Privacy Policy

Last updated: 30 October 2026

Wahidah ("we") is a Muslim prayer companion app. We built it privacy-first: no ads, no selling of data, and as little data as possible. This policy explains what Wahidah stores, where, and why.

Without an account

You can use Wahidah without an account. Your prayer record, dhikr and adhkar counts, Quran bookmarks, plans, badges and settings are kept on your phone. Your location is used on your phone to work out prayer times and the Qibla; Wahidah does not upload it, whether you allow location or choose a city. Muslimah mode and any days it excuses are kept only on your phone and are never included in a backup, in analytics, in the community or in Family.

If you sign in

Signing in is optional. You can sign in with Google, or on iPhone with Apple or Google. Sign-in is handled by Firebase Authentication (Google), which keeps your sign-in identity for Wahidah.

• With Google: Wahidah receives your Google account's name, email address and photo so the app can show who is signed in. On iPhone, Google's own sign-in page opens in the phone's secure sign-in window; Wahidah never sees your Google password.
• With Apple: Apple tells Wahidah your name, the first time only, and an email address. If you choose Apple's “Hide My Email”, Wahidah receives a private relay address that Apple forwards to you, not your own address. Wahidah receives no photo and never sees your Apple password. You can stop using your Apple Account with Wahidah at any time in your iPhone's Settings, under your name → Sign in with Apple.

Wahidah does not publish your name, email address or photo.

Signed-in people get a free private backup, stored in Google Cloud Firestore in Singapore. It holds: your prayer and fasting ticks, dhikr sessions and totals, adhkar progress, daily activity ticks, Quran bookmarks and last place, your chosen translation and reciter, favourite duas, prayer calculation settings, your make-up and Quran plans, and your badges. It does not hold your location, notification settings, reading display settings, downloaded audio or Muslimah mode. Only you can read your backup.

Alerts, reminders and precise timing

Prayer alerts, reminders and the night alarm are created by the app on your phone and delivered by the phone itself (Android or iOS). Wahidah does not use a server to send them and does not receive a record of which alerts you were shown. Your phone asks for your permission to show notifications. Separately, Android may ask you to allow “Alarms & reminders”: this lets a prayer alert arrive at its exact time. It is optional and you can use Wahidah without it; alerts are still set, and Android decides when to deliver them, which can be later. iPhone has no such setting. You can change these in your phone's settings at any time.

Wahidah Announcements (Android)

You can choose to receive occasional short messages from us, such as a greeting, news about the app or a service notice, by switching on “Wahidah Announcements” in Settings → Notifications. It is off until you switch it on. When it is on, your phone registers with Google's Firebase Cloud Messaging and joins a shared announcements group; Firebase holds a push token for your phone for that purpose. Wahidah's own servers receive nothing about you for this: no account, name or location is attached, and we cannot see which phones are in the group. Switch it off at any time in the same place, and your phone leaves the group. The iPhone app does not have this feature.

Home-screen and Lock Screen widgets

Wahidah's widgets, on the Android home screen and on the iPhone Home Screen and Lock Screen, show prayer times the app has already worked out. The app passes them the place name you see in the app, the prayer times and the Hijri date; this stays on your phone. The widgets are not given your coordinates and do not connect to the internet.

Quran recitation in the background

When you play a recitation, Wahidah can keep playing while the app is in the background or the screen is off, and shows playback controls in your notifications and on the lock screen. This happens only while a recitation you started is playing. Wahidah does not use the microphone and does not record audio. Recitations are streamed from MP3Quran.net directly to your phone, so MP3Quran.net's servers see your phone's internet address, as any website you open does; Wahidah does not tell them who you are. A recitation you choose to download is kept on your phone.

Community features you choose to use

• Leaderboards: you appear only if you switch on “Appear on community leaderboards”, and then only by the name you choose. No photo, email or account name is shown, and other people never see your numbers.
• Dua Circle: a request shows the name you gave it and its text. Requests are screened automatically for contact details, identity numbers, advertising, offensive wording and possible address disclosure; some may be held for review or refused. Automated checks reduce risk but cannot detect every identifying detail. Anyone can report a request and hide its author. People who respond are counted, not named.
• Family: a family is by invitation. Members see each other's chosen name, whether each of today's five prayers is ticked, the past week in outline, a streak, a dhikr total and encouragement stars. A day you pause, or a day your phone treats as private, appears to the family only as “Private today”; no reason is sent or stored.
• Promo codes: we record which codes you redeem so each code is used correctly.

Purchases

Wahidah can be used for free. A seven-day Premium trial is offered once you sign in, with no payment details and no automatic charge; it simply ends. A promotional code, where one is offered, adds Premium time to your account.

If you subscribe to Premium, the purchase is made through the App Store on iPhone or Google Play on Android.

• Apple or Google takes the payment. It handles your payment method, billing and receipts under its own privacy policy. Wahidah never receives your card or bank details.
• RevenueCat is the service Wahidah uses to keep track of who holds Premium. Where the app offers purchases, it gives RevenueCat your Wahidah account ID when you are signed in, and RevenueCat receives the record of a purchase from the store (which product, when it started, when it ends, and whether it was refunded) with basic technical details such as the app's version and the kind of phone. It does not receive your name, your email address, your location or anything about your worship. RevenueCat is based in the United States, so this record may be processed outside Singapore.
• Wahidah keeps, with your account, whether you hold Premium, how you came to hold it and when it ends.

Reading the Quran on this website

The Quran pages at wahidah.app/quran can be read without an account and without telling us who you are. The surah and verse you last read, and your choices of theme, script, layout, text size, translation, transliteration and reciter, are kept in your own browser so the page can offer to continue where you stopped. They are not sent to Wahidah. “Forget my place” on the Quran page removes the saved place, and clearing your browser's site data removes everything.

If you press Listen, the list of reciters, the recitation and the verse timings come directly from MP3Quran.net, whose servers therefore see your internet address, as any website you open does. If you choose a reciter listed under “Highlights each word”, your browser asks Wahidah's server for that recording's timings and the sound is streamed directly from Quran Foundation's audio servers, which therefore see your internet address in the same way. If you open the commentary for a verse, switch on transliteration, choose one of the translations provided by Quran Foundation, or choose the IndoPak or Tajweed script, your browser asks Wahidah's server for that text; the request says which surah or page, not who you are. The Madinah, IndoPak and Tajweed scripts also load their fonts directly from Quran Foundation's font address, which therefore sees your internet address. None of this happens unless you ask for it. The transliteration and a translation fetched this way are kept only while the browser tab stays open. What you type in the surah search stays in your browser. Google Analytics counts page views on these pages and, without what was searched for or any name, how often search, listening, commentary, sharing, a change of translation or script, transliteration and “Continue reading” are used.

Analytics and crash reports

Wahidah uses Firebase Analytics to understand general app usage, such as which features are opened and whether the app is functioning as expected. Firebase Analytics assigns an app-instance identifier to a particular installation of the app for measurement purposes. Wahidah does not send your name, email address, prayer activity, Muslimah status, location, dua text, or other worship content to Analytics.

Wahidah disables collection of advertising identifiers (the Android Advertising ID, and Apple's advertising identifier on iPhone), does not ask to track you across other companies' apps and websites, and does not use Analytics for advertising or personalised advertising.

In the app, Analytics records six kinds of event: onboarding completed, a Quran session started, a notification opened, the app tour started, an image shared and a promotional code redeemed. Firebase Crashlytics receives crash reports (device model, Android or iOS version and the technical cause of the crash) so that faults can be fixed.

This website uses Google Analytics to count visits and pages viewed.

What we never do

• Show ads or allow advertising trackers.
• Sell or rent your personal data.
• Read your private backup or ordinary Family activity. Our administrators can see aggregate totals, can review community content when it is reported or held by the automated safety checks, and, to answer a support request, can look up the email address and trial dates of an account that started a trial. Each such lookup is recorded.

Service providers and third-party content

• Google Firebase: sign-in, the database that holds backups and community content, the functions that run Wahidah's servers, website hosting, analytics and crash reports, and delivery of Wahidah Announcements if you switch them on.
• Apple: if you choose Sign in with Apple, Apple confirms who you are to Wahidah, and the App Store takes payment for a subscription bought on iPhone. Apple does not receive your Wahidah data from us.
• Quran Foundation: the Tajweed page data, the English translations you can choose between, transliteration and tafsir shown in the app are provided through Quran Foundation. Your phone gets them from Wahidah's own servers, with one exception: the Tajweed page fonts are downloaded by your phone directly from Quran Foundation's font address, which therefore sees your phone's internet address. The tafsir (Tazkirul Quran, Maulana Wahiduddin Khan) and the other texts are the work of their authors and publishers, not of Wahidah.
• RevenueCat: keeps track of Premium subscriptions, as described under Purchases.
• MP3Quran.net: recitation audio, streamed from their servers to your phone.

Official prayer timetables are read by Wahidah's servers from the authorities that publish them; your phone asks Wahidah for the timetable of a country or zone and never sends its position. These providers process data under their own privacy terms.

Your choices and rights

• You can use Wahidah without an account, sign out at any time, and turn off any notification in the app.
• In the app, Account offers three separate actions: Sign out; Delete Wahidah account, which removes your cloud account, backup, community profile, requests, responses and Family membership and leaves what is on the phone; and Erase data on this device, which removes what is on the phone and leaves the account.
• You can also follow the steps on our account deletion page, or ask us to access, correct or delete data by emailing support@wahidah.app. We aim to respond within 30 days.

Children and younger users

Wahidah is intended for people aged 16 and over. It is not directed at children, and we do not knowingly collect personal information from children under 13. Community features (the Dua Circle, leaderboards and Family) are for people aged 16 and over. If you believe a child has given us personal information, write to support@wahidah.app and we will delete it.

Changes

If we change this policy we will update this page and the date above, and tell you in the app for important changes.

Contact

Wahidah · support@wahidah.app