Privacy Policy

Last updated: 3 October 2026

This Privacy Policy explains what data Fajr Up (“Fajr Up”, “we”, “us”) collects, how we use it, and the choices you have. Fajr Up is an alarm and habit app that helps Muslims wake up for the Fajr prayer. Without an account, your Fajr days and your streak stay on your device. What goes to servers with an account and for individual wake-up missions is set out in sections 2 and 3.

1. Data we process on your device only

The following is processed locally on your iPhone and is not sent to us:

Location (GPS) — used to calculate your Fajr and sunrise times and to power the alarm. Your GPS coordinates and the place name derived from them stay on your device. If you type your city instead, section 2 applies.
Motion & camera in movement missions — the camera images for squats and push-ups as well as step and motion data are analysed on the device and not sent to us.
App settings, your wake-up reason and fasting days — stored only on your device.
Fajr days, streak and wake history — stay on your device as long as you have no account. With an account, section 2 applies.

2. Data sent to our services and to other recipients

Account & groups (optional) — when you create an account (by email, with Apple or with Google), we store your email address and, once you provide it, a display name. From then on we store on our server, for every morning you completed your wake-up mission, the date, the local time and the moment the report reaches us — even if you are not in a group; your existing history on the device is uploaded as well. We compute your streak from this. If you create or join a group, we also store the group name, invite code and membership. The members of your group see your display name, whether you got up today, today’s time and your streak — not your email address.
Typed location — if you type your city instead of sharing your location, Apple’s place search resolves the entry; the place you typed is sent to Apple.
Scan-mission photos — when you scan a Qur’an verse or an object to dismiss your alarm, the downsized photo together with the expected verse or object is sent to our backend and from there, for a one-time check, to an AI vision service in the USA — depending on our server’s configuration, OpenAI or Anthropic. Our backend does not store the photo; how long the AI service keeps it is governed by its terms. We use the photos only for this check and not to build a profile of you. The check requires an internet connection.
Qur’an recitation audio (Arabic) — when you recite an Arabic verse to dismiss your alarm, the audio recording is sent to our backend (a Supabase Edge Function), which passes it to a hosted speech model operated by OpenAI (USA) to transcribe your recitation once; our backend then compares the transcript with the verse. Our backend does not store the recording; how long OpenAI keeps it is governed by its terms. We use it only for this check, not to build a profile of you. This check requires an internet connection: if you are offline, no speech recognition takes place — the app tells you so and lets you switch to another mission or confirm manually.
Microphone / speech (du‘a & read-aloud translation) — for the wake-up du‘a, when you read the translation of a verse aloud, and when you dictate your personal wake-up reason, speech recognition is performed by Apple’s speech recognition in iOS. Apple may process this audio on its servers rather than on your iPhone. We do not receive or store this audio on our servers. The Arabic Qur’an recitation is handled differently — see the item above.
Qur’an texts — the app downloads the verse texts and their translation from alquran.cloud at launch until all verses are cached on the device. The verse numbers requested and your IP address are transmitted, no user identifier.
Subscription status — purchase and entitlement data is processed by Apple and RevenueCat to unlock Fajr Up. RevenueCat is queried at every app launch — without an account using a randomly generated identifier, with an account using your account ID. With an account, the app also asks our server for your entitlement and your loyalty rewards.
Usage analytics — we use Mixpanel (configured on EU data residency) to understand how the app is used, linked to your account ID (a random UUID) or a randomly generated device identifier. Only events about sign-in, setup, the purchase screen, offers, purchases, the review prompt and the test alarm are sent — each with app version, platform and the technical details Mixpanel adds itself (such as device model, iOS version and an approximate location derived from the IP address) — plus two setup answers (gender and how you heard about us). Your name and email are not sent. We do not send your Fajr days or your streak as data; the review prompt, however, appears after a completed morning at certain streak milestones, and its timing is visible to Mixpanel. This runs on our legitimate interest and is on by default; you can turn it off any time under Settings → Privacy. We do not advertise and do not track you across other apps (no IDFA).
Crashes, diagnostics & performance — Sentry (servers in Frankfurt) receives crash and error reports as well as session, performance and device data (app launches, load times, device model, iOS version, IP address). We attach neither your name nor your email address to these reports and filter out log entries that refer to prayer or location by keyword. This always runs and cannot be switched off in the app, because it is the only way we can find alarm failures; you can object at support@fajrup.co.

3. Recipients

The following recipients receive data when you use Fajr Up. With each of these connections, your IP address technically also reaches the respective recipient.

Supabase — database, sign-in and server functions for accounts, groups, Fajr days and wake times; recitation audio and scan photos also pass through the server functions (provider in the USA; data stored in the EU, Frankfurt).
OpenAI — transcription of the Arabic Qur’an recitation audio; also checking of scan photos if our server uses OpenAI for that (USA).
Anthropic — checking of scan photos if our server uses Anthropic for that (USA). A scan photo therefore goes to OpenAI or to Anthropic.
Apple — app distribution, in-app purchases, Sign in with Apple, speech recognition in iOS and place search for a typed city (USA / Ireland).
Google — sign-in, if you sign in with Google; in addition, the app downloads its typeface (DM Sans) from Google Fonts as long as it is not yet on your device — this transmits your IP address, even without an account (USA / Ireland).
RevenueCat — subscription management and receipt validation (USA).
Mixpanel — product-usage analytics, can be switched off in Settings (provider in the USA; EU data residency).
Sentry — crash, error, performance and device data, cannot be switched off (provider in the USA; servers in Frankfurt).
alquran.cloud (Islamic Network) — retrieval of verse texts and translations; your IP address is transmitted. We do not know the server location.
Resend — sending the confirmation email when you create an account by email.
Vercel — delivery of this website (USA), see section 9.
Google Analytics — measurement of this website, only with your consent (Google Ireland; transfer to the USA possible), see section 9.
Members of your group — see your display name, today’s status, today’s time and your streak.

4. How we use data

To provide the alarm, missions, streaks and Suhūr reminders.
To operate Fajr Buddies groups you choose to join.
To verify scan and recitation missions.
To manage subscriptions and loyalty rewards.
To find errors and to understand how the app is used.

We do not sell your personal data.

5. Notifications

With your permission, Fajr Up sends local notifications (e.g. a reminder the evening before a fasting day). These are generated on your device.

6. Data retention & deletion

Local data stays on your device until you delete the app. Account, group and Fajr data is kept on our server while your account exists. You can delete your account directly in the app (Settings → account deletion). We then delete the data on our server — account, profile, groups and memberships, Fajr days and wake times — and request deletion of your analytics profile at Mixpanel.

What remains: the purchase history at Apple, your record at RevenueCat and error reports already sent to Sentry. You can request their deletion via support@fajrup.co. Our server does not store recitation audio or scan photos. Data on your device stays until you delete the app.

Deleting your account does not end your subscription. You cancel a running subscription in the Apple settings on your device (your name → Subscriptions).

7. Your rights

Depending on your location (including under the EU/EEA GDPR), you have the right of access, rectification, erasure, restriction of processing, data portability and objection. You can object to analytics any time under Settings → Privacy, and to error reports by email. Where processing is based on your consent, you can withdraw it at any time with effect for the future. You may lodge a complaint with a data protection authority. Fajr Up works without an account; the account, groups and the recitation and scan missions are optional. No automated decision with legal effect takes place. To exercise any of these rights, contact us at support@fajrup.co.

8. Children

Fajr Up is not directed at children under 16 (or the minimum age required in your country). We do not knowingly collect data from children.

9. This website

When you visit fajrup.de / fajrup.co, our host Vercel (USA) processes access data (IP address, time, page requested, browser) to deliver and protect the site. The website’s fonts are delivered together with the site and are not fetched from third parties such as Google. Without your consent we use no cookies and no analytics services on this website; we use no advertising services. We store your choice in the consent banner in your browser’s local storage (not as a cookie) so that we do not ask you again on every visit. You can change it at any time via “Cookie settings” at the bottom of every page. If you email us, we process your message to reply to you.

Website analytics with Google Analytics 4 (only with your consent)

If you choose “Accept” in the banner, we use Google Analytics 4, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). It shows us how visitors reach this website (for example through Google Search) and whether they use the App Store button. Before you consent, the site loads nothing from Google.

Legal basis: your consent (Art. 6(1)(a) GDPR); for storing and reading cookies on your device, Section 25(1) of the German TDDDG.
Data: pages viewed and interactions on the page (for example scrolling, clicks on links to other websites and on the App Store button), the page you came from (for example a search engine), time, language, device type, operating system, browser and screen size, and an approximate location (country, region, city) that Google derives from your IP address. According to Google, the IP address itself is not stored. To recognise returning visits, Google stores a random identifier in cookies.
Cookies: _ga and _ga_… (to distinguish visitors and sessions), lifetime 13 months.
Not enabled: Google Signals, advertising features and personalised advertising. The data is not linked to your Google account.
Retention: Google Analytics deletes the event data after 14 months at the latest.
Processing on our behalf and transfer to the USA: Google processes the data on our behalf under Google’s data processing terms. Data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework, which is covered by the European Commission’s adequacy decision of 10 July 2023.
Withdrawal and changes: You can change your choice and withdraw your consent at any time via “Cookie settings” at the bottom of every page (“Decline”). The site then deletes the analytics cookies and sends nothing more to Google. Processing carried out before the withdrawal remains lawful.

10. Changes

We may update this policy. Material changes will be reflected by the “Last updated” date above.

11. Controller & contact

The controller responsible for Fajr Up is Nomad Agency for Marketing & Consulting LLC, 2880 W Oakland Park Blvd, Ste 225C, Oakland Park, FL 33311, USA. As a US-based controller whose service providers may process data in the USA, international transfers rely – where required – on appropriate safeguards (e.g. standard contractual clauses). Questions about this policy, or to exercise your rights? Email support@fajrup.co.