Privacy Policy
Heartful is a dhikr app. Your counting, settings and reminders stay on your device. If you sign in and subscribe, a small record of your practice is synced to your account so it follows you to your other devices. We don't show ads, we don't use analytics or tracking, and we never sell your data.
This policy explains what the Heartful app and the website at heartful.knoctal.com collect, why, who processes it, and the choices you have. Heartful is provided by Knoctal ("we", "us"). If you have any question about this policy, write to realnajmiter@gmail.com.
Data that stays on your device
Heartful works without an account. Everything below is stored only on your phone and is never sent to us:
- Your tasbih counts for Daily, Journey, Tawbah and Events, and your Durud progress.
- Your settings, such as your daily target, moon sighting adjustment, music, sound and haptics.
- Your reminder times, and the titles and messages of any periodic reminders you write.
Reminders are scheduled on your device as local notifications. Heartful does not use push notifications and does not collect a push token.
Deleting the app removes this data from your device.
Your account
Signing in is optional. You can sign in with Google, or with Apple on iPhone. Sign-in is handled by Firebase Authentication, a service of Google. When you sign in we receive:
- A unique account identifier.
- Your name and email address, as shared by Google or Apple. If you choose "Hide My Email" with Apple, we only receive Apple's private relay address.
We use these to identify your account, show you which account you're signed in with, and connect your purchase to it.
Synced practice data
While you're signed in and have Full Access, Heartful syncs the following to Cloud Firestore, a Google database, under your account:
- Your daily target and when you last changed it.
- The day you started your Journey.
- For each day you recite: the date, the mode (Daily, Journey, Tawbah or Events), the count, your Durud progress, and when the record was last updated.
Periodic reminders, music, sound and haptics settings are not synced. Only you can read or change your synced data; access is restricted to your signed-in account.
Purchases
Full Access is sold as a subscription through the Apple App Store or Google Play. Payments are handled entirely by Apple or Google; we never see or store your card or payment details.
To confirm your purchase and keep it in step across your devices, we use RevenueCat. RevenueCat receives your account identifier, your purchase and subscription records from Apple or Google, and basic technical information such as your device platform, app version and store country. A small server we run on Cloudflare Workers reads your subscription status from RevenueCat and records whether you have Full Access on your account.
Who processes your data
| Service | Provider | Purpose |
|---|---|---|
| Firebase Authentication | Google LLC | Sign-in |
| Cloud Firestore | Google LLC | Storing synced practice data |
| RevenueCat | RevenueCat, Inc. | Verifying purchases and subscription status |
| Cloudflare Workers | Cloudflare, Inc. | Recording Full Access on your account |
| App Store / Google Play | Apple Inc. / Google LLC | Payments, app distribution |
| Netlify | Netlify, Inc. | Hosting this website |
These providers process data on our behalf under their own privacy and security commitments. Some of them store data outside your country, including in the United States.
What we don't do
- We don't show ads.
- We don't use analytics, crash reporting or tracking tools in the app.
- We don't track you across other apps or websites.
- We don't sell or rent your data, or share it for advertising.
This website
The website does not use cookies, analytics or tracking. Like any web host, Netlify keeps standard server logs, such as IP address and browser type, to deliver and protect the site. Fonts are loaded from Google Fonts and a scrolling library from unpkg, which receive your IP address when your browser requests them.
How long we keep data
Your account and synced data are kept until you delete your account. Purchase records are kept by Apple, Google and RevenueCat as long as they are needed for your subscription, refunds and legal obligations.
Deleting your account
You can delete your account at any time from the app: Settings → Account → Delete account. This permanently removes your account, your synced practice data, and your purchase link on our side. Data on your device stays until you delete the app. You can also ask us to delete your account by writing to realnajmiter@gmail.com from the email address on your account.
Deleting your account does not cancel a subscription. Cancel it in your Apple or Google account settings first, so you're not charged again.
Your rights
Depending on where you live, you may have the right to access, correct, export or delete your data, and to object to or restrict how it's used. Write to us and we'll respond within 30 days. You may also complain to your local data protection authority.
Security
Data travels over encrypted connections, and synced data can only be read or written by your signed-in account. No system is perfectly secure, but we keep what we collect to the minimum the app needs.
Children
Heartful can be used by people of any age without an account. Accounts and purchases are not intended for children under 13, and we don't knowingly collect personal data from them. If you believe a child has created an account, contact us and we'll delete it.
Changes to this policy
If we change this policy, we'll update the effective date above. If a change is significant, we'll tell you in the app before it takes effect.
Contact
Knoctal
realnajmiter@gmail.com