Awwabالعربية

Privacy Policy

Effective: 13 November 2026 (3 Jumada al-Akhirah 1448 AH)

1. Introduction

The developer of the Awwab app is committed to protecting the personal data of its users. This policy sets out the data the app processes, why it is processed, how it is stored and destroyed, and the rights of its owners and how to exercise them, in accordance with the Saudi Personal Data Protection Law issued by Royal Decree No. (M/19) dated 9/2/1443 AH, as amended, and its regulations.

Using the app does not require an account, the app shows no advertising, and it does not track the user. Photos, location data and the prayer record are processed on the user's device and are not transferred to the developer, except for what is needed to manage the subscription and the technical data described in Section 6.

2. Definitions

Unless the context requires otherwise, the following terms have the meanings given below wherever they appear in this policy:

  1. a.The Law: the Personal Data Protection Law and its regulations.
  2. b.The App: the Awwab app for smart devices.
  3. c.The Developer: [developer name], owner of the App, acting as the controller.
  4. d.The User or Data Subject: anyone who uses the App.
  5. e.The Device: the phone or smart device on which the App is installed.
  6. f.The Store: the App Store or Google Play, as the case may be.
  7. g.Service Provider: a party that processes data for the App and on its behalf.
  8. h.The Competent Authority: the Saudi Data and Artificial Intelligence Authority (SDAIA).

3. Data the App processes and why

The App processes the following data on the Device. It is not transferred to the Developer or to any third party.

First: location data

The App asks for access to location data only while it is in use, to calculate prayer times. The coordinates are kept on the Device and do not leave it. The User may choose a city manually instead of granting this permission.

Second: the sink photo

The App asks for camera access to photograph the sink during setup and when stopping an alarm. The photo is processed on the Device, which keeps a numerical representation derived from it rather than the photo itself, and the photo is destroyed as soon as processing ends. Photos are never sent to any server and are used for nothing other than verification.

Third: the prayer record

The User's answers to "Did you pray?", the streak record and the excused status are kept on the User's Device only. Because they relate to religious belief and are sensitive data, the App does not collect them, the Developer has no access to them, and they are not disclosed to any third party.

Fourth: the app lock

  1. a.On Apple devices: the User chooses the apps to lock through Apple's Screen Time interface, and the App cannot see the names of the chosen apps.
  2. b.On Android devices: with the User's explicit consent, the App uses the accessibility service only to know which app is on screen, without seeing its content or what the User types. The list of chosen apps is kept on the Device.

Fifth: settings, alarms and notifications

The User's settings are kept on the Device, alarms and notifications are scheduled on it, and the App sends no notifications from external servers.

4. Legal basis for processing

Processing of the data in Section 3 is based on the consent the User gives by enabling the permissions on the Device. Processing of the subscription data in Section 5 is based on performing an agreement to which the User is a party.

5. Disclosure of data and service providers

  1. a.Payments are made through the Store, and the Developer has no access to payment details.
  2. b.The App uses the service provider RevenueCat to manage and verify subscriptions, and discloses to it: (1) an anonymous subscriber identifier; (2) the purchase history; (3) the device model, operating system, app version, device language and store country; (4) on Apple devices, the device identifier Apple assigns to the developer. RevenueCat processes this data for the App and on its behalf.
  3. c.The App does not sell personal data, does not disclose it for advertising or marketing, and never uses camera data for marketing.
  4. d.The Developer uses only service providers that give the data protection equal to that set out in this policy.
  5. e.Data may be disclosed where required by law, a court order or a request from a competent authority.

6. Technical data sent by built-in tools

The App uses Google's ML Kit to recognise the contents of photos on the Device. ML Kit does not send the photos or the results of its analysis. It does send Google technical data about its performance, including the device model and operating system, the app identifier and version, a per-installation identifier, processing time and error codes, which Google uses for diagnostics and performance under its own policy.

7. Transfer outside the Kingdom

The data in Sections 5 and 6 may be transferred to service providers' servers outside the Kingdom of Saudi Arabia, including in the United States. Transfers are limited to the minimum needed to provide the service, in accordance with the Law.

8. Retention and destruction

  1. a.Data kept on the Device remains for as long as the App is installed, and is all destroyed when the App is deleted from the Device.
  2. b.The service provider keeps the subscription record while the subscription is active and for as long afterwards as the law requires. The User may request its destruction under Section 9.
  3. c.Deleting the App does not cancel the subscription, which is cancelled from the Store's settings.

9. The data subject's rights and how to exercise them

  1. a.Under the Law, the data subject has the right to be informed of how their data is processed; to access it and obtain a copy; to request its correction or destruction; and to withdraw consent at any time by turning off the permissions in the Device's settings.
  2. b.Because data kept on the Device never reaches the Developer, the User exercises these rights over it directly on the Device.
  3. c.Requests about the subscription record are sent to the email in Section 14, with proof of purchase such as the order number on the Store's receipt, and are answered within 30 days.

10. Complaints

The data subject may lodge a complaint with the Saudi Data and Artificial Intelligence Authority (SDAIA) as the competent authority, and may first contact the Developer to resolve it.

11. Data protection

The Developer takes appropriate organisational and technical measures to protect data. Data is sent to service providers over an encrypted connection, and data kept on the Device is protected by its operating system's safeguards.

12. Minors

The App is suitable for all ages. A minor needs the consent of a legal guardian to subscribe. The App collects no data about the User's age.

13. Changes to this policy

The Developer may amend this policy. The User is notified of material changes within the App, and changes apply from their publication unless stated otherwise.

14. Contact

Questions and requests about this policy may be sent to [email address]. No data protection officer has been appointed; the Developer carries out that role.

This policy was written in Arabic. If this translation differs from the Arabic text, the Arabic text prevails.