ZikrHabit

1. Information We Collect

We collect information to provide a better tracking experience. Depending on how you use our Service, we collect:

• Google OAuth Data: When you sign in with Google, we access your Google account email address, full name, and profile picture URL. This is managed securely through standard OAuth protocols.
• Zikr and Activity Data: If you are signed in, we store your zikr counts, timestamps of recitations, streaks, custom supplications, and customized routines in our cloud database.
• Local Data (Guest Mode): If you use the app without logging in, your zikr counts and settings are stored entirely in your browser's local storage. We do not transmit or save guest data on our servers.
• Payment Information: For Premium subscriptions, payment processing is handled securely by Razorpay. We do not see, record, or store your credit card details or bank credentials.

2. How We Use Your Information

We use the collected information solely for the following purposes:

• To authenticate your identity and synchronize your zikr counts and routines across devices.
• To calculate your personal daily streaks and display your heatmap statistics.
• To rank anonymized streak information on the global Leaderboard (if you choose to participate).
• To process your premium subscription status and unlock analytics.
• To diagnose technical errors and improve user experience based on direct feedback.

3. Data Protection and Sharing

Your trust is important to us. We adhere to the following principles regarding your data:

• No Selling/Trading: We do not sell, trade, rent, or distribute your Google account data or personal zikr records to any advertising networks, data brokers, or third-party marketers.
• Database Security: All synchronized data is stored on Supabase servers using secure database frameworks protected by Row-Level Security (RLS) policies. Only your authenticated user ID can access or write your specific stats.
• Encryption: All communication between the app client and databases/APIs is encrypted via Secure Socket Layer (SSL/TLS).

4. Third-Party Subprocessors

We work with industry-standard third-party services to manage authentication, hosting, and payments:

• Supabase: For user authentication and relational database storage.
• Razorpay: For secure billing and subscription management.
• Google LLC: For Google OAuth account validation.

5. Data Retention and Account Deletion

We retain your data for as long as your account is active. You have full control over your data:

If you wish to delete your account and permanently erase all your data from our database (including email, display name, daily focus statistics, heatmap logs, and streaks), you can do so by submitting a deletion request in your account settings or emailing our support team.

6. Changes to this Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top of the policy.

7. Contact Us

If you have questions about this Privacy Policy or how your Google user data is handled, please contact us at: privacy@zikrhabit.com.