Muslimah Pro Privacy Policy

This Privacy Policy explains how Muslimah Pro collects, uses, stores, and shares information when you use the Muslimah Pro mobile app, website, backend services, support tools, subscriptions, and Nura/personal assistant features.

Muslimah Pro handles reproductive health, cycle, fertility, pregnancy, postpartum, worship, and location information. Some of this data may be considered sensitive personal information, health information, or special-category data depending on where you live.

During onboarding, we ask you to confirm that Muslimah Pro may process your personal health and related app data to provide app features, and that you accept the Privacy Policy and Terms of Use.

If you use Nura or the personal assistant, we process your messages, conversation history, current time/timezone, and relevant app context needed to respond. Depending on the feature, this may include cycle, health, worship, reminder, note, or preference data.

Nura may suggest updates to your app data. The backend is designed to require a confirmation step before write actions are executed. Do not enter information into Nura that you do not want processed by our assistant systems and service providers.

We do not sell your personal information or use your health data for behavioral advertising. We share information only as needed to operate the product, comply with law, protect users, or process transactions.

• Database services for synced app data, plus Supabase/Postgres services used by website waitlist, blog, and admin features.
• Cloud hosting providers, including AWS App Runner for backend hosting and Vercel for the website.
• Apple and Google for sign-in, app distribution, in-app purchases, subscription management, and store server notifications.
• Expo push notification services for push delivery.
• Aladhan API for prayer-time calculations when location-based prayer times are used.
• Vercel Analytics for website usage analytics.
• AI and automation service providers used to power Nura/personal assistant features or help draft support replies.

We may also disclose information if required by law, to protect rights and safety, to investigate abuse or security incidents, or during a business transfer such as a merger, financing, acquisition, or sale of assets.

Location permission is used for prayer times, Qibla-related or fasting schedule features, and location-adjusted Islamic date calculations. You can disable location access in your device settings. If location is disabled, the app may use stored or manually provided location information, or location-dependent features may be less accurate.

Notification permission is used to send reminders, prayer or worship notifications, app messages, and support-reply notifications. Push notification tokens are stored so notifications can be delivered and can be revoked when you disable notifications or sign out.

We use reasonable technical and organizational safeguards, including HTTPS/TLS in transit, authenticated API access, token-based sessions, rate limits on selected endpoints, database access controls, and account deletion workflows. No system is completely secure, and we cannot guarantee that unauthorized access will never occur.

Synced account data is generally retained while your account is active. Local app data may remain on your device until you sign out, clear app data, or uninstall. When you delete your account, we delete associated app data from active backend tables where the account deletion workflow applies, but we may retain limited records where required for legal, security, fraud-prevention, accounting, app-store, backup, or dispute purposes.

We may keep a record of your onboarding consent, including consent version, acceptance time, and the policy links shown to you, so we can demonstrate that consent was captured.

If we discover a security incident involving personal or health information, we will notify affected users and regulators where required by applicable law.