# Ummah Compass Privacy Notice

Effective: 28 August 2026

Ummah Compass is a local-first Progressive Web App. It does not require an account, contain advertising, sell personal data, or include analytics or advertising SDKs. Core records such as settings, saved cities, prayer history, bookmarks, and downloaded content are stored in the browser on the user's device.

“Local-first” does not mean that every feature is offline or that no network request is made. The optional online features below disclose data to the named service only when that feature is used.

## Information processed by online features

| Feature | Information sent | Recipient and purpose |
|---|---|---|
| Weather and timezone | Latitude and longitude | Open-Meteo, to return weather and timezone data |
| City search | Search text and selected language | Open-Meteo Geocoding, to find matching places |
| Location naming | Latitude and longitude | OpenStreetMap Nominatim, to return a place name |
| Quran, translation, tafsir and audio | Requested content identifier; normal network metadata such as IP address | `cdn.holyquran.world`, and EveryAyah only as an audio fallback, to deliver requested content |
| Quran radio | Requested station/stream; normal network metadata | MP3Quran and the selected station operator, to list and play streams |
| Feedback | Name, email, topic, message, rating, device description, app language, browser user agent, screen size and timestamp | `submit.holyquran.world`, to receive and respond to feedback |
| Feedback abuse prevention | Browser and interaction security signals | Cloudflare Turnstile, to distinguish legitimate submissions from abuse |

Browsers and network providers may also process ordinary connection information, including IP address, as part of delivering these services. External providers apply their own privacy and retention terms.

## Device permissions

Location permission is optional. When granted, coordinates are used to calculate prayer times and Qibla direction and may be sent to the weather and reverse-geocoding services described above. Notification permission allows the running app to show system-style notices. Ummah Compass does not currently provide a server push service, so alerts are not guaranteed after the app is minimized, backgrounded, or closed.

## Local storage, backup, and deletion

The Privacy Data Vault shows an estimate of local browser storage. Users can export plain or AES-GCM-encrypted backup files. File restoration is disabled in this release while strict validation and atomic recovery are being developed. Exported files are controlled by the user and should be protected accordingly.

“Wipe All My Data” clears Ummah Compass browser storage on the current device. Removing site data through the browser has the same general effect. It does not recall feedback already submitted or data processed by an external provider.

Cloud Backup is disabled and excluded from the public release.

## Retention and contact

Ummah Compass does not operate an account database or analytics store. Feedback submissions may be retained for support, product improvement, and reply handling. Do not include sensitive personal information in feedback.

Privacy questions and deletion requests concerning a feedback submission can be sent through the in-app Feedback screen. Include enough information to identify the submission, such as the email address and approximate submission date.

## Changes

Material changes to this notice will be reflected in the app release and effective date. Provider and content attribution is available in [THIRD_PARTY_NOTICES.md](./THIRD_PARTY_NOTICES.md).