Wisaal app icon
Wisaal
Download for iOS

Legal

Privacy Policy

How Wisaal Labs LLC collects, uses, shares and protects your personal information when you use the Wisaal app and website.

Effective date: 1 October 2026·Version 1.0

This Privacy Policy explains how Wisaal Labs LLC, trading as "Wisaal" ("Wisaal", "we", "us" or "our"), collects, uses, shares and protects your personal information when you use:

  • our mobile app, WISAAL: Muslim Prayer & Wellness App, for iOS;
  • our website at https://mywisaal.com;
  • any other services that link to this policy (together, the "Services").

We decide how and why your personal information is processed. If you have questions or concerns, email us at privacy@mywisaal.com. If you do not agree with this policy, please do not use the Services.

Summary of key points

This summary gives the main points. Each section listed in the table of contents explains them in more detail.

  • What we collect. Your name, email, password, profile type (brother or sister), sign-in details from Google or Apple, your worship records, your prayer settings, your push notification token and basic server logs.
  • Sensitive information. Your worship records can reveal your religious beliefs. We only sync them to your account with your explicit consent.
  • Information from third parties. We only receive information from Google or Apple, and only if you choose to sign in with them.
  • What stays on your device. Your written journal entries, your heart-meter level, the emotion you select, period-mode dates and live GPS location stay on your device and are not uploaded to our servers.
  • What we do not do. We do not sell your personal information. We do not show ads, use advertising or analytics trackers, or use your data to build marketing profiles.
  • Who we share it with. Only service providers that help us run Wisaal (such as Amazon Web Services, Expo, Apple and Google), our contracted developers, and authorities where the law requires it.
  • Where it is stored. Our servers are hosted by Amazon Web Services. Some service providers process data in other countries.
  • How long we keep it. Until you delete it or your account, or after 24 months of inactivity. Details are in section 8.
  • Your rights. You can ask to access, correct, delete or receive a copy of your data, and withdraw consent at any time.
  • How to exercise your rights. Email privacy@mywisaal.com, or delete your account in the app under Settings.
  • Age. Wisaal is for adults aged 18 and over.

Table of contents

1. What information do we collect?

In short: we collect the information you give us, a small amount of technical information from your device and our servers, and nothing from data brokers.

Personal information you give us

We collect personal information that you give us when you create an account, use the app's features, join our waitlist, or contact us. This includes:

  • Account details: your name, email address and password. We store your password only in hashed (one-way scrambled) form.
  • Contact and authentication data: the information used to sign you in and keep your account secure, such as sign-in tokens and password-reset codes.
  • Profile type: whether you chose a brother or sister profile.
  • Sign-in details: if you sign in with Google or Apple, the details those providers share with us (see section 6).
  • Worship records: your prayer, fasting, zikr, dua and Quran logs and related goals.
  • Prayer settings: your calculation method, madhab, adjustments, timezone and, if you choose one, the city you set for prayer times.
  • Prayer notification preferences: which reminders you turn on and when.
  • Support messages: what you write when you email us, including any screenshots you choose to attach.
  • Waitlist sign-ups: if you joined the Wisaal waitlist on our website, your email address.

Please keep the information you give us accurate and up to date. You can correct it in the app or by emailing us.

Sensitive information

With your explicit consent, we process:

  • Religious practice records (prayer, fasting, zikr, dua and Quran logs), which can reveal your religious beliefs.

Worship records are synced because that is the service, and an account is only created if you consent. If you withdraw your consent, we stop syncing them and delete the synced copy (see section 11). Your heart-meter level and the emotion you select stay on your phone and are not sent to our servers.

Information collected automatically

When you use the Services, we automatically collect:

  • Log and usage data: your IP address, the date and time of each request, the page or feature you used, and technical error information. Our servers record this to keep the Services working and secure. We do not use it for analytics or advertising.
  • Device data: your push notification token (which lets us send notifications to your device) and a device name sent at sign-in (for example "iPhone 15") so you can recognise your signed-in sessions.

Information from your device's features

The app asks for your permission before using:

  • Location: the Qibla compass uses your location on this device. Prayer times are calculated from your IP address. Your live GPS location is not sent to or stored on our servers. See section 16.
  • Motion and compass sensors: to point the Qibla compass. These readings stay on your device.
  • Photo library: only when you choose to attach a screenshot to a feedback email.
  • Notifications: to send prayer reminders and other notifications. You can turn notifications off at any time in your device settings.
  • Vibration: for haptic feedback.

You can change these permissions at any time in your device settings.

What stays on your device

The following information is stored only on your device and is not uploaded to our servers:

  • your written journal entries (such as gratitude, dua, Quran reflections, free writing and dream notes);
  • your heart-meter level and the emotion you select;
  • period-mode dates;
  • your live GPS location and compass readings;
  • export and backup files you create, unless you choose to share them.

Google API Services

Wisaal's use and transfer of information received from Google APIs follows the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

2. How do we process your information?

In short: we use your information to run your account and the app's features, to help you, to keep Wisaal secure, and to meet the law. Retention periods for each purpose are in section 8.

We process your personal information to:

  • Create and manage your account. We use your name, email, password, profile type and sign-in details (including Google or Apple) to create, secure and run your Wisaal account.
  • Sync your data. We store and sync your worship records and prayer settings so you can use Wisaal across your devices. Journal text, your heart-meter level, the emotion you select, and period dates stay on your device only.
  • Deliver the Services. To show prayer times and the Qibla direction and to send the reminders you turn on.
  • Respond to you. To answer your questions, feedback and support requests.
  • Send administrative messages. Such as password-reset codes and important account or policy notices.
  • Handle deletion requests. To verify and carry out your request to delete your account and its associated data.
  • Protect the Services. To keep Wisaal secure, monitor for and prevent fraud and abuse, and fix bugs.
  • Tell waitlist members about our launch. If you joined the waitlist, we use your email to tell you when Wisaal is available. You can unsubscribe at any time.
  • Protect someone's vital interests. In the rare case that this is needed to prevent harm to a person.
  • Meet legal obligations. To comply with the law and respond to valid legal requests.

We only use your information for other purposes if you give us your explicit consent first. We do not use your personal information for advertising, marketing profiles, or automated decisions that have legal or similarly significant effects on you. We do not use artificial intelligence tools to process your personal information.

3. What legal bases do we rely on?

In short: we only process your information when the law gives us a valid reason, such as your consent, our contract with you, a legitimate interest, or a legal duty.

If you are in the EU or UK

The General Data Protection Regulation (GDPR) and UK GDPR require us to explain the legal bases we rely on. We rely on:

  • Contract: to provide the Services you signed up for, including your account, sync, prayer settings and account deletion.
  • Consent: for location, notifications and photo library access (through your device's permission prompts), for emails to waitlist members, and for syncing your sensitive information. You can withdraw consent at any time (see section 11).
  • Legitimate interests: where these interests are not outweighed by your rights, for example to diagnose technical problems, keep server logs, keep the Services secure and prevent fraud or abuse.
  • Legal obligations: to comply with the law, for example responding to a valid request from a court, regulator or law enforcement body, or establishing or defending legal claims.
  • Vital interests: in the rare case that we need to protect someone's life or safety.

Because your worship records are special category data, we only process them with your explicit consent under Article 9(2)(a) of the GDPR and UK GDPR.

If you are in Canada

We process your information with your express consent, or with your implied consent where the law allows it. You can withdraw consent at any time.

Canadian law allows us to process your information without consent only in limited cases, for example:

  • to investigate or prevent fraud;
  • to comply with a subpoena, warrant or court order;
  • in an emergency that threatens someone's life, health or safety;
  • as part of a business transaction, if legal conditions are met;
  • where the information is publicly available as defined by the regulations.

If you are in the UAE or another country

We process your information where it is needed to provide the Services you asked for, with your consent (and explicit consent for sensitive information), to comply with the law, or for other reasons your local law permits.

4. When and with whom do we share your information?

In short: we only share your information with service providers that help us run Wisaal, with our contracted developers, and where the law requires it. We never sell it.

We do not sell, rent or trade your personal information. We share it only with the following.

Service providers

  • Cloud hosting: Amazon Web Services, which hosts our servers and database.
  • Sign-in: Google (Google Sign-In) and Apple (Sign in with Apple).
  • Push notifications: Expo (650 Industries, Inc.), and on iOS, Apple Push Notification service.
  • Location services on iOS: Apple, which converts your coordinates into a city name on your device's behalf.
  • Beta testing: Apple TestFlight, if you take part in testing pre-release versions of the app.
  • Email: our email provider, which sends account emails such as password-reset codes and receives support emails.
  • Waitlist: our waitlist tool, which stores waitlist email addresses and sends the launch email.

Our service providers may use your information only to provide their services to us and on our instructions. They must protect it and keep it only for as long as we tell them.

Others

  • Our contracted developers: build and maintain Wisaal, with access limited to what they need.
  • Professional advisers: such as lawyers and accountants, under a duty of confidentiality.
  • Authorities: when the law requires it, or to protect the rights, property or safety of Wisaal, our users or others.
  • Business transfers: if Wisaal is involved in a merger, sale of assets, financing or acquisition, or negotiations for one, your information may be transferred as part of that deal. We will tell you before your information becomes subject to a different privacy policy.

5. Do we use cookies and other tracking technologies?

In short: the app uses none, and our website uses only two cookies that it needs to work.

The app does not use cookies, advertising identifiers, analytics or tracking tools.

Our website (mywisaal.com) uses only strictly necessary cookies:

  • wisaal-session: keeps you signed in. It expires after 2 hours.
  • XSRF-TOKEN: protects you against forged requests.

These cookies are needed for the website to work, so they do not require consent. We do not use analytics, advertising or social media cookies, tracking pixels or web beacons, and we do not let third parties place them on our website. We do not use Google Analytics.

Most browsers accept cookies by default. You can set your browser to block or delete cookies, but if you block these two, signing in to the website may not work.

6. How do we handle social logins?

In short: if you sign in with Google or Apple, we receive only your basic profile details from them.

You can sign in with Google, or with Apple on iOS. When you do, we receive the information that provider shares with us:

  • Google Sign-In: your name and email address. Google may also share your profile photo; we do not use or store it.
  • Sign in with Apple: an identity token and, if you choose to share them, your name and email. Apple lets you hide your real email behind a private relay address.

We never receive your Google or Apple password, contacts or other account data. We use this information only to create and secure your account. We do not control how Google or Apple use your information; please read their privacy policies to understand their practices and your settings.

7. Is your information transferred internationally?

In short: our servers are hosted by Amazon Web Services. Some of our providers and our team are in other countries.

Our servers are hosted by Amazon Web Services. When you use the Services, your information may also be transferred to, stored in, and processed in:

  • United States: by Expo, Apple and Google, and by Amazon as a US company;
  • United Arab Emirates: where Wisaal Labs LLC is based and operates the Services;
  • Bangladesh: where our contracted developers are based.

These countries may not have data protection laws as strong as those in your country. We protect information in transit with encryption and limit access to people who need it.

We are not certified under the EU-US Data Privacy Framework.

8. How long do we keep your information?

In short: only as long as we need it for the purposes in this policy, unless the law requires longer.

We keep personal information only as long as we need it for the purposes in section 2, unless the law requires or allows us to keep it longer.

  • Account details: until you delete your account, or after 24 months of inactivity. We will email you 30 days before deleting an inactive account.
  • Worship records and prayer settings: until you delete the record or your account. Deleted data is removed from our backups within 7 days.
  • Your chosen city: until you change it or delete your account. We do not store your live GPS location.
  • Server logs (including IP addresses): deleted after 30 days.
  • Push notification tokens: removed when you sign out, delete your account, or the token stops working.
  • Password-reset codes: expire after 60 minutes.
  • Records of account emails we send you: kept only while your account is active.
  • Support and feedback emails: deleted after 24 months.
  • Account deletion requests: completed within 30 days. We keep a minimal record of the request (the date and a reference, without your other data) for 12 months to show that we handled it.
  • Waitlist emails: until you unsubscribe or ask us to delete them.

When we no longer need your information, we delete or anonymise it. If that is not immediately possible (for example, because a copy is in a backup), we store it securely and keep it out of any use until it is deleted.

9. How do we keep your information safe?

In short: we use technical and organisational measures to protect your information, but no system is completely secure.

We use measures designed to protect your information, including:

  • encryption in transit (HTTPS) for all traffic between the app, website and our servers;
  • hashed passwords;
  • encryption of the journal stored on your device (AES-256-GCM, with the key in your device's secure keystore), and password-protected encrypted backup files;
  • access to personal data limited to people who need it, under confidentiality obligations;
  • regular backups kept for 7 days.

No method of transmission over the internet or of electronic storage is 100% secure, so we cannot guarantee that unauthorised people will never be able to defeat our security. Please use the Services on a secure device and network. If a data breach affects your rights, we will notify you and the relevant authorities as the law requires.

10. Do we collect information from minors?

In short: no. Wisaal is only for adults aged 18 and over.

You must be 18 or older to create an account or use the Services, and we ask you to confirm your age when you sign up. We do not knowingly collect personal information from, market to, or sell the information of anyone under 18.

If we learn that someone under 18 has created an account, we will deactivate it and promptly delete their data. If you believe a minor has given us personal information, please email privacy@mywisaal.com.

11. What are your privacy rights?

In short: depending on where you live, you can access, correct, delete or move your information, object to or restrict how we use it, and withdraw consent. You can also update or delete your account at any time.

Depending on where you live, you may have the right to:

  • access the personal information we hold about you and get a copy of it (we provide this to all users, wherever they live);
  • correct inaccurate or incomplete information;
  • delete your personal information;
  • receive your information in a portable format;
  • restrict or object to certain processing;
  • not be subject to decisions made solely by automated means that have legal or similarly significant effects on you. We do not make such decisions today; if we ever do, we will tell you, explain the main factors, and offer a simple way to ask for a human to review the decision;
  • withdraw your consent at any time;
  • complain to a data protection authority.

Withdrawing consent

You can withdraw your consent to syncing your worship records, or to waitlist emails, by emailing privacy@mywisaal.com. You can turn off location, notifications and photo access in your device settings. Withdrawing consent does not affect processing that happened before you withdrew it, or processing we carry out on another legal basis.

Your account

You can review and update your profile and prayer settings in the app. To delete your account, go to Settings and tap "Request account deletion", or email privacy@mywisaal.com. When you delete your account, we delete your information from our active systems within 30 days. We keep only the minimal record of your deletion request described in section 8 and any information the law requires us to keep.

How to make a request

Email privacy@mywisaal.com from the email address linked to your account. We may need to verify your identity before we act. We will respond within the time your local law requires, and within 30 days at the latest unless the law allows an extension.

Appeals

If we decline your request, you can appeal by emailing privacy@mywisaal.com with the subject "Appeal". If you are still not satisfied, you can contact your local data protection authority or attorney general.

Complaints in the UK

If you are in the UK, you can complain to us first by emailing privacy@mywisaal.com or writing to the address in section 18. We will acknowledge your complaint within 30 days, investigate it without undue delay, keep you updated, and explain the outcome. If you are not happy with our final response, you can contact the Information Commissioner's Office (ICO), the UK supervisory authority:

  • Website: https://ico.org.uk/make-a-complaint
  • Helpline: 0303 123 1113
  • Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Complaints in the EEA and Switzerland

If you are in the European Economic Area, you can complain to the data protection authority in your country (https://www.edpb.europa.eu/about-edpb/about-edpb/members_en). If you are in Switzerland, you can contact the Federal Data Protection and Information Commissioner (https://www.edoeb.admin.ch).

12. Controls for Do-Not-Track and Global Privacy Control

In short: we do not track you, so there is nothing for these signals to switch off.

Some browsers and devices offer a "Do-Not-Track" (DNT) setting or a Global Privacy Control (GPC) signal. There is no agreed industry or legal standard for recognising DNT signals, and we do not track you across websites, sell your information or share it for targeted advertising. For these reasons we do not currently respond to DNT or GPC signals. California law requires us to tell you this. If a standard is adopted that we must follow, or our practices change, we will update this policy.

13. Do United States residents have specific privacy rights?

In short: if you live in a US state with a privacy law, you may have rights to access, correct, delete and get a copy of your information, and to appeal our decisions. We do not sell or share your information for advertising.

This section applies if you live in California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia or another US state with a privacy law.

Categories of personal information we have collected in the past 12 months

  • A. Identifiers (collected: yes). Name, email address, IP address, account name and push notification token. Kept until you delete your account, or after 24 months of inactivity; IP addresses in server logs are deleted after 30 days.
  • B. Personal information under California's Customer Records law (collected: yes). Name. Kept until you delete your account, or after 24 months of inactivity.
  • C. Protected classification characteristics (collected: yes). Gender (through your brother or sister profile type), religion (through worship records) and confirmation that you are 18 or older. Kept until you delete your account, or after 24 months of inactivity.
  • D. Commercial information (collected: no).
  • E. Biometric information (collected: no).
  • F. Internet or other similar network activity (collected: yes). Server logs of your interactions with the app and website. Deleted after 30 days.
  • G. Geolocation data (collected: yes). The city you choose and its coordinates, if you pick a city. Prayer times otherwise use your IP address to estimate an approximate location. We do not store your live GPS location. A chosen city is kept until you change it or delete your account.
  • H. Audio, electronic, sensory or similar information (collected: no).
  • I. Professional or employment-related information (collected: no).
  • J. Education information (collected: no).
  • K. Inferences drawn from personal information (collected: no).
  • L. Sensitive personal information (collected: yes). Account login information and religious beliefs (worship records). Kept until you delete the record or your account, or after 24 months of inactivity, and removed from backups within 7 days after deletion. Your heart-meter level and the emotion you select stay on your phone and are not collected.

We use and disclose sensitive personal information only to provide the Services you ask for and as the law allows. We do not use it to infer characteristics about you.

We may also collect other personal information when you contact our support channels, for example the content of your email, to help you and respond to your request.

Sources, purposes and disclosures

We collect this information from you directly, from your device, and from Google or Apple if you use their sign-in. We use it for the purposes in section 2.

In the past 12 months, we have disclosed the following categories to service providers for business purposes only (see section 4): A (identifiers), B (Customer Records information), C (protected classification characteristics), F (network activity), G (geolocation data) and L (sensitive personal information).

We do not sell or share your personal information

In the past 12 months, we have not sold or "shared" (for cross-context behavioural advertising) any personal information, and we will not do so in the future. We have no actual knowledge of selling or sharing the personal information of anyone under 16.

Your rights

These rights are not absolute, and in some cases the law allows us to decline a request. Depending on your state, you may have the right to:

  • know whether we process your personal information, and access it;
  • correct inaccuracies;
  • delete your personal information;
  • get a copy of the personal information you gave us, in a portable format;
  • opt out of the sale of your information, targeted advertising, or profiling that has legal or similarly significant effects (we do none of these);
  • not be discriminated against for exercising your rights.

Depending on your state, you may also have the right to:

  • access the categories of personal information we process (for example, in Minnesota);
  • get a list of the categories of third parties we have disclosed personal information to (for example, in California, Delaware and Maryland);
  • get a list of the specific third parties we have disclosed personal information to (for example, in Minnesota and Oregon);
  • get a list of the third parties we have sold personal information to (for example, in Connecticut). We have not sold personal information to anyone;
  • review, question and, where applicable, correct how your personal information has been profiled (for example, in Connecticut and Minnesota). We do not profile you;
  • limit the use and disclosure of sensitive personal information (for example, in California). We only use it to provide the Services;
  • opt out of the collection of sensitive data and data collected through voice or facial recognition features (for example, in Florida). Wisaal has no voice or facial recognition features.

How to exercise your rights

Email privacy@mywisaal.com, use Settings in the app ("Request account deletion" or "Feedback & Support"), or write to the address in section 18.

Verification. We will verify your identity by matching your request to the information on your account, and we use the information in your request only to verify you. If we cannot verify you this way, we may ask for more information.

Authorised agents. You may ask someone to make a request for you. The agent must give us your written, signed permission, and we may still need to verify your identity. We may decline a request from an agent who cannot show they are authorised.

We will respond within 45 days, or longer where the law allows.

Appeals

If we decline to act on your request, you can appeal by emailing privacy@mywisaal.com with the subject "Appeal". We will tell you in writing what we did or did not do in response, with our reasons. If your appeal is denied, you can complain to your state attorney general.

California "Shine the Light" law

California Civil Code Section 1798.83 lets California residents ask us once a year, free of charge, for the categories of personal information (if any) we disclosed to third parties for their direct marketing in the previous calendar year, and the names and addresses of those third parties. We do not disclose personal information to third parties for their direct marketing. To make a request, email privacy@mywisaal.com or write to the address in section 18.

14. Do residents of other regions have specific privacy rights?

In short: yes. Depending on where you live, you may have additional rights.

EU, UK, Iceland, Norway and Liechtenstein

You have the GDPR or UK GDPR rights in section 11, including the complaint routes listed there.

Switzerland

You have rights under the Federal Act on Data Protection (FADP), and can complain to the Federal Data Protection and Information Commissioner.

Canada (including Quebec)

You can access and correct your information and withdraw consent under PIPEDA and Quebec's Law 25. You can complain to the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d'acces a l'information.

Australia and New Zealand

We collect and process your personal information under Australia's Privacy Act 1988 and New Zealand's Privacy Act 2020. This policy is intended to meet the notice requirements of both Acts: it explains what we collect, where we get it from, why we use it, and who receives it.

If you choose not to give us information we need, we may not be able to:

  • provide the Services you want;
  • respond to or help with your requests;
  • manage your account;
  • confirm your identity and protect your account.

You can ask to access or correct your personal information at any time (see section 19). If you believe we have breached the Australian Privacy Principles, you can complain to the Office of the Australian Information Commissioner (https://www.oaic.gov.au). If you believe we have breached New Zealand's Information Privacy Principles, you can complain to the Office of the Privacy Commissioner (https://www.privacy.org.nz).

South Africa

You can ask to access or correct your personal information at any time (see section 19). If you are not satisfied with how we handle a complaint about our processing of your personal information, you can contact the Information Regulator (South Africa):

  • General enquiries: enquiries@inforegulator.org.za
  • POPIA complaints (using the regulator's complaint form): POPIAComplaints@inforegulator.org.za

United Arab Emirates, Middle East and Asia

If you live in the United Arab Emirates, Saudi Arabia, Qatar, Bahrain, Oman, Egypt, Turkey, Malaysia, Indonesia, Pakistan, India or another country with data protection laws, you have the rights those laws give you. These may include the right to access, correct, delete or move your personal information, to withdraw consent, and to object to or restrict certain processing. In the UAE, this includes your rights under Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, and you can complain to the UAE Data Office.

To exercise any of these rights, email privacy@mywisaal.com. We will respond within the time your local law requires, and within 30 days at the latest.

15. Privacy contact

In short: we have not appointed a data protection officer. Email privacy@mywisaal.com.

Wisaal Labs LLC has not appointed a data protection officer. For privacy questions, or to access, correct, or delete your information, email privacy@mywisaal.com, or write to the address in section 18.

16. Wisaal-specific information

In short: your journal, heart-meter level and selected emotion stay on your phone, your worship records are synced only with your consent, and we do not store your live location.

Does my journal stay on my device?

Your written journal entries (such as gratitude, dua, Quran reflections, free writing and dream notes), your heart-meter level and the emotion you select are stored only on your device and are not uploaded to our servers. If you delete the app or sign out and clear local data, on-device entries are permanently removed and we cannot recover them.

How do we handle religious information?

Your worship records (such as prayers, fasting and Quran tracking) may reveal your religious beliefs. We only sync them to your account with your explicit consent, we never sell them, and we never use them for advertising or profiling. You can withdraw your consent at any time by emailing privacy@mywisaal.com or by deleting your account in Settings. Your heart-meter level and the emotion you select stay on your phone.

How do we use your location?

The Qibla compass uses your device location if you allow it. That live GPS location stays on your device and is not sent to our servers. Prayer times are calculated from your IP address. Our server uses that address to estimate your approximate location for the prayer times request. We do not send your GPS coordinates for prayer times. To show your city name on the device, your device's operating system (Apple on iOS) may convert your coordinates into a place name using its own location services. If you choose a city manually instead, we store that city and its coordinates in your account settings so they sync across your devices.

What happens to period-mode dates?

If you use period mode on a sister profile, those dates stay on your device and are never sent to our servers.

17. Do we make updates to this policy?

In short: yes, we update this policy when needed to stay accurate and comply with the law.

We may update this policy from time to time. The updated version will show a new effective date at the top. If we make material changes, we will tell you in the app or by email before they take effect. Please review this policy from time to time.

18. How can you contact us about this policy?

In short: email privacy@mywisaal.com, or write to us at the address below.

If you have questions or comments about this policy, email privacy@mywisaal.com, or write to:

  • Wisaal Labs LLC
  • Sharjah Media City (Shams)
  • Sharjah, United Arab Emirates

For general support, email salam@mywisaal.com. Our website is https://mywisaal.com.

19. How can you review, update or delete the data we collect from you?

In short: you can update your details in the app, delete your account in Settings, or email us for anything else.

You can review and update your profile and prayer settings in the app. To delete your account and synced data, go to Settings and tap "Request account deletion". To clear data stored on your device, use "Delete all local data" in Settings or uninstall the app. To request a copy of your data, details of how we have processed it, or anything else described in this policy, email privacy@mywisaal.com. Some of these rights may be limited by applicable law.