Who is responsible
The data controller for this app and this website is Boz Apps — Berk Özdoruk, Türkiye. Contact: bozapps2026@gmail.com.
We have not appointed a data protection officer; there is no processing that requires one. Write to the address above for anything covered by this policy.
What the app stores, and where
Everything below is written to the app's own storage area on your iPhone. If you are signed in to iCloud, the app also keeps a copy of your settings, prayer log and fasting log in your own iCloud key-value storage so it can be restored; that copy belongs to your Apple Account, under Apple's terms, and we cannot see it. A place found from your location is kept in that copy rounded to about 1 km. We operate no server that receives any of this, and it is not sent to us. It can reach us only if you choose to send it — for example by pasting it into a support email.
- Your chosen place: either a city from the built-in list or coordinates from the device.
- Your settings: calculation method, madhab, high-latitude rule, per-prayer minute adjustments, language, theme and accent color, reminder offsets, and the cities you used before.
- Your prayer log: which prayers you marked as prayed, on which dates, plus make-up counts and the Ramadan fasting log.
Location
If you grant location permission, iOS gives the app your approximate coordinates while you are using it. They are used on the device, in that moment, to compute prayer times and the qibla bearing. They are not sent to us and not sent to any third party by the app.
Location permission is optional. Decline it and choose a city instead: every feature still works.
Notifications
Prayer reminders are local notifications. Your iPhone schedules them from times the app has already calculated. There is no push server, no device token registered with us, and no network request involved in delivering them.
Purchases
If you buy Hijaz Pro, the purchase is made through Apple. Apple takes the payment; we never see your card, your billing address or your Apple Account.
To check whether a purchase is valid and to restore it on your other devices, the app uses RevenueCat, a purchase-management service acting as our processor. In that process RevenueCat receives a randomly generated app user identifier, the App Store receipt and basic technical data such as the country, device type and app version. That identifier is not your name and is not linked by us to anything else.
We use this only to know whether a copy of the app is entitled to Pro. RevenueCat processes this data only to provide this service to us and gives it the same or equal protection as this policy describes. See RevenueCat's privacy policy for their handling. Apple's own processing of the payment is governed by Apple's terms.
Our legal basis for this processing is the performance of the contract you enter into when you buy Pro (GDPR Art. 6(1)(b)); under Türkiye's KVKK it is the necessity of processing directly related to the performance of that contract.
What we do not do
- No analytics, product telemetry or crash-reporting SDK.
- No advertising, no advertising identifier, no third-party trackers.
- No sale or sharing of data for marketing; there is nothing to sell.
- No profiling and no automated decision-making.
This website
hijaz.vercel.app is a set of static pages. It sets no cookies, runs no analytics and embeds nothing from a third party; the fonts are served from this site rather than from a font provider.
The site is hosted by Vercel Inc., which, like any web host, processes the technical request data needed to deliver a page — your IP address, the time, the page requested and the browser string — in its server logs, for security and to keep the service running. We do not use those logs to identify anyone. See Vercel's own privacy documentation for their retention.
Children
Hijaz is suitable for a general audience and asks for no personal details from anyone, of any age. We do not knowingly process personal data of children, and the app contains no advertising, no social features and no user-generated content.
Your rights
Under the GDPR and Türkiye's KVKK you have the right to be informed about, to access, to rectify and to erase personal data concerning you, to restrict or object to processing, to data portability, and to lodge a complaint with a supervisory authority — in Türkiye the Personal Data Protection Authority (KVKK Kurumu), in the EU/EEA your national authority.
In practice, we hold no record that identifies you, so there is usually nothing for us to retrieve or delete. Data in the app is erased by deleting the app; its iCloud copy is erased with “Delete iCloud copy” in the app's Settings. For a purchase, write to us with the date of the transaction and we will ask RevenueCat to delete the associated record; Apple's own record of the transaction is kept by Apple for accounting and tax reasons and is outside our control.
Retention
App data stays on your device until you delete it or delete the app, and its iCloud copy stays in your iCloud until you delete it from the app. Purchase records held through RevenueCat are kept for as long as the entitlement needs to be restorable, and are deleted on request as described above.
International transfers
RevenueCat and Vercel are United States companies and process the data described above in the United States and other countries, under the standard contractual clauses and equivalent safeguards set out in their own terms.
Changes
If this policy changes in a way that affects you, the new version is published here with a new date, and for anything material the app will say so as well. The date at the top of this page is the date of the current version.