A check records a short, silent clip, sends it — encrypted — to be judged once, and destroys it: the media is never written to a server disk, never stored, never used to train anything, and never shared. Only the verdict — pass or fail — is kept. We don't sell data, we don't run ads, and we don't track you across other apps. Delete your account any time and your record goes with it.
1. Who we are
Mashhud ("Mashhud," "we," "us") is the Fajr alarm application published by Dynamic Dev Solutions LLC, a limited liability company registered in Florida, USA. This policy describes what we collect, why, and the choices you have when you use the Mashhud app or website (together, the "Service"). If you do not agree with it, please don't use the Service.
2. What we collect
Account. Mashhud requires an account: you sign in to finish setting the app up, with Apple, with Google, or with a one-time code sent to your email. We never ask for a password, in any of the three. We receive your email address — or Apple's private relay address, if you choose Hide My Email — and an authentication token; on a first Apple sign-in, also the name you choose to share. Your alarms, prayer times and settings still live on your phone, and the alarm rings with no network.
Prayer-time settings. Your coordinates, calculation method, Asr convention, and alarm offset. Times are computed on your device (see Location below).
Check results. For each alarm: the check type (in this version, always Wudu), pass/fail/bypass, and timestamps. This is your record — the lit and unlit days.
Tasbih. Your all-time tasbih tallies are saved to your account so they follow you to a new phone — along with any zikr you wrote in your own words in an earlier version of the app (its text and count target). Counts only: we never record when you counted, and nothing syncs while you're signed out.
Purchases. Which plan you hold — the one-time "Founding lifetime" purchase, or a Yearly or Weekly subscription — from the App Store or Google Play. We never see your card number.
Diagnostics & anonymous usage. Crash reports and a short log of what the alarm did and which of Mashhud's own screens were reached (device model, OS and app version, your time zone's name, true/false alarm events, counts and timings, and fixed status words — never anything you typed, never a photo, never your name) — used to keep the alarm reliable and to understand which parts of the app work. It is labeled by a random install identifier that is linked to no account, and it all turns off with one switch in Settings.
3. What we never collect
4. Camera & checks
The Wudu check uses your camera, with your permission, solely at the moment you run it — there is no background access and no access to your photo library. It records a silent clip of up to fifteen seconds. The file is deleted from your device before it is sent, then transmitted over an encrypted connection (HTTPS) to our verification service, which passes it once to a vision model (Google's Gemini API) to answer one question — did a wash happen. The media is held only in memory for that one request, judged, and destroyed; it is never written to a server disk or database (there is no image or video column), never used to train anything, and never shared. Only the verdict is kept — a pass/fail and, if it didn't clear, a one-word reason so the app can coach you — and it is written to your account's wake history. When the app asks us to judge a check, the request also carries the random purchase ID that RevenueCat (section 7) gave your install, so we can ask RevenueCat whether a plan is active. It is not your name or email, we never write it to our database or logs, and RevenueCat never receives the clip, the verdict or your record.
If our service can't be reached — no network, a timeout, an error on our end — the check passes you automatically rather than trapping you; an outage never locks your alarm. Revoking camera permission disables camera-based checks. No microphone is ever used, and this version asks for no motion or fitness access.
A second check, Steps — walking away from bed, then one photo of your prayer mat with your feet in it — is not in this version. If it returns, its photo will be handled exactly as above, and this page will say so first.
5. Location
Prayer times require a location. Location is requested at your device's coarse ("Low") accuracy, only when you grant permission or tap refresh — never tracked continuously or in the background — and is used to compute prayer times on your device. An approximate, rounded location (to about a kilometre, not a precise point) is saved with your account so your times follow you to a new phone.
6. How we use data
To run the alarm and your record; to sync your record and your tasbih across your devices if you sign in; to provide support when you write to us; to fix crashes; and to compute aggregate, anonymized statistics (for example, a community "dawns witnessed this week" count, if we publish one — a count, never who). We do not use your data for advertising, and we do not use it to train models.
8. Retention & deletion
We keep your account data while your account exists. Delete your account in Settings → Account → Delete, or email us — your record, tasbih, settings, and identifiers are erased from our systems within 30 days (backups age out within 90). Diagnostics are retained at most 18 months. Purchase records are kept as long as tax law requires.
9. Security
Data is encrypted in transit (TLS) and at rest. Access inside the team is limited and logged. No system is perfect; if a breach ever affects your data we will notify you and the relevant authority without undue delay.
10. Children
Mashhud is not directed to children under 13 (or the equivalent minimum age where you live), and we don't knowingly collect their data. If you believe a child has created an account, contact us and we'll delete it.
11. Your rights
Depending on where you live (GDPR, UK GDPR, CCPA/CPRA, and similar laws), you may have the right to access, correct, export, restrict, object to the processing of, or delete your personal data — and to complain to your local supervisory authority. Email services@mashhud.app; we respond within 30 days and never discriminate for exercising a right.
12. International transfers
Our servers are in the United States. If you use Mashhud from elsewhere, your data is processed in the US; where data crosses borders we rely on recognized safeguards such as Standard Contractual Clauses.
13. Changes to this policy
If we change this policy we'll update the date above and, for material changes, tell you in the app before they take effect. The promise in section 4 is load-bearing — that a check's clip or frame is judged once and destroyed, never stored and never used to train anything: if that ever changed, we would ask for your explicit consent first — silence would not be consent.