Privacy Policy

Last updated: 6 November 2026

In short: Noor-e-Hidayah has no accounts, no ads and no analytics or tracking scripts. Your progress and settings stay on your own device unless you switch on one of the three optional features described below (encrypted sync, background prayer alerts, live gold/silver prices) or send us a message. If something breaks, a small anonymous error report is sent so we can fix it (you can switch this off below). A few features load content from third-party services, listed below.

What we do not do

What is stored on your device

To remember your progress and choices, the website saves small items in your browser's local storage. This data stays on your device and is not sent to us. It includes:

You can delete all of this at any time by clearing this site's data in your browser settings. If you clear it, your progress is lost.

Backups

The backup button on your dashboard creates a file on your own device. The file is never sent to us. Restoring a backup only reads the file you choose.

Your location

Prayer Times, Qibla and reminders can ask your browser for your location, but only when you tap the button for it. The calculation is done on your device and the location is not sent to us. The one exception is background prayer alerts (see below): if you switch those on, your approximate location is sent to our server. You can also choose a city by hand instead of using your location.

Optional features that use our server

These only run if you switch them on. Our server (a Cloudflare Worker with a Cloudflare D1 database) does not use cookies and does not build a profile of you.

Encrypted cloud sync

If you create a sync key on the dashboard, your progress is encrypted on your device with a random key before it is uploaded. We store only the unreadable encrypted data and a hash derived from your key. We never see the key or your progress, and we cannot recover it for you: if you lose the key, the synced copy cannot be read. You can delete the synced copy from the dashboard at any time. Copies that are not updated for about 13 months are deleted automatically.

Background prayer alerts (push notifications)

If you switch these on, we store: your browser's push-subscription address and keys (needed to deliver the alert), your location rounded to about 1 km, your calculation method and Asr school, and the time of your next prayer. This is used only to send the prayer alert. You can switch the alerts off in the app, which deletes this record; records whose alerts keep failing are removed automatically. The push message is delivered through your browser vendor's push service (for example Google, Mozilla or Apple), which sees that a notification is being delivered to your device.

Live gold and silver prices (Zakat)

The Zakat calculator can ask our server for the current gold and silver price. Your browser sends only the currency you pick. Our server gets the price from a metals-price provider and keeps a short-lived cached copy.

Hosting

The website and the API are served through Cloudflare, which processes requests (including IP addresses) to deliver and protect the site, as any host does.

Third-party services

When you use these features, your browser connects directly to the services below. They can see your IP address and basic browser information, as with any website. Please read their own privacy policies.

Error reports

If a page or the app breaks, it can send us a small anonymous report so we can fix the problem. It contains the type of error and a short message, the file and line, the page address without any query, the app version, the platform (web, Android or iOS), your browser name and version, the interface language and whether you are on a phone, tablet or computer. It never contains your name, email, location, progress, bookmarks or anything you typed, and our server does not store your IP address. Reports are kept for up to 30 days after the error last happened and are then deleted. You can turn this off here:

Send anonymous error reports
See exactly what would be sent

Contact form

If you send a message, we receive the topic, page, message and the email address you chose to enter (optional). It goes straight to our own server, not to a third-party form service. We keep it for up to 180 days to read and reply, and then it is deleted. To limit spam we also keep a salted one-way hash of your connection address (not the address itself) for a short time. We do not add you to any mailing list. If e-mail delivery is switched on, the message is forwarded to our team inbox through an e-mail delivery provider.

The Android and iOS app

The app shows the same content as the website. Prayer alerts in the app are scheduled on your phone itself, so no server is involved and nothing about them is sent to us. If you tap "Use my location", the app asks your phone for permission and uses the location on your device to calculate prayer times and Qibla; it is not sent to us. Notifications, location and the motion sensors (for the Qibla compass) are used only for those features. We do not use advertising identifiers. There is no account to delete: uninstalling the app, or clearing its data, removes everything it stored on your device.

Children

The website collects no personal information from anyone, including children. Parents are welcome to use it with their children.

Changes

If this policy changes, the date at the top will be updated. Questions? Please bize ulaşın.