Qibla is built around a simple idea: your worship is between you and God, and your data should stay yours. We designed the app to collect as little as possible. This policy explains, plainly, what happens to your information.
Qibla uses your location to calculate accurate prayer times for where you are and to point the Qibla compass toward the Kaaba. This happens on your device. Your location is not sent to us, is not stored on any server, and is not shared with third parties. You can decline location access and select a city manually. Until you choose either current location or a manual city, Qibla does not invent a default location and clearly marks location-dependent results as unavailable.
When you play a recitation, the audio is streamed from a third-party content provider (everyayah.com). Standard network requests (such as your IP address) are handled by that provider to deliver the audio; we do not receive or store this.
If you enable prayer and athan reminders, notifications are scheduled locally on your device. We do not operate a push server and do not track whether you open them.
Noor is optional and disabled until you give explicit permission. On supported devices and languages, Noor uses Apple's on-device model, so generation works without sending the conversation to Qibla or an AI provider.
If on-device AI is unavailable, you may separately enable online fallback. For each request, Qibla sends your current message, a bounded recent portion of the conversation, the app language, and source excerpts retrieved on your device through Qibla's serverless proxy to ZenMux and its selected model provider so they can generate a reply. Do not include information you consider sensitive.
Private personalization is a separate, default-off choice. Your selected madhab, prayer progress, dhikr totals, prayer-time context, name, and assistant memory may help an on-device answer, but this private context is never sent to ZenMux or another online model. Online answers also cannot add facts to assistant memory.
Qibla's proxy does not create an account for you or persist a server-side chat history. Hosting infrastructure, ZenMux, and the selected model provider may process, log, transfer, or retain online request data under their own policies. ZenMux states that anonymized user content may be used to improve or train models. Noor's conversation history and optional memory are stored locally in the app and can be erased or disabled in Settings.
If you use Noor, Qibla uses Apple's App Attest service to verify that requests come from an authentic, unmodified copy of the app. The app sends a device-specific App Attest key identifier and cryptographic proof to Qibla's proxy. We store a one-way hash of the key identifier, its public verification key, environment, registration date, and anti-replay counter for up to 180 days after the most recent valid request. One-time security challenges expire within five minutes.
This security record is associated with the app installation on that device, not with a Qibla account, name, email address, or advertising profile. It is used only to authenticate the app, prevent fraud, and protect the service; it is not used for analytics, advertising, cross-app tracking, or sale. Our proxy may keep a request's IP address in memory for up to ten minutes solely to enforce abuse limits, and hosting infrastructure may process standard network logs under its own policy.
Your first name, profile preferences, prayer logs, tasbih counts, streaks, bookmarks, Noor chat history and optional memory, and other settings are stored locally on your device (and in your private iCloud backup if you have iCloud backup enabled, which is governed by Apple's privacy policy). Deleting the app removes this data from your device.
You can use Qibla without an account, advertising identifier, analytics, or Noor. In Qibla Settings, you can turn online AI fallback, private on-device personalization, assistant memory, prayer reminders, and holy-day reminders on or off independently. “Disable Noor and erase its data” revokes AI consent and removes Noor chats, memory, and personalization settings from the device. You can also clear the selected manual city or change location permission in iOS Settings.
Qibla is not directed to children under 13 and we do not knowingly collect personal data from them. The app does not require an email address, account, or server profile. If a parent or guardian believes a child submitted personal information through Noor's optional online processing, contact us so we can review the request.
If we ever change this policy, we will update the date above and, for meaningful changes, note it in the app.
Questions about privacy? Email privacy@qibla.app.