Privacy Policy

Last updated: 15 June 2026 · Applies to Khushu iOS app

1. Who We Are

Khushu is an iOS application developed and operated by Talha Malik ("we", "us", "our"). If you have any questions about this policy, contact us at maaliktalha1@gmail.com.

For users in the United Kingdom and European Economic Area, we are the data controller under UK GDPR and EU GDPR.

2. What Data We Collect

Khushu is designed to work without collecting personal data. Here is exactly what happens on your device:

• Location (on-device only): Your approximate location is used to calculate accurate Islamic prayer times (Fajr, Dhuhr, Asr, Maghrib, Isha) for your city. This data is processed entirely on your device and on the Aladhan API (a free, privacy-respecting prayer time service). Your coordinates are never stored on our servers and are never shared with third parties.
• Screen Time / App selections (on-device only): The apps you choose to block during prayer time are stored locally on your device using Apple's FamilyControls framework. We cannot see which apps you select and this data never leaves your device.
• Prayer streak data (on-device only): Your prayer streak counts are stored in your device's local storage. They are not synced to the cloud.
• Push notification tokens: If you grant notification permission, Apple delivers local notifications scheduled by the app on your device. We do not send remote push notifications and do not store device tokens.

We do not collect: your name, email address, payment details (handled by Apple), device identifiers, or browsing/usage analytics beyond what Apple provides in App Store Connect (aggregate, anonymous crash reports).

3. Apple's Screen Time API (FamilyControls)

Khushu uses Apple's Screen Time API and FamilyControls framework to temporarily restrict access to apps you select during prayer windows. This permission is granted directly to Apple's framework on your device. We do not have access to, and cannot read, the list of apps on your device or which apps you choose to block. All processing happens on-device under Apple's control.

You can revoke this permission at any time via Settings → Screen Time on your iPhone.

4. Location Data

Khushu requests "When In Use" location permission solely to determine your city for prayer time calculation. We use the Aladhan API to fetch prayer times based on your coordinates. The Aladhan API does not store personal information linked to your request.

You can disable location access at any time via Settings → Privacy & Security → Location Services → Khushu. Without location access, prayer times will not be available.

5. Legal Basis for Processing (UK / EU GDPR)

Where GDPR applies, we process data under the following legal bases:

• Legitimate interests: Processing your location to deliver the core prayer time functionality you downloaded the app to receive.
• Consent: Push notifications — you explicitly grant or deny this permission. You can withdraw consent at any time in iOS Settings.

6. Data Retention

Since all data is stored locally on your device, it is retained until you delete the app or reset your device. We do not hold any of your data on external servers. Uninstalling Khushu removes all locally stored data.

7. Third-Party Services

• Apple App Store / StoreKit: Subscription purchases and billing are handled entirely by Apple. We do not receive or store your payment information. Apple's privacy policy applies to transaction data.
• Superwall: We use Superwall's SDK for subscription analytics. Superwall may collect anonymised usage events (e.g. paywall shown, subscription started). No personally identifiable information is shared. See Superwall's Privacy Policy.
• Aladhan API: Prayer times are fetched from aladhan.com using your coordinates. See Aladhan's Privacy Policy.

8. Your Rights (UK & EU Users)

Under UK GDPR and EU GDPR, you have the right to:

• Access any personal data we hold about you
• Rectification of inaccurate data
• Erasure ("right to be forgotten")
• Restriction of processing
• Data portability
• Object to processing based on legitimate interests

Given that we store no personal data on our servers, most of these rights are exercised simply by deleting the app. For any specific requests, contact us at maaliktalha1@gmail.com.

If you are in the UK, you have the right to lodge a complaint with the Information Commissioner's Office (ICO). If you are in the EU, you may contact your local supervisory authority.

9. Children's Privacy

Khushu is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has provided data, contact us and we will take appropriate action.

10. Changes to This Policy

We may update this policy from time to time. The updated version will be available within the app and on this page, with the revised date noted at the top. Continued use of Khushu after changes constitutes acceptance of the updated policy.

11. Contact

For any privacy-related questions or requests:
Email: maaliktalha1@gmail.com