or personal struggles. Please avoid including information about other people or sensitive details that are unnecessary for the feature you are using.

Location. With your permission, Muraq accesses your location while the app is in use to calculate prayer times. Location may also be used through the device's geocoding service to suggest your city. A saved city can be associated with your account. Device and operating-system services may process location to provide these functions.

Calendar. With your permission, Muraq reads calendar event titles and start and end times to display existing events in your planner. This does not make your calendar public. If you send planning information to the AI coach, the submitted context can include task titles and scheduled times.

Photos. You can choose a profile image using the device photo picker. When you submit a kitchen or outdoor photo for an alarm challenge, that photo is transmitted to our Cloudflare-hosted AI service for scene verification. Do not photograph people, documents, or private information you do not want processed by that service.

AI messages and context. The AI coach sends your submitted messages, the current conversation, and relevant feature context to Cloudflare Workers AI to generate a response. Planning context can include your intention, tasks, date, and prayer times. A weekly review can include habit completion, focus statistics, and available screen-time summary information. AI output may be inaccurate; do not rely on it for medical, emergency, or professional advice.

Support and technical information. If you contact us, we receive the information you provide, such as your email and description of the issue. Infrastructure providers may process technical information, including network and request metadata, to deliver, secure, and troubleshoot the service.

Why we use information

We use information to authenticate accounts, personalize the app, save supported records, calculate prayer times, display plans, deliver requested reminders and alarms, verify submitted challenge photos, generate requested AI responses, respond to support requests, and protect the service.

Service providers and disclosures

We use Supabase for account authentication and cloud database services, and Cloudflare Workers and Workers AI for AI requests and photo verification. Apple, Google, and device services process information when you use their sign-in, permission, calendar, location, notification, and alarm functions, subject to their own policies.

Our reviewed AI service does not deliberately save a separate photo archive or conversation database. This does not mean that all processing is exclusively on-device or that no provider maintains operational records. Cloudflare states that Workers AI customer content is not used to train its models or improve its or third-party services without explicit consent. Provider policies and configuration govern their processing.

We may disclose information when legally required or when necessary to protect users, investigate abuse, or secure the service. No advertising or cross-app tracking integration is used by the reviewed Muraq app.

Retention and deletion

Account records are retained while needed to provide your account and saved history. Local records can persist on your device, including after signing out; signing out is not the same as deleting data. Only successfully synchronized records can be restored through the cloud feature.

You can request account deletion using Delete Account in the app's profile area, or contact wasayiqbal2@gmail.com for assistance. Account deletion is intended to remove your authentication account and associated cloud records. Local caches, backups, security records, and provider logs may have separate retention periods.

Muraq attempts to clear the deleted account's local profile and Muhasabah records, pending changes, and guest history explicitly imported by that account. If local cleanup fails, the app reports this. Support correspondence and technical records may be retained while needed to resolve requests, protect the service, or meet legal obligations. Provider backups and logs follow separate retention schedules; contact us for retention questions. Removing the app clears its app-managed local storage, although operating-system backups are handled separately.

Your choices and rights

You can decline optional device permissions or change them in system Settings. Some corresponding features will then be unavailable or less accurate. You can control available reminder settings and avoid submitting content to AI features.

Depending on your location, you may have rights to access, correct, delete, export, restrict, or object to certain processing, or withdraw consent where processing relies on it. Contact wasayiqbal2@gmail.com to make a request. We may need to verify your identity. You may also have the right to complain to your local data protection authority.

Security and international processing

We use account authentication and database access controls to help protect information. No system can guarantee absolute security. Service providers may process information outside your country. Contact us with questions about provider processing or safeguards before using optional cloud or AI features.

Children

Muraq is intended for users aged 13 and over and is not directed to children under 13. The app uses a self-reported age check on the device; it does not independently verify identity. If you believe a child under 13 has provided personal information, contact wasayiqbal2@gmail.com so we can investigate and take appropriate deletion steps. Where local law requires a higher age or parental consent, those requirements also apply.

Changes and contact

We may update this policy as Muraq changes. The effective date will identify the current version. Where required, we will provide notice or request consent for material changes.

Questions or requests: wasayiqbal2@gmail.com