Privacy Policy — NurSalah
The German version of this document is the binding one. This translation is provided for information only.
Scope
This policy applies to the Android and the iOS app, and to this website insofar as it concerns that app.
What data is collected
In the app stores, we sum this up as follows: “The app collects crash data only (Firebase Crashlytics), not linked to you. No tracking, no account, no ads.”
Crash logs
If the app crashes, a technical error report is transmitted to Firebase Crashlytics (Google): device model, operating system version, timestamp and the technical call stack. No names, email addresses or content are transmitted.
Order data from Google Play
When you buy something in the app through Google Play, Google provides us with order data for billing and tax purposes: order number, product, amount, date and the buyer’s country. Region (canton or state) and postcode are added only where Google is not the seller of the order. We do not receive your name, full address or payment details. The source of this data is Google Play, not your device.
Sales reports from the App Store
When you buy something in the app through the App Store, Apple provides us with sales reports for billing and tax purposes: product, price and currency, date, the store’s country, the device type and whether a purchase was refunded. For subscriptions, an identifier is added that Apple generates at random and that applies only in relation to us; if you end all your subscriptions with us and do not take out a new one within 180 days, Apple deletes it. These reports do not contain your name, email address, postal address or payment details. The source of this data is the App Store, not your device.
Apple processes your purchase and account data itself, under Apple’s own privacy policy: apple.com/privacy
Purpose and legal basis
- Crash logs serve solely to keep the app stable.
- Order data serves billing and bookkeeping only.
- Sales reports from the App Store serve bookkeeping and the evaluation of sales only.
The legal basis is the legitimate interest in a functional, error-free service (Art. 6(1)(f) GDPR).
For order data the legal basis is compliance with statutory retention obligations (Art. 6(1)(c) GDPR in conjunction with Art. 958f CO) and our legitimate interest in proper billing (Art. 6(1)(f)).
For sales reports from the App Store the legal basis is compliance with the statutory bookkeeping obligation (Art. 6(1)(c) GDPR in conjunction with Art. 958f CO) and our legitimate interest in evaluating sales (Art. 6(1)(f)).
Retention period
- Crash logs are deleted automatically after 90 days.
- Order data is kept for the duration of the statutory retention obligation — in Switzerland ten years from the end of the financial year (Art. 958f CO).
- Sales reports from the App Store are the basis of our bookkeeping and are therefore kept for the duration of the statutory retention obligation — in Switzerland ten years from the end of the financial year (Art. 958f CO).
Recipients
The processor is Google Ireland Limited (Firebase). Google may process the crash logs in data centres outside Switzerland and the EU, including in the USA; the parent company Google LLC is certified under the Swiss-U.S. and the EU-U.S. Data Privacy Framework. No transfer to further third parties takes place. Transmission is encrypted throughout.
Voluntary support
In the app you can voluntarily support development with a one-time in-app purchase. It unlocks nothing and goes through your device’s store (Google Play or the App Store). The app stores nothing about it. Which data we receive from Google and from Apple is described above under “Order data from Google Play” and “Sales reports from the App Store”. The terms of the respective store apply.
Device permissions
The app asks for the permissions below. They serve functions on the device; nothing is transmitted to us in the process. Where data does leave the device, this is stated in the relevant section.
Location access
The app can access the device location in order to calculate prayer times for your current place and to determine the qibla direction. Access is optional: you may decline it or revoke it at any time in the system settings; the remaining features stay usable.
Prayer times and the qibla direction are calculated entirely on the device. The coordinates are not transmitted to us for this and are not stored by us. Only for the place name shown does the app query the operating system’s map service — Apple’s on iOS, Google’s on Android — and hands it the coordinates for that purpose; the respective provider’s privacy terms apply. If location access is not granted, this does not happen.
Instead of sharing your location, you can also choose your city from a list contained in the app. The app then queries neither the device’s location nor the map service, and nothing is transmitted.
Notifications
The app can show reminders as notifications. The operating system asks for permission once; you can decline it or revoke it at any time in the system settings, without losing the remaining functions.
Reminders are scheduled and triggered on the device only. No data is transmitted to us or to third parties for this.
Exact alarms (Android)
For a prayer time reminder to appear to the minute, the app additionally needs permission for exact alarms. Without it the operating system defers the notification to save battery. This permission can also be revoked in the system settings.
Home screen widget
If you set up the app’s widget on your home screen, it only shows what the app has calculated or stored on the device. For this, the app stores this information in a storage area on the device that the widget can read; the widget does not load anything from the internet and does not transmit anything.
The widget is only available on Android.
Account
The app creates no account and requires no sign-in.
Device backup
On Android, the app is excluded from device backup.
Depending on your settings, iOS includes the app’s data in the iCloud or device backup. Apple or your computer manages this backup; we have no access to it.
Your rights
You have the rights of access, rectification, erasure, restriction of processing, data portability and objection. You may also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or with a data protection supervisory authority in the EU.
An informal message to the following address is sufficient for any request: privacy@nurharun.com
Controller
Harun Mustafa
Lindenpark 41
3427 Utzenstorf
Switzerland
We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP). Insofar as the EU General Data Protection Regulation (GDPR) applies, the legal bases stated here are those under the GDPR.