Last Updated: March 7, 2026 Effective Date: March 7, 2026 ## Introduction Welcome to Duada. This Privacy Policy explains how Duada (“we”, “us”, or “our”) collects, uses, discloses, and protects information when you use the Duada mobile app on iOS and Android. Duada is a calm, mobile-first Islamic companion app that supports daily worship, spiritual reflection, Quran reading, prayer time scheduling, a Qibla compass, Ramadan mode, a digital tasbih, daily Ayah/Hadith/quotes, widgets, and an AI-powered guidance system. This policy describes what information we collect, how we use it, your choices and rights, and how to contact us. Please read this policy carefully. By using Duada, you consent to the collection and use of information as described herein. ## 1. Information We Collect We collect the following types of information to provide core functionality and improve the app experience. - Location Data - Precise location (GPS-level) or approximate location as required to calculate accurate prayer times (Adhan), Qibla direction, and location-based scheduling. - Location data is collected only when you grant the app permission. You can disable location permissions at any time via your device settings. - We may store a recent or last-known location on-device for convenience. If location information is transmitted to our servers (for push scheduling or remote features), it will be indicated and retained as described in the Data Retention section. - Device & Technical Data - Basic technical information required to operate the app, such as device model, operating system version, app version, widget update requests, local time zone, and push notification tokens. This information helps deliver features (e.g., widgets, notifications) and diagnose technical issues. - User-Provided Content - Personal content you create in the app, including bookmarks, Ayah notes, tasbih counts, reading progress, and any content you enter into the app’s fields. - If you choose to share content (for example, via the share functionality), the app will hand off content to the platform share sheet; that sharing action is initiated by you. - AI Interaction Data - Inputs you provide to the AI guidance system (questions, prompts, selected verses or context) and the AI-generated outputs that are returned to you. See the AI/Automated Processing Disclosure section for details. - Aggregated & Anonymous Data - Non-identifying aggregated data such as anonymized usage statistics and crash reports that help us improve the app. What we do NOT collect (unless you opt in or provide it): payment card information (in-app purchases are processed by the App Store / Google Play), contact lists, photos, or other sensitive media from your device unless you explicitly provide them. ## 2. How We Use Your Information We use information to provide, maintain, and improve Duada, to personalize your experience, and to meet legal obligations: - Provide core features - Use location data to calculate prayer times, determine Qibla direction, and populate location-based widgets and reminders. - Use device and technical data to support widgets, push notifications, and correct functioning across iOS and Android. - Store and display your bookmarks, notes, tasbih counts, and reading progress. - Notifications & Reminders - Use push tokens and scheduling information to deliver prayer reminders, Ramadan notifications, and daily Ayah/Hadith/quote notifications when you enable them. - AI-guided reflections - Process inputs you submit to the AI guidance system and return generated reflections and suggestions. See the AI section below. - Quality, diagnostics & improvement - Use aggregated usage data, crash reports, and optional diagnostic logs to troubleshoot problems, analyze trends, and improve the app. - Enforcement, legal compliance, and safety - Use data to comply with laws, enforce our Terms of Service, detect and prevent fraud or abuse, and fulfill legal obligations. - Communicate with you - Respond to support requests, answer questions, and send account-related or feature-related messages where necessary. We do not use personal information for advertising purposes and we do not sell your personal information. ## 3. Data Sharing and Third Parties We limit data sharing to the following situations: - Service providers and platform services - We use platform services necessary to deliver the app, for example: - Apple Push Notification service (APNs) and Google Firebase Cloud Messaging (FCM) to send push notifications. - The geolocator library to access device location when you grant permission. - The share_plus package to present the device share sheet for social sharing. - These platform services and libraries may process data (e.g., push tokens, location when used to calculate times) under their own policies. We do not control those third parties’ practices and recommend you review their privacy materials (e.g., Apple, Google). - AI and compute providers (if used) - The AI guidance system is built on modular prompt agents. To deliver AI responses, we may process your AI inputs and prompts with internal or third-party compute or model providers. When we utilize third-party providers, we: - Limit the information transmitted to what is necessary (prompts, context, or selected Ayah). - Use contractual measures to restrict data use and require appropriate security. - Anonymize or pseudonymize data where feasible. - We will inform you in-app when an AI interaction is sent off-device if that transmission occurs. - With your consent or at your direction - If you choose to share content (e.g., post reading progress to a collective tracker or share an Ayah card on social media), we will transmit that content as you instruct. - If you opt into backups or cloud sync, your content will be stored in the service you choose; we will describe that storage and obtain consent. - Legal requirements and safety - We may disclose data to comply with applicable laws, legal processes, or enforceable governmental requests, or when necessary to protect our rights, safety, or property, or the safety of others. - Business transfers - In the event of a merger, acquisition, bankruptcy, or sale of assets, user data may be transferred as part of that transaction. We will require any successor to honor this Privacy Policy. We do not sell your personal information or share it for advertising purposes. ## 4. Data Retention We retain personal information only as long as necessary for the purposes described, subject to legal obligations: - Location data - On-device: retained on-device as long as you keep the app or until you revoke permission. - Server-side (if location is transmitted for scheduling/push): retained only as long as needed to deliver the scheduled notifications or as described in-app; typically up to 30 days unless you opt into longer storage. - User-provided content (bookmarks, notes, tasbih, reading progress) - Retained until you delete it or delete your account, unless you have opted into a cloud backup or sharing feature which will be governed by that backup/sharing setting. - AI interaction logs - We may retain AI prompts and responses for a limited period to monitor quality, safety, and to improve the system. Default retention for these logs is 90 days unless you opt out of logging in the app settings, in which case we will not store your AI interactions beyond the current session except where required for service delivery. - Diagnostic logs and crash reports - Typically retained for up to 30–90 days for troubleshooting and product improvement. - Aggregated/anonymous data - Retained as needed for analytics and product improvement; such data does not identify you. If you request deletion of your account or personal data, we will take commercially reasonable steps to remove personal data from active systems and processes. Backups and archived copies may persist for a limited time as required by operational processes and law. ## 5. Security Measures We take reasonable measures to protect the personal information we process: - Data in transit is protected using industry-standard encryption (TLS) when transmitted between your device and our servers or third-party providers. - Data stored on our servers is protected by access controls, authentication, and encryption where appropriate. - We limit internal access to personal information to authorized personnel who need it to perform their roles. - We regularly monitor systems, apply security patches, and follow best practices for secure development. - Despite these measures, no system is completely secure. We cannot guarantee absolute security of your data. If we become aware of a data breach that creates a significant risk to your rights or freedoms, we will comply with applicable law regarding notifications to regulators and affected individuals. ## 6. Children's Privacy Duada is not intended for children. We do not knowingly collect personal information from children under the age of 16 (or the applicable age in your jurisdiction if higher). If you are under the age required by your local law to consent to our processing, please do not use the app without parental permission. If we discover we have collected personal information from a child in violation of this policy, we will delete the information as soon as possible. If you believe we may have collected personal data from a child, contact us at Duada@forvibe.app. ## 7. Your Rights (GDPR / CCPA compliant) If you are a resident of the EU/EEA, UK, or a consumer resident of California, you have certain rights regarding your personal information: - Access & Data Portability - The right to request access to the personal data we hold about you and to obtain a copy in a commonly used format, where applicable. - Rectification - The right to correct inaccurate or incomplete personal data we maintain. - Erasure (“Right to be forgotten”) - The right to request deletion of your personal data, subject to legal exceptions. - Restriction & Objection - The right to request restriction of processing or to object to processing based on legitimate interests or direct marketing. - Withdraw Consent - Where processing is based on consent (e.g., optional diagnostics, AI logging opt-in), you can withdraw consent at any time without affecting processing prior to withdrawal. - Right to Opt-out of Sale (for California residents) - We do not sell personal information. If that practice changes, you will be notified and provided with opt-out methods. - Non-Discrimination - For consumers with rights under CCPA, we will not discriminate for exercising those rights. How to exercise your rights - Email us at Duada@forvibe.app with “Privacy Request” in the subject and describe the request (access, correction, deletion, etc.). Provide necessary information to verify your identity (name, email address used with the app, device model, and a brief description of your request). We will respond within the timeframes required by applicable law (typically within one month; may be extended as permitted by law). We may ask you to verify your identity before fulfilling requests. If you are unsatisfied with our response, you may lodge a complaint with your local supervisory authority (e.g., data protection authority) or, for California residents, the California Attorney General. ## 8. AI / Automated Processing Disclosure Duada includes an AI-powered guidance system designed to provide gentle, scholar-reviewed reflections and supportive content. Important details: - Purpose and nature - The AI generates reflective content, contextual summaries, and guidance to support spiritual reflection. It is informational in nature and does not issue legal or religious rulings (fatwas). AI outputs are intended as supportive guidance and should not replace qualified scholarly advice or medical/legal counsel. - Inputs processed - The AI processes user-provided prompts, selected verses, context you supply, and certain app context necessary to generate appropriate responses. - Where processing occurs - AI processing may occur on our servers or using third-party compute/model providers. We will indicate in-app if a particular AI interaction is routed externally. - Automated decision-making - The AI’s outputs are generated automatically. You have the right to request human review of significant decisions based on automated processing. Because the AI is used for informational reflections, automated decision-making will not be used for legal or similarly significant determinations about you. - Risks and limitations - AI outputs may be imperfect, biased, or inaccurate. We implement scholar review processes, moderation, and safety layers to reduce harmful content, and we log interactions for quality monitoring (unless you opt out). - Opt-out and controls - You can opt out of logging AI interactions in the app settings. If you prefer not to use AI features, you may disable them in settings and continue to use core functionality. ## 9. In-App Purchases & Subscriptions Duada offers a freemium model with optional premium features and subscriptions (if you choose to subscribe): - Platform processing - All payments for in-app purchases and subscriptions are processed through the Apple App Store or Google Play Store. We do not receive or store your payment card details. - Subscription management - Subscriptions typically auto-renew through the platform. Manage or cancel subscriptions through your Apple or Google account settings. Refunds are managed by the platform—contact Apple or Google for refund requests; we can assist with account issues when necessary. - Account & subscription data - We may store subscription status and entitlement information to unlock premium features. This information is retained for as long as needed to provide the subscription service and to comply with account-related obligations. - Trial periods and promotional offers - Trial terms, promotional offers, and auto-renewal rules are presented in-app and managed by the platform. Check the app or platform store listing for current offers. ## 10. Changes to This Policy We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will provide prominent notice in the app or by other means before the changes take effect. The “Last Updated” and “Effective Date” at the top indicate when this policy was last revised. Continued use of the app after the effective date constitutes acceptance of the updated policy. ## 11. Contact Us If you have questions, requests, or concerns about this Privacy Policy or our data practices, contact us: - Email: Duada@forvibe.app - Company: Duada - Website: https://Duada.forvibe.app For privacy requests, please include “Privacy Request” in your email subject and provide details to help us verify your identity. Thank you for using Duada. We are committed to protecting your privacy and supporting your spiritual journey with care and respect.