Privacy policy — Waqtuna

Last updated: 28 October 2026. This policy applies to the Android application “Waqtuna” (package com.noorapp.muslim) distributed on Google Play.

1. Publisher and contact

• Publisher: BrK
• Privacy contact: mbarckfamma.mf@gmail.com
• Website: https://brk-apk.com/
• Website host: IONOS SARL, 7 place de la Gare, BP 70109, 57200 Sarreguemines Cedex, France; phone 0970 808 911 (from outside France: +33 970 808 911).

Waqtuna is published on a personal, non-commercial basis. Write to the contact above for any question about your data or to exercise your rights.

2. In short

3. Data processed and purposes

Location

With your permission, the precise location of the device is used on the device to compute prayer times and the Qibla direction. You can refuse and enter a city or coordinates manually. The location is stored on the device. It only leaves the device rounded to two decimal places (about 1 km):

• to BigDataCloud, to display the name of your city, only after your explicit permission for the current session, together with the interface language;
• to the OpenStreetMap Overpass API, when you start a search for nearby mosques;
• into your Google Drive backup, if you turn the backup on.

Google account (optional)

If you tap “Connect Google (optional)”, Google provides the app with your name, email address, profile picture and an access token. The permissions requested are “profile”, “email” and “drive.appdata”: the app can only reach its own private folder in your Google Drive (appDataFolder) and cannot see your other files. On Android, the access token is kept in memory and requested again from Google when needed; only the account name, the email address and the address (URL) of the profile picture are kept on the device.

Google Drive backup (optional)

You turn it on by connecting a Google account (Settings › Google account). The backup is then written directly from your device to the app’s private folder in your Google Drive, and from then on it saves itself automatically, with no further action from you: when you connect, a few seconds after a change and, if a change has not been saved yet, when the app goes to the background or you switch profiles; “Save now” also saves it on demand. The sign-in applies to all adult profiles on the device, not only the one where you signed in: each adult profile has its own backup in the same Google Drive, saved automatically in the same way when that profile is used, with no new sign-in. The child profile is never backed up. Each backup contains: settings, language and theme, reading preferences, where you stopped in each book and the last surah opened, notes, highlights and bookmarks, prayer journal, Sunnah journal and goals, Arabic-learning progress, alarm and reminder settings, the chosen mosque (name, address, exact coordinates and distance), profile category and a location rounded to two decimal places with the saved city name, plus the account email address used to link your profiles. A separate file in the same folder links these profiles to the account: their technical identifiers, the dates they were linked and the account email address. Some of these entries (prayer and Sunnah journals) can reveal a religious practice: they are only stored on your device and, if you turn on the backup, in your own Google Drive. The publisher has no access to them.

To stop the automatic backup, tap “Sign out” in Settings › Google account: the app makes one last save attempt, then writes nothing more to your Google Drive; the existing backup stays there until you delete it. “Delete my Google Drive data” deletes the backups of all your profiles, revokes the app’s access and signs you out (section 7). No backup takes place in child mode.

Data stored on the device

Preferences, journals, notes, bookmarks, alarms, downloaded collections and the selected mosque are stored on the device. On Android, profiles and reader state are encrypted in the phone’s secure vault (Android Keystore). None of this data is sent to the publisher.

Technical data

Any network connection gives the contacted service your IP address and ordinary request metadata (for example the device type). If you open this page or the publisher’s website, their host receives the same technical data. Waqtuna sends no crash report and no usage statistics. Google Play may provide the publisher with aggregated statistics (installs, crashes) according to your Android settings; Waqtuna adds no SDK for this.

4. Third-party services

These services are contacted only after an action of yours, over HTTPS; once you have turned on the Google Drive backup, it then saves itself automatically (section 3). They process data under their own privacy policies.

Mawaqit: no connection to Mawaqit is active in this version of the app. If a partnership is ever set up, it would go through a relay server and this policy would be updated first.

Google privacy policy: policies.google.com/privacy.

5. Android permissions

• ACCESS_FINE_LOCATION, ACCESS_COARSE_LOCATION — location for prayer times and the Qibla, computed on the device; asked when needed, can be refused (manual entry).
• POST_NOTIFICATIONS — prayer alarms and prayer status notifications.
• SCHEDULE_EXACT_ALARM — exact prayer alarms, set by you.
• USE_FULL_SCREEN_INTENT — the call-to-prayer screen over the lock screen, where Android allows it.
• FOREGROUND_SERVICE, FOREGROUND_SERVICE_SYSTEM_EXEMPTED — reliable ringing of the prayer alarm for its duration.
• RECEIVE_BOOT_COMPLETED — rescheduling alarms after a restart, an update or a time change.
• VIBRATE — vibration and ringing modes, for a limited time.
• INTERNET — only for the services listed above, over HTTPS.
• USE_BIOMETRIC, USE_FINGERPRINT — declared by an Android security library (profile lock); Waqtuna never receives biometric data.

6. Retention

• Data on the device: until you erase it in the app or uninstall the app.
• Google Drive backup: until you delete it from the app or from your Google account.
• The permission to look up the city name is not kept beyond the session; the city name found is kept with your location on the device.
• Mosque search results are not kept; only the mosque you choose is saved on the device.

7. Deleting your data

• In the app: Settings › “Erase local data”.
• Google Drive backup: Settings › Google account › “Delete my Google Drive data”, which also revokes the app’s access; you can also remove the app’s hidden data from your Google Drive settings (Manage apps) and revoke access at myaccount.google.com/permissions.
• Uninstalling the app deletes all data stored on the device.

8. Children

Waqtuna is not specifically intended for children. The “child mode” is a parental restriction: in this mode, GPS, remote city lookup, downloads, external links, Google sign-in and backup are blocked, and no data leaves the device. An adult can enter a city or coordinates locally.

9. Security

All connections use HTTPS; cleartext traffic and mixed content are disabled. Local profiles and reader state are encrypted on Android. Waqtuna has no server database: there is no central store of user data that could leak.

10. Your rights

Under the GDPR you have the right to access, rectify and erase your data, to restrict or object to its processing, to data portability and to withdraw your consent at any time. Most data stays on your device or in your own Google Drive, under your direct control. For any request, write to the contact in section 1. You can also lodge a complaint with your data protection authority (in France: the CNIL, www.cnil.fr).

Legal bases: your consent (location permission, city name lookup, Google sign-in and backup, including its automatic saves, which you stop by signing out) and the provision of the features you request (mosque search, alarms, opening of links).

11. Transfers outside the European Union

The third-party services above may process data outside the European Union under their own safeguards. The publisher transfers no data itself.

12. Changes

This policy is updated whenever the app processes data differently. The date at the top shows the latest version.