Privacy at Dhimmah

Last updated: August 23, 2026

Dhimmah is designed to help you meet the dawn prayer without asking who you are. There are no ads, no tracking, and no sale of your data.

What we collect

• An anonymous account ID and a generated Dhimmah name. We do not ask for your real name, email address, or phone number. If you enable recovery, Supabase stores a one-way-derived synthetic credential; the recovery code itself remains your secret.
• Your language, calculation settings, and gender choice used to select the app's theme and experience.
• City-level location: coordinates are rounded on your phone to two decimal places (about one kilometre) before the app stores or sends them, together with your city and country.
• Prayer completion dates and status, streak counters, recovery usage, and rest-day usage kept in a neutral form: an excused-until date and a monthly count. We never collect a diagnosis, symptom, or cycle log, though a rest interval on an account with a woman profile can imply why it was taken, so we protect this data like everything else on your account.

Why we use it

City-level location provides prayer times, qibla direction, and local garden weather. Account and prayer activity preserve your streak and garden across devices, support recovery, and power community features. Language and theme choices make the app feel right for you.

What other people can see

Leaderboards show your generated name, city, and streak score to other Dhimmah users. Because the generated name takes a masculine or feminine form to match your chosen profile, other users can infer that choice from it. The dawn map shows only fully aggregated dots: many users grouped into broad geographic buckets, without names or individual positions. Your account ID, prayer history, and rest-day usage are not shown to other users.

Services that process data

• Supabase hosts the anonymous account, profile, prayer logs, streaks, and recovery credential.
• Open-Meteo receives city-level coordinates when garden weather is enabled, to return current weather.
• OpenStreetMap Nominatim receives the city search you type and returns matching places.
• AlAdhan receives city-level coordinates, a date, and a calculation method when network prayer-time calculation is used.

Like any internet service, these processors also receive ordinary connection information such as an IP address. Dhimmah does not use that information to track you. Data is sent over HTTPS.

Retention and deletion

Server rows are kept until you delete your account. You can permanently delete the account and its associated data in Settings → Account, or use the web account-deletion page if you no longer have the app. Local app data is removed during in-app account deletion and can also be removed by uninstalling the app.

Our commitments

Dhimmah has no advertising, analytics, or tracking SDKs. We do not sell data, build advertising profiles, or take payments.

Contact

Questions about privacy: privacy@dhimmah.app.