Privacy Policy

Introduction

Hidden Hiqmah is an Islamic learning and worship companion app — Quran, hadith, prayer times, daily du'as, Kids learning, and an AI chat assistant called Ask Hiqmah. The Service is operated by Hidden Hiqmah LLC (“we,” “us”).

We built Hidden Hiqmah to be useful without being invasive. We do not run ads, we do not sell data, and we do not track you across the internet. You can use the app fully without an account; signing in is optional and only enables a small set of extras. This policy explains what data the app handles and why.

If anything here changes, we will update this page and the effective date above.

Information we collect

Stored on your device only

Almost everything the app remembers lives in your phone's local storage and never leaves your device. This includes:

• Bookmarks (verses, hadith, pages)
• Reading progress and last-read positions
• Streaks: current streak, last visit date, longest streak
• Font size and theme preference (light/dark)
• Dhikr counts
• Notification preferences
• Prayer settings: calculation method, Asr juristic method, location mode
• Kids learning progress (stars, badges, completed lessons)
• Auto-play preference for Quran audio
• Ask Hiqmah conversation history

We do not have a copy of any of this. Clearing the app or uninstalling removes it.

Sent to third parties

• Location for prayer times — computed on your device. Your prayer times are calculated entirely on your device from your location; your GPS coordinates are not sent to any prayer-time server, and they work fully offline. Two optional exceptions: (1) to show your city's name, your coordinates are sent once to OpenStreetMap's geocoder (cosmetic only — prayer times don't need it); and (2) if you look up a different city's times, that city's coordinates are sent to aladhan.com (which supplies that city's timezone). Your own location is never required to leave your device, and we never store it on any server of ours.
• Questions sent to Ask Hiqmah. When you ask a question, your message is sent to our backend at /api/search, which forwards it to the Anthropic Claude API to generate an answer. The streamed response is returned to your device. We do not persistently log your queries or answers. Your conversation history is kept on your device.
• Account email + AI Chat usage (optional). If you choose to sign in, your email address is sent to Supabase (our authentication and database provider, hosted on AWS) to create your account and send you sign-in links. We also log a timestamp and a one-way hash of your IP address each time you make an AI Chat request, used solely to enforce a daily request limit and to protect against abuse. We never store the content of your questions on our servers. You can delete your account and all related records at any time from Settings.

What we do not collect

No name, no address, no phone number, no contacts, no analytics, no advertising identifiers, no tracking pixels, no crash telemetry tied to you, no marketing list. The only personal data we ever store server-side is your email address (only if you sign in) and AI Chat request timestamps (per-account or per-device, for quota only).

How we use information

• Improve your experience: local settings (theme, font, bookmarks, streaks) make the app feel personal across sessions.
• Accurate prayer times: location is used solely to compute prayer times for where you are.
• AI Chat answers: your question is sent to Anthropic so Claude can generate a response with citations from Quran and hadith.

Third parties

• aladhan.com — prayer times API. Receives your coordinates (if you opt in) to return prayer time calculations.
• Anthropic — provider of the Claude model that powers Ask Hiqmah. Receives the text of your question for the duration needed to generate a reply, subject to Anthropic's own privacy policy.
• Supabase — authentication and database provider (hosted on AWS). Stores your email address if you choose to sign in, plus per-request timestamps and a hashed IP for daily quota enforcement on Ask Hiqmah.

Your rights

Because nearly all your data stays on your device, you are in control:

• Access: everything we store is visible inside the app.
• Delete: you can wipe it at any time (see below).
• Control: location and notifications are off until you turn them on, and can be revoked in iOS or Android system settings at any time.

Data deletion

To remove your data:

1. Open the app and go to Settings → Data → Clear local data, or
2. Uninstall the app from your device.
3. If you have an account, open Settings → Account → Delete account to permanently delete your account and all associated data — Hifz progress, daily checklist & streaks, Circles you own, saved reflections, and AI-chat usage logs. You can also email support@hiddenhiqmah.com from the address you signed up with.

The local actions permanently remove bookmarks, streaks, settings, and chat history from your device. Server-side records (only relevant if you signed in) are removed via the email request above.

Children

Hidden Hiqmah includes a Kids section designed to be safe and educational. The app does not knowingly collect personal information from children under 13. The data described above (progress, stars, streaks) stays on the device. We recommend parents supervise younger children's use of Ask Hiqmah and review prayer-time location settings.

Notifications

Prayer-time and daily reminders are scheduled locally on your device. They are computed on-device from your prayer settings and are not sent from, or through, any server — nothing about them leaves your phone. They stay off until you enable them, and you can turn them off at any time:

• iOS: Settings → Notifications → Hidden Hiqmah → Allow Notifications (off)
• Android: Settings → Apps → Hidden Hiqmah → Notifications

Changes to this policy

If we change how the app handles data — for example when optional cross-device sync ships — we will update this page and the effective date. Material changes will also be flagged in the app.