Privacy Policy

Last updated: 8 October 2026 · Applies to the Noor: Muslim Habit Tracker mobile app (Android) and the website noorlife.app.

This Privacy Policy explains what information Noor AI (“we”, “us”, “Noor”) collects when you use the Noor mobile app and this website (together, the “Service”), why we collect it, where it is stored, who we share it with, how long we keep it and the choices you have. We built Noor to be private by design: you can use it with no account at all, and your most personal content is never sold or used for advertising.

Contents

1. Who we are
2. Guest mode vs. signed-in
3. What we collect
4. Google user data (Sign in with Google)
5. Location
6. How we use your information
7. The AI guidance assistant
8. Advertising
9. Subscriptions and payments
10. Notifications
11. Crash reports
12. Service providers and where data is stored
13. Legal bases (EEA/UK)
14. Data retention
15. Your rights and choices
16. Deleting your account and data
17. Security
18. Children
19. International transfers
20. This website
21. Changes and contact

1. Who we are

Noor is a daily companion app for Muslims. It helps with prayer times, dhikr, spiritual habits, journaling, a daily Qur'an verse and hadith, and gentle guidance. It is developed and operated by Noor AI, an independent software studio based in Türkiye. Noor AI is the data controller for the personal data described in this policy. For any privacy question or request, contact us at [email protected].

2. Guest mode vs. signed-in

You can use Noor in two ways:

• As a guest (no account). Everything you create is stored in the app's local storage on your device. Nothing about your habits, prayers, journal or progress is sent to our servers. If you uninstall the app or clear its data, this information is gone.
• Signed in with Google. We create an account for you so your data can sync securely across your devices and be restored on a new phone. Your content is then stored on our backend, described below.

Signing in is never required to use the core features of the app.

3. What we collect

The table below lists every category of personal data the Service handles, why, and where it goes.

We do not collect your phone number, contacts, photos, files, microphone or camera input, browsing history or any health data. We do not run in-app analytics or build advertising profiles.

4. Google user data (Sign in with Google)

Noor offers “Sign in with Google” as an optional way to create an account. When you use it:

• Scopes requested: only openid, email and profile. We do not request any sensitive or restricted Google scopes.
• Data we receive: your Google account email address, name, profile photo and a unique account identifier. We do not receive your password, and we never access your Gmail, Google Drive, contacts, calendar, photos or any other Google service.
• How we use it: solely to create and identify your Noor account, sign you in on your devices, sync your Noor data, and show your name and photo inside the app. We do not use it for any other purpose.
• Storage and protection: it is stored by our authentication provider (Supabase). It is encrypted in transit, and database access rules allow it to be read only by your own account and our backend.
• Sharing: we do not sell Google user data. We do not use it for advertising, retargeting or personalised ads. We do not transfer it to third parties except Supabase, which acts as our processor to run sign-in, or when required by law.
• AI and machine learning: Google user data is never sent to the AI guidance assistant and is never used to develop, improve or train any AI or machine-learning model.
• Human access: no one at Noor AI reads your Google user data, except with your explicit consent (for example, when you contact support), for security purposes, or where required by law.
• Revoking and deleting: you can delete your Noor account at any time (see section 16). This permanently removes your Google user data from our systems. You can also revoke Noor's access in your Google Account at myaccount.google.com/permissions.

Noor's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5. Location

Location is optional. Before Android asks for permission, Noor shows its own screen explaining what location is used for. You can decline, and Noor will show prayer times for an approximate city instead.

• What we use it for: calculating accurate prayer times, showing your Qibla direction and, when you open the app, noticing whether you are far from home for travel (qasr) awareness.
• When it is collected: only while the app is open and in use. Noor does not access your location in the background or when the app is closed.
• Where it is processed: prayer times, the Qibla direction and travel distance are computed on your device. If you are signed in, your last coordinates and time zone are saved with your prayer settings so they sync to your other devices and reminders arrive at the right local time.
• What we never do: we do not sell your location, share it with advertisers or use it for advertising.

6. How we use your information

• To provide the app's features: prayer times, habit and dhikr tracking, journaling, daily content, progress and reminders.
• To sync and back up your data across your devices (signed-in users).
• To generate replies from the AI guidance assistant when you use it.
• To process subscriptions and unlock premium features.
• To show ads to free users and grant rewards you earn by watching an ad.
• To keep the Service secure, prevent abuse (for example, fair-use limits on the assistant) and fix crashes.
• To answer you when you contact us.

We do not sell your personal data. We do not use your journal, reflections, mood, location or assistant messages for advertising or to build advertising profiles.

7. The AI guidance assistant

Noor includes an optional AI assistant that offers general encouragement for everyday faith and habits. When you send it a message, the following is sent over an encrypted connection to our AI provider, DeepSeek, only to generate a reply:

• Your message and the recent messages in that conversation.
• The goals and focus areas you chose during setup.
• A short summary of today's activity: the percentage of habits completed, whether Fajr was prayed, your last journal mood label, your streak length and weekly character-challenge progress.
• Your app language.

Your name, email address, Google account data, location and journal text are not sent to the assistant. We do not use your conversations to train AI models. Your conversation history is stored on our backend so you can see it again, and it is deleted with your account. Please don't share highly sensitive personal information in these messages. The assistant is not a substitute for a qualified scholar and does not issue religious rulings (fatwa). The assistant has no image-generation features.

8. Advertising

Free users may see banner, interstitial and optional reward ads served by Google AdMob. AdMob may use your device's advertising identifier and IP address to show, limit and measure ads. In the European Economic Area, the UK and Switzerland, Noor shows Google's consent form before any ad is requested. You can change your choice at any time from Settings → Privacy & Account → Ad privacy options in the app. You can also reset or delete your advertising ID in your Android settings.

When you watch an optional reward ad, Google sends our server a signed confirmation so we can grant the reward. It contains an anonymous reward identifier, not your name or email address. Premium users see no ads. We never share your journal, reflections, assistant messages or location with ad networks.

9. Subscriptions and payments

Premium is optional. Purchases are processed by Google Play. We never see or store your card number or payment details. We use RevenueCat to manage subscriptions. It receives an anonymous app user identifier and your purchase receipts from Google Play, and tells us whether your subscription is active and when it expires.

10. Notifications

If you turn on reminders, Noor asks for notification permission. For signed-in users we store a push token, delivered through Expo and Google Firebase Cloud Messaging, so we can send the reminders you chose. Many reminders, such as prayer times, are scheduled on your device and need no server at all. You can turn any reminder off in the app, or turn off notifications in your Android settings.

11. Crash reports

To fix crashes we use Sentry, hosted in the European Union. Crash reports contain technical information such as device model, OS version, app version and the error. They are configured to strip personal data: we do not attach your name, email address, journal text, assistant messages or location, and request bodies, cookies and authentication headers are removed before sending.

12. Service providers and where data is stored

We use a small number of providers (processors) who handle data on our behalf, only as needed to deliver their part of the Service:

13. Legal bases (EEA/UK)

• Contract: to provide the app, your account, sync and premium features you request.
• Consent: for location, notifications and personalised ads, which you can withdraw at any time. You also choose to send messages to the AI assistant.
• Legitimate interests: to keep the Service secure, prevent abuse and fix crashes.
• Legal obligation: where we must keep records, for example for tax or accounting.

14. Data retention

• Guest data stays on your device until you delete it or uninstall the app.
• Account data and content are kept while your account exists, and deleted when you delete your account.
• AI assistant messages are kept with your account so you can see your history, and deleted with it.
• Crash reports are kept for a limited period under Sentry's retention settings, then deleted automatically.
• Limited records (such as subscription transactions) may be kept longer where the law requires it.

15. Your rights and choices

Depending on where you live (for example under the GDPR, UK GDPR or Türkiye's KVKK), you have the right to access, correct, export or delete your personal data. You may also object to or restrict certain processing, withdraw consent and lodge a complaint with your data protection authority. In the app you can:

• use Noor without an account;
• decline or revoke location and notification permissions;
• change your ad consent (EEA/UK) and reset your advertising ID;
• delete your account and all associated data.

To exercise any right, email [email protected]. We answer within 30 days.

16. Deleting your account and data

You can permanently delete your account at any time from Settings → Privacy & Account → Delete Account in the app. This immediately deletes your account, your Google user data (name, email, photo) and all your Noor content from our backend. You can also request deletion by email; see our Account & Data Deletion page. Guest data can be removed by clearing the app's data or uninstalling it.

17. Security

All data is encrypted in transit (HTTPS/TLS). Database access is protected by row-level security, so each account can read only its own rows. Your login session is stored in your device's secure keystore, not in plain storage. Secret keys never ship inside the app. No method of transmission or storage is 100% secure, but we work hard to protect your information. We will notify you and the authorities of a breach where the law requires it.

18. Children

Noor is not directed to children under 13 (or the minimum age of digital consent in your country). We do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it.

19. International transfers

Our providers process data in the countries listed in section 12, which may be outside your own country. Where the law requires it, we rely on appropriate safeguards for these transfers, such as the European Commission's Standard Contractual Clauses.

20. This website

noorlife.app is a static website hosted on Cloudflare. It sets no cookies of its own, runs no analytics or advertising trackers and has no login. Cloudflare may process technical data such as IP addresses, and may set a strictly necessary security cookie, to deliver the site and protect it from abuse.

21. Changes and contact

We may update this policy as the app changes. We will update the “Last updated” date above and, for material changes, show a notice in the app. Questions or requests: [email protected] · Noor AI, Türkiye.