Privacy Policy

Our promise

Khalily is built to be calm and private. You can use it as a guest, or sign in (Google / Apple) to keep your progress and username across devices — either way we don't profile you or track you across other apps and sites. There are no ads. We collect as little as we can, we never sell your data, everything about your worship is private by default, and you can delete your account and all of it at any time, from inside the app, in one step.

What stays on your device

Your device holds the complete, detailed record: every prayer and habit you tick, the times you ticked them, your notes and custom habit names, your reading and memorisation position in the Qur'an, your tasbih counters, your notification settings, and your أيام العذر (excused-days) marks.

Two of those never leave the device in any form. Your excused-days marks are device-only — when a day is excused, the summary that leaves your phone carries no prayer data at all, so an excused day is indistinguishable from a day you simply didn't track. And your precise coordinates are device-only (see "Location" below).

What we store on our servers

If you use Khalily fully offline as a guest and never pair, sign in or join the leaderboard, we hold almost nothing. Once your device syncs, your account row holds:

• Identity: your display name, avatar, optional @username and short bio, your language, your country code, your city/region name, an anonymous device credential, and — only if you sign in — a one-way hashed (unreadable, non-reversible) form of your email address. We never store your raw email address or password.
• Optional gender: only if you set it, and only because it enables the أيام العذر feature on your own device. It is never shown publicly, never sent to a companion, and never used for ads or analytics.
• Progress summaries: a daily summary per day (see "Your Progress history" below), your daily point totals, your leaderboard rollups, and the numbers your profile displays — streak, best streak, XP, level, badge count and your chosen showcase badges.
• Your task list: a backup of the habits/tasks themselves so a new device restores them.
• Subscription: your Khalily Plus status and expiry, and a record of the purchase events our payment processor reports.
• Pairing: who you are paired with, the shared-day pact records, and the preset nudges sent between you (we store which of three fixed messages was tapped — there is no free-text messaging in Khalily at all).
• Notifications: your device's push token, so we can deliver a reminder or a companion nudge (see "Notifications").
• Fajr alarm (only if you set it up): the first name you typed, the alarm's language and voice (a man's or a woman's), when you agreed to send the name to our voice partner, and any report you make about a recording — see "Your Fajr alarm voice".
• Khalily Lanterns: whether you have ever paired with a Khalil, memorized with a partner and used the Fajr alarm while paired, to show your lanterns; for the Fajr alarm only the day it was recorded, never a time.

Your Progress history

So that your Progress dashboard — the year heatmap, the prayer ledger, your averages and your achievements — survives a reinstall or a new phone, we keep a private per-day summary of each closed day on our servers. Each summary holds: the day's completion percentage and points, which of the five prayers were scheduled and which you marked done, how many habits you completed out of how many, and a compact map of which habits those were. It does not contain the times you prayed, your notes, or your custom habit text beyond its identifier.

This backup is private. It is never shown on your public profile, never shown to your companion, and never used for ads, analytics or ranking. It exists only so your own dashboard can be restored. It is kept for as long as your account exists, for free and Khalily Plus accounts alike, so nothing you have built up is ever cut short.

If you never sign in and never sync, this backup is never created. Deleting your account erases it completely.

Location

If you allow it, Khalily reads your device's location only while you're using the app, for a single purpose: to calculate accurate prayer times for your area.

Your precise coordinates are processed and kept on your device only. They are never sent to our servers, never sold, never shared, never accessed in the background, and never used for advertising. What does leave the device is the coarse result: the name of your city or region (for example "Mecca") and your two-letter country code. We store those so your prayer times follow you to a new device, so the country leaderboard works, and so a companion you have paired with can see roughly where you are. You can change or clear the city at any time from the in-app city picker.

One clarification, so the sentence above is exact: to turn coordinates into a city name your device calls the geocoder built into its own operating system — Apple's on iPhone and iPad, Google's on Android. That lookup travels from your device to your operating-system vendor under their privacy policy. It does not pass through Khalily's servers, and we never receive the coordinates.

If you don't grant the permission the app still works and shows times for a default city (Mecca). You can turn location on or off at any time in your device Settings; removing the app deletes the location data stored on your device.

Your companion (pairing)

Pairing is entirely optional and always consensual: someone shares an invite link, and the other person must accept before anything is shared. A pair is exactly two people.

Once paired, your companion sees your display name, avatar, city/region, today's completion — which prayers and habits you've completed today — and the shared-day pact. They do not see your history, your notes, your gender, your email, your exact location, or any day other than the shared one. Either of you can unpair at any time from the app, which stops the sharing immediately.

The only messages Khalily supports between companions are three fixed, preset nudges. There is no free-text chat, so there is nothing for us to read or store beyond which preset was tapped and when.

Public profile, leaderboard & badges

Khalily has a public side — the المتنافسون leaderboard and your profile page. When it is on, other people can see: your display name or @username, your avatar, your country, your points and rank, your level, your streak, how many badges you've earned and the badges you chose to showcase, and your short bio if you wrote one.

They never see: your habits or their names, your per-prayer detail, any individual day, your excused days, your gender, your city or your email.

There are two switches in Profile, and they are yours: one hides you from the leaderboard, and one turns your public profile off entirely — which also hides your badges and level from everyone. Both take effect on your next sync. Guests who never set a name appear under a generic anonymous label rather than a real one.

Notifications

Most of Khalily's reminders — prayer times, adhkar, your habits — are scheduled by your own device and involve no server at all.

Companion notifications (an invite accepted, a nudge, your khalil finishing their day) are delivered through Expo's push service on top of Apple's and Google's notification networks. For that we store one anonymous push token per device, linked to your account. The notification text is composed on our server from a fixed set of templates and your first name and language; it never contains your habits, your history, or anything you typed. If you decline the notification permission, or turn notifications off in your device Settings, nothing is sent and the token is discarded the first time delivery fails.

Your Fajr alarm voice

Khalily Plus includes a Fajr alarm that wakes you with a recorded message and calls you by your first name. To say your name, Khalily sends only the first name you type — inside six short, fixed sentences, together with the alarm's language and voice — to ElevenLabs, our AI voice partner, and only after you agree on the screen that asks. Nothing else about you is sent: not your account, email, location, prayers or habits. The voice is generated by AI.

We keep the name you typed, the alarm's language and voice, and when you agreed, so the alarm can be restored on a new phone. The six recordings are stored on our servers under an anonymous code instead of the name, and they are shared by everyone who has the same name in the same voice, so a name is recorded only once. We ask ElevenLabs to delete each recording from its history as soon as we receive it, and your name is never written into our logs. The finished alarm sounds are kept on your phone.

You can report a recording that sounds wrong or offensive from the alarm's settings; the report keeps your account, the recording's code and the reason you give. "Remove my alarm and name" in the alarm's settings, or deleting your account, removes your name and alarm settings from our servers at once; a shared recording that no one uses any more is deleted after 90 days.

Analytics & crash reports

To understand how Khalily is used and to improve it, we use aggregate analytics (Google Analytics / Firebase). We record anonymous events — a habit added, a prayer marked complete, which language is in use, which screen was opened — but never your name, your habit text, your notes, or your precise coordinates.

We also use Sentry to receive crash and error reports so we can fix what breaks. A report contains the technical fault (the error, the screen, the app and OS version) and no personal data: we run it with personal-information collection switched off and performance tracing disabled.

On the website we use Google Analytics with Consent Mode. Where the law requires your consent — the European Economic Area, the United Kingdom and Switzerland — we ask you before any analytics cookie is set, and nothing is stored until you choose. You may decline, and the site behaves exactly the same. Elsewhere, analytics is enabled by default, as local law allows. You can change or withdraw that choice at any time through "Privacy settings" at the foot of every page.

The website's fonts are served from our own domain, so opening a page does not call any third-party font service.

No ads

Khalily shows no ads, in the app or on the website. The app contains no advertising SDK, does not use your device's advertising identifier, and never asks for permission to track you. Earlier versions of the app showed Google AdMob ads; updating the app removes Google's ad SDK from your device completely.

Payments

Khalily Plus subscriptions are purchased through, and billed by, Google Play or the App Store — we never see or store your card details, billing address, or any payment credential. Our subscription processor (RevenueCat) tells us only your entitlement status and its expiry so the app can unlock Plus, and we keep a record of the purchase events it reports (event type, time, and your account id) for accounting and fraud prevention.

Khalily no longer uses coins: a shared day with your companion is free for everyone, and the coin balances and ledgers from earlier versions have been erased.

Where your data is processed

Khalily's backend runs on Cloudflare's global network (Workers, D1 and R2), so your data may be stored and processed on servers outside your country, including in the United States and the European Union. Our other processors — Google (Play billing, Analytics/Firebase), Apple (App Store billing, push), RevenueCat (subscriptions), Expo (push delivery), Sentry (crash reports) and ElevenLabs (the Fajr alarm's voice) — operate internationally on the same basis. We rely on their standard contractual protections for those transfers, and we never sell or rent your data to anyone.

How long we keep it

Your account data is kept while your account exists. Daily point rows are pruned after about 60 days once they have been rolled into your totals; the per-day Progress summary is kept while your account exists, as described above. An account that goes completely unused for a long period is progressively wound down — first its public profile is unpublished, then its @username is released so someone else can use it — and a guest profile that was never signed in and never synced is deleted outright after a long idle period. Purchase records are kept as long as accounting and anti-fraud obligations require, and everything else goes the moment you delete your account. Your Fajr alarm's name and settings stay until you remove the alarm or delete your account; a shared name recording that no one uses any more is deleted after 90 days. Besides purchase records, the only thing kept after you delete your account is the one-way free-week code described in "Your control & deleting your account", for 12 months.

Your rights & choices

Wherever you live, you can see and change your data inside the app, hide yourself from the public side with the switches in Profile, and delete everything yourself in one step.

If you are in the EEA, the UK, or another region with equivalent law, you also have the right to access, correct, export, restrict or object to our processing, and to withdraw consent (for location, notifications, analytics or sending your first name to our voice partner) at any time by turning off the corresponding permission — withdrawal does not affect what was done beforehand. We process your data to provide the app you asked for (contract), to keep it working and safe (legitimate interests), and — for location, notifications and the Fajr alarm's voice — on your consent. If you are in California or a comparable US state, we do not sell or share your personal information as those laws define it, and we do not use it for advertising of any kind. To exercise any right, write to [email protected]; you may also complain to your local data-protection authority.

The one-way free-week code kept after deletion (see "Your control & deleting your account") rests on our legitimate interest in offering the free week once per person. The phone's one-way code (same section) rests on the same interest, so that the free week is offered once per phone.

Security

Everything travels over encrypted HTTPS, and our stored data sits on Cloudflare's managed, encrypted-at-rest infrastructure. Your session credential is held in your device's secure keychain/keystore. We store no raw email addresses and no passwords at all, so there is no password database to breach. No system is perfect, and we won't pretend otherwise — but we keep the amount of data we hold deliberately small, which is the strongest protection there is.

Your control & deleting your account

You can edit or delete your habits at any time, and hide yourself from the leaderboard or turn your public profile off with a switch. To erase everything: Profile → Delete account permanently deletes your account, @username, task backup, Progress history, scores, badges, streak and your Fajr alarm's name from our servers, and wipes the app's data on your device — immediately and irreversibly. You can also request deletion without the app at khalily.online/delete-account. Purchase and transaction audit records are retained where legally required. Note: deleting your account does not cancel an active store subscription — cancel it in Google Play / the App Store.

So that the free week stays one per person: if you used a free week (on your own or with a memorization partner) or the Fajr alarm, we keep for 12 months a one-way code made from your sign-in ID — it contains no name, email or anything else about you — together with what you had already used. If you sign in again with the same account within that time, you continue where you left off, with the same free week and the same alarm allowance, instead of starting again. After 12 months the code is deleted.

And so that the free week also stays one per phone, with or without sign-in: when a free week or the Fajr alarm is used on a phone, we keep a one-way code made from a private code that this app creates on your phone — it contains nothing about you or your phone, and it is never stored with your account — together with what was already used on that phone. So starting again on the same phone after signing out or deleting the account does not give a new free week. This code is deleted 12 months after it was last updated.

Children

Khalily is a general-audience worship companion and is not directed at children under 13. We do not knowingly collect personal data from children under 13; if you believe a child has given us data, write to [email protected] and we will delete it.

Changes to this policy

As Khalily grows we will update this policy, and the date at the top always tells you which version you're reading. If a change materially affects what we collect or why, we'll tell you in the app before it takes effect rather than quietly changing the page.

Contact

Questions about privacy, or want to exercise a right? Reach us at [email protected] and we'll reply.