Privacy Policy

📅 Last Updated: August 2, 2026

Mutabaah Go ( "We", "Us", or "Our") respects your privacy and is committed to protecting it through this Privacy Policy. This document outlines how we collect, use, disclose, and safeguard your personal information when you use our mobile application, Mutabaah Go ("the Service"). It also informs you of your privacy rights and how the law protects you.

By using the Service, you agree to the practices described in this Privacy Policy. If you do not agree with our policies and practices, please do not use the application.

📄 Policy Summary

Personal Data collected for the following purposes and using the following services:

🧾 Authentication and Account Management

Service: Google Sign-In
Personal Data: Full name, email address, username
Purpose: To create and authenticate user accounts seamlessly

👨‍👧 Child Profile Management

Personal Data: Child’s name, child’s gender
Purpose: To personalize and track children’s worship activities within the app

📍 Geolocation Services

Personal Data: Approximate and precise device location (GPS, network-based, or IP-based)
Purpose: To determine accurate prayer times, to find nearby mosques through the Near Mosque feature, and to calculate the Qibla direction based on the user's current location. Location data is requested only when the relevant feature is in use, and is not continuously tracked in the background.

📖 Quran Reading & Personalization

Personal Data: Last-read position (surah number, ayah number, scroll position, saved font size), display preferences (preferred translation language, display mode, font size)
Purpose: To let you resume reading from where you left off across devices, and to persist your Quran display preferences for a consistent experience.

🕌 Near Mosque (Mosque Finder)

Services: OpenStreetMap Overpass API, Nominatim (OpenStreetMap reverse geocoding)
Personal Data: Device location (used in-memory only to build the search query; not stored on our servers)
Purpose: To query publicly available mosque data around your current location and display the results within the app. Mosque data is provided by OpenStreetMap contributors and is subject to the OpenStreetMap license.

🧭 Qibla Direction Finder

Personal Data: Device location and device sensor readings (magnetometer / compass, accelerometer)
Purpose: To calculate and display the direction of the Qibla from your current location. Sensor readings are processed on-device in real time and are not transmitted to or stored on our servers.

🔔 Push Notifications

Service: Firebase Cloud Messaging (FCM)
Personal Data: Device token
Purpose: To send reminders, app updates, and worship-related alerts

📊 User Behavior and Worship Tracking

Personal Data: Prayer logs and habits, including user and child activity
Purpose: To generate performance summaries and encourage consistency in prayer

🏆 Gamification (EXP, Levels, Streaks, Badges, Missions)

Personal Data: Experience points (EXP) and spendable points, together with a per-transaction record of how each was earned (date, source such as a specific prayer, sunnah practice, mission, or streak milestone), current level, current and longest streak, streak freeze usage, badges earned and the date each was unlocked, missions assigned to you or created by you for a child (mission name, point reward, and the prerequisites that must be met), mission completion state per day, and seasonal archives of past results
Purpose: To operate the gamification features — award EXP and points for recorded worship, calculate levels and streaks, unlock badges, evaluate whether a mission's prerequisites have been met, show your points history, and archive results at the end of a season. EXP and points are calculated on our server from the worship data you or your child record; the calculation is re-run for the affected day whenever that data changes, so a corrected entry can also correct the EXP awarded for it.

🥇 Family Leaderboard

Personal Data: Display name, EXP total, level, and rank
Purpose: To show a seasonal ranking within your own family group only — that is, the parent account and the child profiles belonging to it. The leaderboard is not public, not global, and is never shown to users outside your family group. No leaderboard data is published on the web or shared with other families.

🎁 Reward Catalog and Redemption

Personal Data: Reward items defined by a parent (name, description, point cost, whether the item can be claimed only once), and redemption records (item name, points spent, status — claimed, fulfilled, or rejected — and the times of claiming and fulfilment)
Purpose: To let a parent define rewards that a child can redeem with points earned in the app, to deduct points when a reward is claimed, to let the parent mark it as given or rejected, and to return the points if it is rejected. Rewards themselves are agreed and handed over between parent and child outside the app; we do not process, ship, or hold anything of value, and no payment information is involved.

📲 Install Attribution and Deep Links

Services: Google Play Install Referrer API, Android App Links / deep links
Personal Data: Install referrer string provided by the Google Play Store (may contain campaign parameters such as utm_source or a referral code) and referral parameters contained in a link you opened to install or launch the app
Purpose: To attribute an installation to the referral code that led to it, so that the referral and affiliate program can credit the correct referrer. We read this information at first launch only; if it contains no referral code, nothing is stored.

🔵 Bluetooth Permissions (SmartTag — Not Active)

Personal Data: None in this release
Purpose: The application declares Bluetooth permissions (scan and connect) for a planned "SmartTag" feature intended to detect congregational (jamaah) prayer attendance at a participating mosque. This feature is disabled in the current release and performs no Bluetooth scanning. No Bluetooth or beacon data is collected, transmitted, or stored. If and when the feature is enabled, this Privacy Policy will be updated beforehand to describe exactly what is collected, and the feature will require your explicit action to set up.

🤝 Referral Program and Affiliate System

Personal Data: Referral codes, referrer and referee relationships, commission tracking data, withdrawal information
Purpose: To manage the referral program, track commissions, process rewards, and facilitate affiliate partnerships

💬 Messaging Bot Integration

Services: Telegram Bot API, WhatsApp Business API
Personal Data: Telegram username, WhatsApp phone number
Purpose: To send prayer reminders and notifications through third-party messaging platforms

🎨 Displaying Content from External Platforms

Services:

  • Google Fonts
    Personal Data: Usage Data (e.g. font loading data)
    Purpose: To ensure visual consistency and enhance typography presentation
  • LottieFiles Animations
    Personal Data: None
    Purpose: To deliver animated visual content such as notification animations for better user experience
  • OpenStreetMap (Overpass API & Nominatim)
    Personal Data: Approximate coordinates (latitude/longitude) sent as part of the search query; IP address visible to the service provider as part of normal HTTP traffic
    Purpose: To look up mosques and address labels near your location for the Near Mosque feature. Usage is subject to OpenStreetMap's Nominatim and Overpass usage policies.

📈 Analytics

Service: Google Analytics for Firebase, included as part of the Firebase SDK used for push notifications
Personal Data: Automatically collected app usage and device data (for example app open events, session duration, app version, device model, OS version, coarse region, and a resettable app instance identifier)
Purpose: To understand aggregate usage and stability so the app can be improved. We do not use this data to build advertising profiles, and we do not run advertising in the app. Note that this component ships with the Firebase SDK and begins collecting basic events when the app starts; we do not send custom analytics events describing your worship records.

🗂️ Other Automatically Collected Information

Personal Data: Device and application data such as IP address, browser and OS type, device name, interaction logs, and crash/error reports
Purpose: To maintain app security and stability, troubleshoot issues, and support internal reporting and analytics

Note: Like many apps, we use cookies or similar technologies where relevant, to collect anonymous usage data.

1. What Information Do We Collect?

Personal Information You Disclose to Us

We collect personal information that you provide to us directly.

The personal information we collect depends on your interactions with the application. This may include:

  • Full name
  • Email address
  • Username
  • Child's name
  • Child's gender
  • Telegram username (optional, for bot integration)
  • WhatsApp phone number (optional, for bot integration)

We do not collect or process sensitive personal information.

Application Data

If you use our application, we may collect the following data if you grant permission:

  • Geolocation Information: Used to determine prayer times based on your location.
  • Push Notifications: Used to send reminders or updates through Firebase Cloud Messaging.
  • Messaging Bot Integration: If you choose to connect your Telegram or WhatsApp account, we collect your messaging platform credentials (username or phone number) to send prayer reminders through these platforms.
  • Worship Activity: Your prayer logs and those of your child (if applicable) are collected to track progress.
  • Quran Reading Data: Your last-read position (surah, ayah, scroll offset, saved font size) and display preferences are saved to your account so you can resume reading on any device.
  • Mosque Search: When you open the Near Mosque screen, your current location is used once per search to query public mosque data from OpenStreetMap. The location coordinates themselves are not stored on our servers.
  • Qibla Direction: When you open the Qibla screen, the app reads your current location and device compass sensors to calculate the Qibla direction. Sensor data is processed on-device only and is not uploaded.
  • Gamification Data: EXP and point transactions derived from your recorded worship, levels, streaks, badges, missions (including missions a parent creates for a child), reward items and redemption records, and seasonal archives. This data is derived from activity you record — we do not infer it from any other source.
  • Family Leaderboard Visibility: If gamification is active, your display name, EXP, level, and rank are visible to the other members of your own family group (the parent account and its child profiles) and to no one else.

Information Automatically Collected

Some information is collected automatically to ensure the app works properly and securely.

  • Device Information: Includes device model, OS version, and unique identifiers.
  • Usage Logs: Includes time of access, pages/features used, and crash reports.
  • IP Address: Used for location estimation and security purposes.

This data is used for internal analytics, troubleshooting, and service improvement. We may use cookies or similar technologies as part of this process.

2. How We Use and Process Your Information

We process your personal information for various purposes, depending on how you interact with the Mutabaah Go application. The primary goals of data processing are to provide services, ensure security, and enhance the overall user experience. We also process data in accordance with applicable laws and, in certain cases, based on your explicit consent.

We may use your personal information to:

  • Provide, maintain, and improve the app’s features and services.
    Your data helps ensure that the service runs smoothly, receives regular updates, and meets users’ needs.
  • Process subscriptions and facilitate payments.
    If you use the subscription feature, your information will be used to manage the process securely and lawfully.
  • Customize and personalize your experience within the app.
    This includes setting preferences, prayer reminders, or displaying summaries that are relevant to your usage behavior.
  • Respond to inquiries or customer support requests.
    We use your information to assist with technical issues, account deletion requests, or other support-related matters.
  • Send updates, notifications, or promotional materials related to the app or other relevant services.
    You can opt out of non-essential communications at any time.
  • Detect, investigate, and prevent fraud or unauthorized activity.
    This includes implementing security measures, system audits, and monitoring data integrity.
  • Manage and operate the referral program and affiliate system.
    This includes tracking referral relationships, calculating commissions, processing rewards, managing affiliate partnerships, and facilitating withdrawals or payments related to the referral program.

We also process your data in the following contexts:

  • To facilitate account creation and user authentication.
    This ensures that you can securely create, access, and manage your account.
  • To request feedback and communicate with you about your experience.
    This helps us improve the quality of our services and features based on real user input.
  • To protect an individual’s vital interests.
    In certain cases, we may process data to prevent harm or ensure the safety of users or others.

All data processing is conducted on the basis of lawful grounds, including legitimate interest, contractual necessity, legal obligation, and/or user consent, depending on your jurisdiction.

3. Legal Grounds for Processing Personal Information

In Simple Terms:
We only collect and process your personal information when there's a clear and valid legal reason to do so. Depending on your country or region, this might include your consent, a legal requirement, the fulfillment of a contract, the protection of essential interests, or our legitimate business needs.

For Users in the EU, UK, and Similar Jurisdictions:

We process your personal data in compliance with applicable data protection laws. This may be based on:

  • Your Consent – You’ve explicitly allowed us to use your information for specific purposes. You can revoke this at any time.
  • Contractual Obligation – We need the data to fulfill a contract or take action before entering one.
  • Legal Compliance – We’re required to collect or retain data to meet legal obligations.
  • Vital Interests – We may process data to protect your life or the safety of others.
  • Legitimate Interests – We may use your data to operate and improve our services, as long as it doesn’t override your rights or freedoms.

Notice for Users in Canada

If you're a Canadian resident, certain data processing activities may be carried out under either express or implied consent, depending on the context.

In some cases, Canadian law permits us to process your personal data without prior consent. These exceptions include, but are not limited to:

  • When it's urgent and in your best interest, but getting your consent is impractical.
  • For the purpose of investigating or preventing fraud and unlawful activities.
  • As part of a lawful business transaction, provided privacy safeguards are in place.
  • To support an insurance claim using a witness statement.
  • For identifying, locating, or notifying a next of kin of an injured, ill, or deceased person.
  • Where there's reason to suspect financial abuse.
  • When consent would compromise an investigation related to a legal breach.
  • If legally required by a subpoena, court order, or similar legal mechanism.
  • In the course of someone's professional duties, where data usage aligns with the original purpose.
  • If the data is collected for journalistic, literary, or artistic purposes.
  • If the information is already publicly available under Canadian privacy laws.

This notice reflects our commitment to follow regional data protection principles while offering transparent practices regardless of where you're located.

4. Data Storage and Sync Strategy

  • Primary Storage (Server): Your worship logs, habit data, and preferences are first saved to our secure server, ensuring your data is backed up and accessible across devices.
  • Local Cache (Isar): For performance optimization, a copy of your data is cached locally on your device using the Isar database immediately after successful server sync.
  • Data Flow:
    • User action → send to server API
    • On success → write to Isar cache
    • Reads → prefer local Isar for speed, fallback to server if missing
  • Security & Encryption: Data in transit is encrypted via HTTPS, and local Isar data is protected by your device’s OS encryption.
  • Gamification Ledger (Server): EXP and point awards are stored on the server as individual transactions rather than as a single running total. This lets the server recalculate a day from scratch when the underlying worship record changes, so balances stay correct after a correction, and prevents the same activity from being awarded twice.
  • Notification History (Local): The most recent notifications you receive are kept on your device only, so you can review them in the app. This list is capped and is removed when the app is uninstalled or its data is cleared.
  • User Control: You can clear local cache (Settings → Reset Data)

5. Data Sharing and Disclosure

As an independent developer, I only use your personal data as needed to support the features of the Mutabaah Go app. I do not share your personal information with unrelated third parties, and I never sell your data for any reason.

However, in limited situations, I may share your information with third parties, strictly for the purposes described below:

  • Within Your Own Family Group: Data belonging to a child profile — including worship records, EXP, points, streaks, badges, missions, and reward redemptions — is visible to the parent account that manages that profile, and appears alongside other family members on the family leaderboard. This sharing is the purpose of the feature and is limited strictly to your own family group.
  • With Essential Service Providers: Your data may be processed by tools or platforms that help the app function—such as Firebase for notifications or Google Sign-In for authentication. These providers only access the data required for their service.
  • When Legally Required: If there is a legal obligation—such as a court order or request from authorities—I may disclose data to comply with applicable laws.
  • During App Changes or Handovers: If the app is ever transferred, updated, or merged with another project, and data transfer is needed to keep your account active, you will be informed before it happens.
  • With Your Permission: In any case where data sharing is not strictly required, I will only do so with your explicit consent.

I do NOT sell, rent, or share your personal information with advertisers or unrelated third parties.

6. Retention of Your Data

Personal data is retained only for as long as necessary to support the core features of the Mutabaah Go application or to comply with applicable legal obligations.

When an account is deleted by the user, all associated data—including worship records, child profile information, and all gamification data (EXP and point transactions, levels, streaks, badges, missions, reward items, redemption records, and seasonal archives)—will be permanently erased from the system, unless a longer retention period is legally required (e.g. for security or compliance).

Gamification seasons are archived when a season ends so that past results can be shown to you. Archived seasons are retained while your account exists and are deleted together with the account.

If the app remains unused for an extended period without account deletion, certain non-identifiable data (such as activity logs or usage patterns) may be retained temporarily for system performance monitoring and future app improvement. Users may request full data deletion at any time.

7. How We Protect Your Data

Reasonable security measures are implemented to help protect personal data from unauthorized access, alteration, or disclosure. While every effort is made to safeguard information, it’s important to acknowledge that no method of transmission or storage over the internet is completely secure.

To enhance data protection:

  • Encryption protocols are used during data transmission, particularly for login and account-related processes.
  • Access to personal data is limited and granted only to those who require it to operate or support app functionality.

Important: Users are encouraged to remain cautious and avoid sharing sensitive or unnecessary personal information within the app or through external channels.

8. Your Data Rights

In accordance with data protection laws such as the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), users may have specific rights regarding their personal data, depending on their location and applicable regulations.

These rights may include:

  • Access: Request a copy of the personal data currently stored.
  • Correction: Request updates or corrections to inaccurate or incomplete data.
  • Deletion ("Right to be Forgotten"): Request permanent removal of personal data.
  • Objection: Restrict or object to certain types of data processing.

To request any of the above, please contact:
zazuba.studio@gmail.com

9. Children’s Privacy

This Service is intended for use by individuals who are 18 years of age or older.

The application includes features that allow adult users to manage profiles for children (such as worship tracking), but personal accounts are not intended to be created or managed directly by minors.

No personal data is knowingly collected from individuals under the age of 18 without the involvement of a parent or legal guardian. If you are a guardian and believe that a minor has submitted personal information without consent, please contact us promptly to address the situation.

By using this Service, you confirm that you are at least 18 years old or have appropriate legal authorization to manage data on behalf of a minor.

Child Profiles and Gamification

Several features are designed to be used by an adult on behalf of a child, and they need to be understood in that light:

  • A child profile is not a separate account. It has no login of its own and is created, accessed, and removed only by the adult account that owns it.
  • A parent can assign missions to a child profile, define reward items, and see all of that profile's worship records, EXP, points, streaks, and badges. The adult account holder is responsible for deciding what is appropriate for their child.
  • A child profile's display name, EXP, and level appear on the family leaderboard, visible to the parent account and the other child profiles in the same family group. Nothing is shown outside that group.
  • No data about a child is used for advertising, profiling, or any purpose beyond operating the features described in this Privacy Policy, and it is never sold.
  • A parent may delete a child profile, and its associated data, at any time from within the app.

10. International Data Transfers

To deliver reliable and secure services, certain personal data may be processed or stored on servers located outside the user’s country of residence. This may include data handling by cloud infrastructure providers such as Firebase, Google Fonts, or other integrated third-party services.

These services may operate in jurisdictions that do not have the same level of data protection laws as your home country. In such cases, reasonable steps are taken to ensure that your personal information remains protected and handled in accordance with this Privacy Policy.

By using the application, you acknowledge that your personal data may be transferred to and processed in countries other than your own.

11. Changes to This Privacy Policy

This Privacy Policy may be updated from time to time to reflect changes in legal requirements, features, or data handling practices.

If any material changes are made:

  • An in-app notification or email may be sent to inform affected users.
  • The “Last Updated” date at the top of this page will be revised accordingly.

Continued use of the Service after such updates indicates acceptance of the revised Privacy Policy.

12. In-App Account Deletion

Users may delete their account permanently at any time through the app interface. This option is available under:

Settings → Delete Account → Confirm

Once confirmed, all personal data associated with the account—including worship records and child profiles—will be permanently deleted from the system and cannot be recovered.

Please note: Account deletion is available only through the app and cannot be requested externally via email or other channels.

For complete instructions, please visit our How to Delete Account page.

13. Data Safety Disclosure

The app’s data handling practices are clearly disclosed in the Google Play Data Safety section, in accordance with platform requirements.

This includes:

  • What types of data are collected
  • How the data is used within the app
  • Whether any data is shared with third-party services

All disclosures are made to ensure full compliance with Google Play’s User Data policies and to provide users with clear, accessible information regarding their privacy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how your personal data is handled, please contact:

Zazuba Studio is an independent personal project and not a registered legal entity. All inquiries will be handled directly by the app developer.