Privacy Policy

1Muslim — Prayer Times, Qibla & Quran

Last updated: 2026-09-17

Data controller: Ruslan Elmurzaev — 8 per. Karyerny, pos. Groznensky, Grozny, Chechnya, Russia

This policy explains what the 1Muslim app for iPhone, iPad and Apple Watch does with your data: what stays on your device, what is sent to our servers or to other companies, why, and how you can remove it. It replaces all earlier versions.

1. Summary

No advertising or analytics SDKs, no tracking. The app contains no Google, Firebase, Facebook or similar tracking code, does not use the advertising identifier (IDFA) and does not track you across other companies' apps or websites.
We do not ask for your name, e-mail or phone number to use the app. A few features work with random identifiers instead, described below.
Prayer times and Qibla are calculated on your device. Some features do send data to our servers — for example the community duas, weather-based duas, donations, eSIM and the marketplace. Section 3 lists each one.
We never see your card or bank details. Payments are handled by Apple, by payment providers and by your bank.
We do not sell your data and do not share it with anyone for advertising.

2. What stays on your device

Prayer-time and Qibla calculation, alarms and prayer reminders (scheduled locally).
Your settings: themes, language, sounds, per-prayer time corrections, selected cities.
The prayer tracker and its statistics, tasbih counters, the 99 Names progress, Quran reading position, bookmarks and notes (these are also included in your own iCloud backup if you use it — see section 5).
Marketplace favourites, recently viewed items, saved searches and comparisons.
Al-Wasiyya (the Islamic will): see section 8.

3. What is sent to our servers, and why

Our servers run under the domains 1muslimapp.com and 1muslim.app. Each feature below sends only what it needs.

3.1 Community duas (“Ask for Dua”)

When the app first opens its home screen, it creates a pseudonymous account for you: a random name such as “User1234567”, an avatar emoji and colour, and your app language. The server issues a login token. No e-mail, phone or real name is involved.
This account is stored in your iCloud Keychain and your iCloud backup, so it can follow you to a new device.
If you post a dua request, its text and tags are public to other app users. We also store your prayers and reactions, the requests you mark as resolved, and reports you send about posts. Posts are checked automatically and may be removed by moderation.
Posts can be translated for other readers. Translation runs on our own server; no outside company receives the text.
The app also fetches the number of duas made on Friday for your time zone.

3.2 Prayer-time database and content

To keep timetables current, the app sends our server the identifiers of your selected cities and downloads updates, the Hijri date adjustment, themes and adhan sounds (the request includes your screen-size class so the right files are delivered).
Adhkar recitations and currency rates for Al-Wasiyya are downloaded from our server. The Quran text, fonts and recitations come from the sources listed in section 4, with our own mirror as a backup.

3.3 Weather-based duas (“Dua by event”)

To suggest duas for rain, snow or heat, the app sends your approximate location (the device is asked for accuracy of about 1 km) to our server when it starts and about once an hour while it is open.
Our server rounds the coordinates to one decimal place (about 11 km) before requesting a forecast from our partners and caching it for that rounded area. The request carries no account or device identifier.
You can turn this feature off in Settings.

3.4 Advertising statistics

If you do not have Premium, the app may show ads from our own advertising service. The list of ads is downloaded without any data about you; choosing which ad fits your city happens on your device.
To report results to advertisers, the app sends the number of impressions and clicks per campaign, together with your selected city name and country, iOS version, app identifier and date. These reports contain no advertising ID and no account.
Once a day per city the app also reports that the city is in use (city name and country only), which helps us count active cities.

3.5 Push notifications about Sadaka

If your app language is Russian and Sadaka notifications are enabled, the app registers with Apple Push Notification service and sends our server the push token, your app language, app version and whether the token is a test or release token. We use it to send occasional notifications about charity campaigns.
Sadaka notifications are on by default. Turn “Sadaka notifications” off in Settings and the token is disabled on our server. Prayer reminders do not use push; they are scheduled on your device.

3.6 Donations (Sadaka)

Donation campaigns are provided by our partners, independent charity platforms. The app loads campaign information, progress and pictures through our server.
When you donate inside the app, the app sends our server the campaign, the amount, the currency and a random request key. Our server creates the payment with our partners through the Faster Payments System (SBP), and the payment is completed in your bank's app or website. We receive the payment status only — never your bank account or card details.
A random secret for the pending donation is kept in your device's Keychain so the app can check its status. The app also remembers which campaigns you donated to and the bank you prefer, on your device.
If you open the donation web page instead, it is operated by our partners, and their privacy policies apply to anything you enter there.

3.7 eSIM

When you open the eSIM store, the app registers a random installation ID with our server and keeps it, with its token, in your device's Keychain. Requests also carry your app language, platform, app version and device region, so prices and plans match your country.
When you buy or top up an eSIM we store the order: the plan, the eSIM identifier (ICCID) for top-ups, the order status and the receipt link. The eSIM itself is supplied by our partners.
Payment takes place on a secure checkout page run by our payment partners. Your card details go to them, not to us. Order records are kept as long as accounting and tax rules require.

3.8 1Muslim Market

Searches send what you type, the chosen category and filters, and — for “nearby” results — your city and country.
If you ask to contact a seller, the app requests the seller's contact and opens WhatsApp or Telegram; from then on the conversation is between you and the seller in that app.
If you report a listing, the reason and your optional comment are sent to us.
There are no buyer accounts. Favourites, history, saved searches and comparisons stay on your device.

3.9 Premium

Subscriptions and one-time purchases are processed by Apple. The app only checks with Apple whether your purchase is active; we never see your payment details.
Where App Store purchases are unavailable, Premium can be activated with a premium code (a login and password) bought outside the app. The app sends the code to our Premium server to check and activate it, and keeps it on your device until you log out.

3.10 Hajj & Umrah certificate

When you request a certificate for a completed journey, the app sends the journey type, the completion dates (Gregorian and Hijri), the preferred certificate number and a random device key stored on your device, so the same certificate can be issued again.

3.11 City search

When you search for a city, the text you type and your app language are sent to our own geo service, which runs on our servers with our own city database. For a city found there, its coordinates are sent to look up its time zone. Your current location is matched to a city on your device.

3.12 Support requests

If you contact us through WhatsApp or e-mail from the app, the message is pre-filled with the app version, iOS version, device model and your selected city to help us answer. You can edit or delete this before sending. Messages you send are handled by the service you chose (WhatsApp, e-mail, Telegram or Instagram).

3.13 Server logs

Like any website, our servers record technical request data such as IP address, time and requested address. We use these logs only to keep the service running, secure and free of abuse, and delete them after 24 hours.

4. Other companies you may interact with

When you use these services, their own privacy policies apply to the data they receive.

Apple — App Store and in-app purchases (StoreKit), iCloud and CloudKit, Apple Push Notification service, Apple Maps (opened with your location when you look for nearby mosques).
Our partners and your bank — donations (section 3.6).
Our partners — eSIM supply and payments (section 3.7).
Wallet — the “Wallet” section opens our partners' service inside the app. If they ask you to verify your identity, they may use your camera through their own verification provider; the app only grants the camera to that page.
Garmin — Garmin Connect and your Garmin watch (section 6).
Our partners — weather forecasts (rounded location only).
Quran content — our partners deliver Quran text, fonts and recitations; our own servers act as a backup.
WhatsApp, Telegram, Instagram — only when you open them to contact us or a seller.

5. iCloud backup

If you are signed in to iCloud, the app backs up your data to its container in your private iCloud database, which only you can access with your Apple Account. The backup includes the app's internal database, your cities and time corrections, settings and alarm sounds, tasbih counters, prayer-tracker records, Quran position, bookmarks and notes, 99 Names progress, purchase status and your community-duas account. You can delete the backup in the app's Backup settings, and manage iCloud storage in iOS Settings.

6. Watches

Apple Watch — the iPhone sends your prayer times, your selected city's location, the calculation settings and your time corrections directly to your paired watch. The watch app makes no internet requests; it may use location to calculate times and the Qibla itself when the phone's times are not available.
Garmin — if you connect a Garmin watch, the app sends your city name and identifier, its coordinates, the calculation settings, the Hijri adjustment and 60 days of prayer times to the Garmin Connect app, which passes them to your watch over Bluetooth. Garmin's privacy policy applies to Garmin Connect.

7. Permissions

Location (while using the app) — prayer times, Qibla, nearby mosques and weather-based duas. The app asks for accuracy of about 1 km.
Notifications — prayer reminders and alarms (local) and Sadaka notifications (push, section 3.5).
Alarms — to ring prayer alarms like a clock alarm.
Bluetooth — only to connect a Garmin watch.
Camera — only if a wallet partner asks you to verify your identity (section 4).
Motion sensors — for the Qibla compass, on your device.

The app does not ask for tracking permission and does not access your contacts, photos, calendar, microphone or health data. You can change any permission in iOS Settings at any time.

8. Al-Wasiyya (Islamic will)

Everything you enter in Al-Wasiyya — the will, medical information, property and contacts — is encrypted on your device, protected by your PIN, excluded from device backups and never sent to us. It leaves your device only if you export it yourself, for example as a PDF or an encrypted file shared with a person you choose.

9. Analytics and crash reports

The app contains no third-party analytics or crash-reporting SDKs. If you allow sharing with app developers in iOS Settings → Privacy & Security → Analytics & Improvements, Apple may give us anonymous crash and performance reports. You can turn this off at any time.

10. How long we keep data

Community-duas account and your reactions and reports: until you ask us to delete them. Your posts: until you delete them or moderation removes them.
eSIM orders and donation records: as long as needed to provide the service and to meet accounting and tax obligations.
Push tokens: until you turn notifications off or the token stops working.
Advertising statistics: kept per campaign, city and day; they are not linked to a person.
Weather forecasts are cached by rounded area only. Server logs are deleted after 24 hours.

11. Your choices and rights

In the app you can delete your own dua posts, delete your iCloud backup, turn off weather-based duas and Sadaka notifications, archive eSIMs, and log out of a premium code.
By e-mail you can ask us for access to, correction or deletion of data we hold about you — for example your community-duas account (tell us its name, shown in the app) or your eSIM records. We will reply within 30 days. Some records must be kept where the law requires it.
Deleting the app removes data stored on your device. Items kept in the Keychain or iCloud remain in your Apple Account until you remove them.
For data you gave directly to Apple, your bank or Garmin, contact those companies. For data handled by our partners, contact us and we will pass your request on.

12. Children

The app is not directed at children under 13, and we do not knowingly collect data from them. Community dua posts are public, so we ask parents to supervise their children's use of that feature. If you believe a child has given us personal data, contact us and we will delete it.

13. International processing

The app is available worldwide, and your data may be processed on servers outside your country, including by the companies listed in section 4. We protect data in transit with encryption wherever the service supports it.

14. Changes to this policy

When we change this policy, we update the date at the top. For significant changes we may also tell you in the app. Continuing to use the app after a change means you accept the updated policy.

15. Contact

Ruslan Elmurzaev
8 per. Karyerny, pos. Groznensky
Grozny, Chechnya, Russia
[email protected]