Introduction
Salah Stars ("we", "our", "us") is committed to protecting the privacy of our users, especially children. This privacy policy explains how we collect, use, and safeguard your information when you use our mobile application.
Information We Collect
We collect only the minimum data necessary to provide the app's core functionality:
- Account Information: Email address (provided by the parent/guardian during signup) used for authentication.
- Prayer Tracking Data: Records of daily prayers tracked, XP earned, streak counts, and rank progression for each family member.
- Family Member Names: First names or nicknames entered by the parent for each family member profile.
- Friend Connections: Invite codes and connections between families who choose to link accounts.
How We Use Your Data
Your data is used exclusively to:
- Provide prayer tracking, XP, streak, and rank features within the app
- Sync data across your devices via your account
- Display family leaderboard and friend connections
- Send account-related emails (signup confirmation, password reset)
Data Storage & Security
All data is stored securely on Supabase (hosted on AWS) with encryption at rest and in transit. We implement Row Level Security (RLS) to ensure families can only access their own data. Your data is protected by industry-standard security measures.
What We Do NOT Do
- We do not sell, share, or rent your personal data to any third parties
- We do not display advertisements in the app
- We do not use analytics or tracking tools that profile user behavior
- We do not collect location data, contacts, photos, or device identifiers
Children's Privacy
Salah Stars is designed for use by families, including children. We take children's privacy seriously:
- Only a parent or guardian can create an account and manage family settings (protected by a 4-digit parent PIN)
- Children do not create their own accounts — family members are profiles within a parent's account
- We do not knowingly collect personal information directly from children under 13
- The app does not contain social features accessible to children without parental setup (friend connections are managed by parents)
We comply with the Children's Online Privacy Protection Act (COPPA) principles. If you believe we have inadvertently collected personal information from a child, please contact us immediately.
Data Retention & Deletion
We retain your data for as long as your account is active. You may request complete deletion of your account and all associated data at any time by contacting us at [email protected]. Upon receiving a deletion request, we will permanently remove all your data within 30 days.
Third-Party Services
We use the following third-party services:
- Supabase: Authentication and database hosting (Supabase Privacy Policy)
- Expo / EAS: App build and update delivery (Expo Privacy Policy)
Changes to This Policy
We may update this privacy policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically.
Contact Us
If you have any questions about this privacy policy, your data, or wish to request data deletion, please contact us: