Privacy Policy

Introduction

Hidden Hiqmah is an Islamic learning and worship companion app — Quran, hadith, prayer times, daily du'as, Kids learning, and an AI chat assistant called Ask Hiqmah. The Service is operated by Hidden Hiqmah LLC (“we,” “us”).

We built Hidden Hiqmah to be useful without being invasive. We do not run ads, we do not sell data, and we do not track you across the internet. You can use the app fully without an account; signing in is optional and only enables a small set of extras. This policy explains what data the app handles and why.

If anything here changes, we will update this page and the effective date above.

Information we collect

Stored on your device only

Almost everything the app remembers lives in your phone's local storage and never leaves your device. This includes:

• Bookmarks (verses, hadith, pages)
• Reading progress and last-read positions
• Streaks, dhikr counts and Kids learning progress — on your device while you are signed out; synced to your account if you sign in (see below)
• Font size and theme preference (light/dark)
• Notification preferences
• Prayer settings: calculation method, Asr juristic method, location mode
• Auto-play preference for Quran audio
• Ask Hiqmah conversation history

While you are signed out we have no copy of any of this — clearing the app or uninstalling removes it.

Synced to your account (only if you sign in)

Signing in is optional. If you do, these are stored on our servers (Supabase) against your account so they survive a reinstall and follow you between devices:

• Your email address
• Display name and profile icon, if you set one
• Journal entries — the reflections you write are stored as you wrote them
• Daily checklist completions, including which of the five prayers you marked, plus dhikr counts and streaks
• Hifz memorisation plans, cards and review history
• Saved reminders and custom dhikr
• Circles: the groups you join, your progress in them, and the messages you send. Deleted messages are hidden from the group but retained in our database
• If you enable push notifications: a device token from Apple and your device's timezone, so a notification can reach you at the right local hour
• AI Chat request timestamps and token counts, for your daily quota and our cost accounting

We do not sell any of it, and we do not use it for advertising. You can delete your account and everything above at any time — see “Data deletion” below.

Sent to third parties

• Location for prayer times — computed on your device. Your prayer times are calculated entirely on your device from your location; your GPS coordinates are not sent to any prayer-time server, and they work fully offline. Two optional exceptions: (1) to show your city's name, your coordinates are sent once to OpenStreetMap's geocoder (cosmetic only — prayer times don't need it); and (2) if you look up a different city's times, that city's coordinates are sent to aladhan.com (which supplies that city's timezone). Your own location is never required to leave your device, and we never store it on any server of ours.
• Questions sent to Ask Hiqmah. When you ask a question, your message is sent to our backend at /api/search, which forwards it to the Anthropic Claude API to generate an answer. The streamed response is returned to your device. We do not persistently log your queries or answers. Your conversation history is kept on your device. The one exception is if you tap Report on an answer — see “Reporting an AI answer” below.
• Account email + AI Chat usage (optional). If you choose to sign in, your email address is sent to Supabase (our authentication and database provider, hosted on AWS) to create your account and send you sign-in links. We also log a timestamp and a one-way hash of your IP address each time you make an AI Chat request, used solely to enforce a daily request limit and to protect against abuse. We never store the content of your questions on our servers, unless you choose to report an answer — the only case where a question and answer are saved. You can delete your account and all related records at any time from Settings.

What we do not collect

No name, no address, no phone number, no contacts, no analytics, no advertising identifiers, no tracking pixels, no crash telemetry tied to you, no marketing list. If you never sign in, nothing you do in the app is stored on our servers at all — with one exception: if you choose to report an AI answer, that report is stored so we can review it. What we do store for signed-in accounts is listed in full above.

How we use information

• Improve your experience: local settings (theme, font, bookmarks, streaks) make the app feel personal across sessions.
• Accurate prayer times: location is used solely to compute prayer times for where you are.
• AI Chat answers: your question is sent to Anthropic so Claude can generate a response with citations from Quran and hadith.

Third parties

• aladhan.com — prayer times API. Receives your coordinates (if you opt in) to return prayer time calculations.
• Anthropic — provider of the Claude model that powers Ask Hiqmah. Receives the text of your question for the duration needed to generate a reply, subject to Anthropic's own privacy policy.
• Supabase — authentication and database provider (hosted on AWS). Stores your email address if you choose to sign in, plus per-request timestamps and a hashed IP for daily quota enforcement on Ask Hiqmah.

Your rights

Because nearly all your data stays on your device, you are in control:

• Access: everything we store is visible inside the app.
• Delete: you can wipe it at any time (see below).
• Control: location and notifications are off until you turn them on, and can be revoked in iOS or Android system settings at any time.

Children

Hidden Hiqmah includes a Kids section designed to be safe and educational. The app does not knowingly collect personal information from children under 13. The data described above (progress, stars, streaks) stays on the device. We recommend parents supervise younger children's use of Ask Hiqmah and review prayer-time location settings.

Notifications

There are two kinds, and they work differently.

Local reminders — adhan and prayer-time alerts, daily checklist and du'a reminders, and Islamic-event reminders — are scheduled on your device and computed on-device from your prayer settings. Nothing about them leaves your phone, and they work with no connection.

Push notifications — the weekly du'a, occasional re-engagement nudges, and Circles chat alerts if you opt in — are sent from our servers through Apple's Push Notification service. To deliver them we store a push token issued by Apple for your device, and your device's timezone so the weekly du'a arrives at the right local hour. Each channel has its own switch in Settings, and turning push off stops them.

All notifications stay off until you enable them, and you can turn them off at any time:

• iOS: Settings → Notifications → Hidden Hiqmah → Allow Notifications (off)
• Android: Settings → Apps → Hidden Hiqmah → Notifications

Changes to this policy

If we change how the app handles data — for example when optional cross-device sync ships — we will update this page and the effective date. Material changes will also be flagged in the app.