Privacy Policy

What we collect

• Account & identity. A randomly generated anonymous ID, plus an optional username and first name if you choose to set them. No email or password is required to use the app.
• Prayer activity. Which prayers you mark as prayed and when. This syncs to our servers (hosted on Supabase) to back up your history, compute streaks, and (only if you add friends) share aggregate stats like your streak with those friends. Friends never see your raw prayer log.
• Location. Used to calculate prayer times and Qibla direction. We store the city, coordinates, and timezone you set (or that your device provides) with your account. We do not track or store your movements.
• Apps you block.Your blocked-app selection never leaves your device. Apple’s Screen Time technology gives us opaque tokens. We cannot see which apps you chose.
• Usage analytics. Events like screens viewed, onboarding answers, and subscription milestones (via PostHog), tied to your anonymous ID, so we can improve the app.
• Attribution. If you grant App Tracking Transparency permission, an advertising identifier (via AppsFlyer) tells us which ad brought you here. If you decline, we only receive aggregate, non-identifying install statistics (Apple SKAdNetwork).
• Purchases. Subscriptions are processed by Apple (in-app) or Stripe (web, via Superwall). We receive your subscription status, never your card details.
• Website. dua-lock.app uses cookies and pixels (Meta, TikTok, PostHog) to measure ads and site performance, including hashed identifiers and ad click IDs. These are website-only and are not used inside the app.

What we don’t do

• We never sell your personal information.
• We show no third-party ads inside the app.
• We cannot read which apps you block or what you do in them.
• We do not collect your contacts, photos, or messages.

How we use your information

To provide prayer times, blocking, streaks, and friends; to back up and restore your data across devices; to process and honor your subscription; to understand and improve the product; and to measure which ads work so we can reach more people. Nothing else.

Who we share it with

Only service providers that run DuaLock on our behalf: Supabase (database & sync), PostHog (analytics), Superwall & Stripe and Apple (payments), AppsFlyer (install attribution), and Meta/TikTok (website ad measurement only). Each receives only what it needs. We may also disclose information if required by law.

Retention & deletion

Your data is kept while your account exists. In the app, Settings → Delete Account permanently erases your data from our servers and your device. You can also email us to request deletion.

Your choices

• Decline or revoke tracking permission in iOS Settings → Privacy → Tracking.
• Turn location access off (set your city manually instead).
• Disable notifications in iOS Settings at any time.
• Delete your account and data from inside the app.

Children

DuaLock is not directed to children under 13, and we do not knowingly collect personal information from them.

Security & international transfers

Data is encrypted in transit and protected with industry-standard safeguards, and is processed on servers in the United States. No system is perfectly secure, but we design for the minimum data necessary.

Changes & contact

We’ll post any changes to this policy here. Questions or requests: hello@dua-lock.app.