Privacy Policy

Emam is an Islamic companion mobile app that offers prayer times, Qibla direction, dhikr, a community dua board, Zakat tools, AI-assisted duas, a Tajweed practice tool, a Live Khutbah Translator, and curated Islamic content. The app is operated by [LEGAL ENTITY — to be confirmed by Emam] ("Emam", "we", "us", or "our").

This Privacy Policy covers the Emam mobile app for iOS and Android and the related backend services we run at pathway.emam.ai, as well as our website at https://emam.ai. Please note that our website domain is emam.ai, but our support mailbox is support@emamapp.com. This policy explains what information we collect, why we collect it, who we share it with, and the choices and rights you have.

You can use most features of Emam as a guest, without creating an account. Some features (for example posting on the Global Dua Board) require you to sign in. We describe how each of these works below.

We collect only the information needed to provide and improve the app. The categories below depend on which features you use and whether you sign in.

Account data. If you create an account, we collect and store your name, email address, the sign-in (authentication) provider you used, and your profile picture URL. You may also later add a phone number, gender, and date of birth. We record the dates your account was created and updated. This account record is stored in our Firestore database at the path users/{uid}, where {uid} is your unique account identifier. Emam supports three sign-in methods: email and password (with email verification), Google Sign-In, and Apple Sign-In. We use email verification to confirm ownership of the email address used for email and password sign-in.

Profile photos. If you add a profile photo, it is compressed to a 512 by 512 JPEG and uploaded to Firebase Storage at the path profile_pictures/{uid}.jpg.

Authentication provider data. Authentication is handled through Firebase Authentication. When you sign in with Google or Apple, we receive basic profile information from that provider (such as your name and email) to create and secure your account. Apple Sign-In may give you the option to hide your real email address.

Guest device identifier. If you use Emam without an account, we generate a device identifier that is stored locally on your device (in SharedPreferences). We use this identifier to attribute guest activity such as your contribution to the global dhikr counter and your participation on the Global Dua Board. It is an identifier, but it is not linked to your name or contact details unless you create an account. You can clear it by clearing the app's data or uninstalling the app.

Location information. With your permission, we collect your device location (precise coordinates) to calculate accurate prayer times, fasting times, and Qibla direction. Your coordinates are sent to our backend at pathway.emam.ai to compute these times. We use your location to deliver the feature; we do not use it for advertising. You can deny or revoke location permission at any time in your device settings, though prayer time and Qibla accuracy may then be reduced or require manual entry.

Microphone and voice audio. Voice is sensitive information, so we use your microphone only when you choose to use a feature that needs it. The Tajweed practice tool streams your recitation audio over a WebSocket connection to our backend at pathway.emam.ai so that our AI can transcribe it and give you ayah-by-ayah feedback in real time. You may also record and upload a voice sample (a "voice clone"), which is cached locally on your device. The Live Khutbah Translator streams Arabic sermon audio over a WebSocket connection to our backend for real-time AI transcription and translation into more than 20 languages, with optional text-to-speech. Streamed audio is processed to provide these features in real time.

AI feature inputs. When you use Dua AI, you type a description of your situation, which is sent to our backend (the /dua/ask endpoint) so the AI can generate a suggested dua with references. When you use the Zakat calculator, you enter financial inputs such as your assets and liabilities, which are sent to our backend (the /zakat/calculate endpoint) to calculate your Zakat server-side using live nisab rates. These financial inputs are processed on the server to perform the calculation and return your result.

User-generated public content. If you are signed in, you can post short dua requests (up to 200 characters) on the Global Dua Board. These posts are public and visible to all Emam users worldwide, who can tap "Ameen" and share them. Your Ameen interactions and your contributions to aggregate community counts, such as the global dhikr counter, are also recorded.

Diagnostics and crash data. We use Firebase Crashlytics to collect crash reports, stack traces, and device and operating-system diagnostic information. This helps us find and fix problems and improve the stability of the app. Crashlytics is the only diagnostics tool we use for this purpose; we do not use advertising or analytics SDKs beyond it.

Notification preferences. We store your choices for notifications, including Adhan (prayer-time) alerts and Islamic event reminders, which you can toggle on or off independently. Background refresh is used to keep your prayer schedules current.

We use the information we collect for the following purposes:

• To provide the app's features, such as calculating prayer times and Qibla direction, generating duas, calculating Zakat, transcribing and translating audio, and showing the dua board.
• To create and secure your account and to authenticate you when you sign in.
• To personalize your experience, for example by tailoring prayer schedules to your location and your notification preferences.
• To sync your account data across your devices.
• To keep prayer schedules current through background refresh and to send the notifications you have enabled.
• To maintain safety, including moderating public dua board content and responding to reports of objectionable content or abusive users.
• To diagnose problems, fix bugs, and improve the reliability and quality of the app.
• To respond to your support requests and communicate with you about the service.
• To comply with legal obligations and to protect the rights, safety, and property of Emam, our users, and the public.

Several Emam features are powered by artificial intelligence running on our backend at pathway.emam.ai. This includes Dua AI, real-time Tajweed feedback, Live Khutbah transcription and translation, scholarly insights, daily inspiration, Islamic news, and khutbah summaries. To provide these features, your inputs (text prompts, financial figures, or streamed audio) are processed by our AI systems.

Please understand that AI outputs are assistive and may contain errors. Generated duas, references, transcriptions, and translations are produced by automated systems and may be incomplete or inaccurate. They are not religious rulings (fatwa) and are not a substitute for authentic Islamic sources or qualified scholars. Always verify AI-generated religious content against trusted sources before relying on it or sharing it.

Where data protection laws such as the EU GDPR or the UK GDPR apply, we rely on the following legal bases to process your information:

• Consent: for activities that require your permission, such as accessing your location, using your microphone, and sending you notifications. You can withdraw consent at any time.
• Performance of a contract: to provide the features you request, such as your account, the AI tools, and the dua board.
• Legitimate interests: to keep the app secure and stable, prevent abuse, moderate public content, and improve our services, in a way that respects your rights.
• Legal obligation: to comply with applicable laws and lawful requests.

We request permission for sensitive access (location, microphone, and notifications) through your device's standard permission prompts. You can withdraw these permissions at any time in your device settings or within the app where a toggle is provided. Withdrawing a permission may limit or disable the related feature, but it will not affect processing we already carried out lawfully.

We do not sell your personal data. We share information only with the service providers (processors) that help us operate Emam, and only as needed to provide the app:

• Google Firebase, for authentication (Firebase Authentication), database storage (Firestore), file storage (Storage), crash reporting (Crashlytics), and hosting.
• Google Sign-In and Apple Sign-In, for the sign-in methods you choose to use.
• Crisp, which powers our in-app live chat support.
• The Emam backend at pathway.emam.ai, which performs AI transcription, translation, and generation, and computes prayer times, fasting times, and Qibla direction.
• Prayer-time, Qibla, and content APIs used to deliver app features.

These providers process your information on our behalf under appropriate agreements, and we share data with them only to provide the service. We do not sell your personal data. We may also disclose information if required by law, to enforce our terms, or to protect the safety and rights of users and the public.

Content you post on the Global Dua Board is public. Your dua requests are visible to all Emam users worldwide, who can tap "Ameen" and share them. Please do not include sensitive personal information in your posts.

Public content is subject to moderation. In line with app store requirements, Emam provides ways to report objectionable content and to block abusive users. We may remove content or restrict accounts that violate our terms or that we consider harmful, offensive, or unlawful.

We keep your information for as long as your account is active or as needed to provide the app, comply with our legal obligations, resolve disputes, and enforce our agreements. When you delete your account, we remove your account data as described in the deletion section below. Audio streamed for real-time Tajweed and khutbah translation is processed to provide the feature; voice samples you record as a voice clone are cached locally on your device. Aggregate community data, such as the global dhikr counter, may be retained in anonymous, non-identifying form.

We use reasonable technical and organizational measures to protect your information, including encrypted connections for streaming and secure cloud infrastructure. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please use a strong password and keep your sign-in credentials safe.

Depending on where you live, you may have rights over your personal information, including the right to access, correct, delete, or receive a copy of your data, to withdraw consent, and to object to or restrict certain processing.

If you are in the European Economic Area or the United Kingdom, the GDPR and UK GDPR give you these rights, and you may lodge a complaint with your local data protection authority. If you are a California resident, the CCPA and CPRA give you the right to know what personal information we collect, to request deletion, to correct inaccurate information, and to not be discriminated against for exercising your rights. Because we do not sell or share personal information for cross-context behavioral advertising, there is no sale to opt out of.

You can exercise many choices directly in the app, such as editing your profile and toggling location, microphone, and notification permissions. To make a rights request, email us at support@emamapp.com. We will verify your request and respond within the time required by applicable law.

You can delete your account at any time using the in-app "Delete Account" option, found in your Account or Settings screen. For Google and Apple accounts, you may be asked to re-authenticate to confirm your identity. The in-app deletion removes your user record from our Firestore database (users/{uid}) and deletes your Firebase Authentication account.

Important: at this time, the in-app "Delete Account" button does not by itself remove your profile image from Firebase Storage (profile_pictures/{uid}.jpg) or your server-side records (such as Global Dua Board posts and dhikr contributions). To request full erasure of all associated data, including your stored profile image and server-side records, please email support@emamapp.com from the email address on your account. This email route is also available to guests and to anyone who cannot use the in-app button.

We aim to delete your account and associated data within 30 days of an in-app deletion or a verified email request. Copies held in routine backups are purged on our normal backup cycle. We may retain limited information where required by law or for legitimate purposes such as security and fraud prevention, and aggregate, non-identifying community data (such as the global dhikr counter) may remain.

International transfers. Emam and our service providers, including Google (Firebase) and the Emam backend at pathway.emam.ai, may process your information in countries other than your own, where data protection laws may differ. Where required, we put appropriate safeguards in place to protect your information when it is transferred internationally.

Children. Emam is not directed to children under 13, or under the minimum age of digital consent in your region if that age is higher, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us so we can remove it.

Changes to this policy. We may update this Privacy Policy from time to time. When we make material changes, we will update the date below and, where appropriate, notify you in the app. Your continued use of Emam after an update means you accept the revised policy.

Governing law. This Privacy Policy is governed by the laws of [GOVERNING-LAW JURISDICTION — to be confirmed by Emam], without regard to conflict of law principles.

Contact us. If you have questions about this policy or your data, contact [LEGAL ENTITY — to be confirmed by Emam] by email at support@emamapp.com or visit https://emam.ai.