Privacy and personal data

1. Controller and scope

The controller for the Secda app and the secda.app website is Emre Bekin, an individual developer. This notice explains which personal data is processed, for what purpose and with which service providers. You can send questions and requests to help@secda.app.

2. Account and sign-in

When you create an account, your email address, the display name you enter, your account ID and session data are processed through Supabase. You can sign in with email and password, with Apple or with Google. When you use Apple or Google, only the details you agree to share on that provider’s consent screen are used; Sign in with Apple lets you hide your email address. The purpose is registration, sign-in, account security and password reset.

You can delete your account from the Account screen in the app. Deletion removes your authentication account in Supabase and the account records linked to it. Deleting your account does not cancel an App Store subscription; you need to cancel it separately.

3. Purchases and subscriptions

Premium and support purchases are made through the App Store. Your payment details are processed by Apple; Secda never sees your card number. To verify and restore your purchases, RevenueCat processes your app user ID, purchase and transaction history, product and subscription status.

4. Data that stays on your device

Your prayer log, dhikr counts, favourites, last reading position, lesson progress and preferences are kept in local storage on your device and are not sent to Secda servers. When you use widgets, the selected city, prayer times and related progress are written to a shared app area on your device.

Worship and school-of-thought preferences may reveal religious beliefs, which is why they stay on your device. Check your own device settings for backups, shared device use and the visibility of lock screen widgets.

5. Location

If you allow location access, your location is used on your device to find your city, calculate prayer times and show the qibla direction. Your iPhone’s own geocoding service is used to look up the city name. Your precise location is never sent to or stored on Secda servers. You can turn off access in your device settings at any time and choose your city manually.

For finding nearby mosques and for the weather in the sky theme, your location is rounded to two decimal places (about 1 km) and only this rounded value is sent to OpenStreetMap Overpass and Open-Meteo. These services can see your IP address when answering the request.

6. Notifications and content requests

Prayer time reminders are local notifications created on your device; their content and timing are not sent to any server. You can turn notifications off in your device settings at any time.

For prayer times, the ID of the place you select is sent to Ezan Vakti API; for Quran text, translations and audio, content requests go to AlQuran Cloud, Quran.com and the related audio servers. These services can see your IP address and the requested content.

7. Ads and tracking

The free version shows ads through Google AdMob; Premium is ad-free. Secda only requests non-personalised ads. Even so, the ad service may process data such as your IP address, device and app information and ad interactions to serve ads, prevent abuse and measure performance.

Using your advertising identifier (IDFA) to track you across other companies’ apps and websites depends on iOS App Tracking Transparency (ATT) permission. You don’t have to grant it, and declining does not affect how the app works. You can change your choice at any time under Settings → Privacy & Security → Tracking.

8. Photos and sharing

When you share a verse or quote with a photo, only the photo you pick or take with the camera is used on your device to create the design; it is not uploaded to Secda servers. When you send content to another app, that app’s privacy policy applies.

9. Legal bases and international transfers

Data for your account, sign-in and purchase verification is processed to enter into and perform our agreement; for security and abuse prevention on the basis of legitimate interest; and for records that must be kept by law on the basis of legal obligation. Optional permissions such as location, notifications, camera, photos and tracking are requested on your device’s permission screen.

Supabase, RevenueCat, Apple, Google and the content providers may process data on servers outside Türkiye. These transfers are limited to the data needed to provide the relevant service.

10. Retention and deletion

Your account data is kept while your account is open and removed when you delete it. Records on your device stay there until you delete the app or clear them in the app; you manage your own device backups. Purchase records may be kept by Apple and RevenueCat under their own policies and legal obligations.

Reasonable technical and organisational measures are taken to protect data against unauthorised access, but no internet or storage system can guarantee absolute security.

11. Your rights and requests

Depending on applicable law, you may request information and access, correct inaccurate data, seek deletion or restriction when conditions are met, learn about recipients and object to relevant processing. You may withdraw consent for consent-based processing without invalidating earlier lawful processing.

You can send requests to help@secda.app. Requests are answered within 30 days at the latest, and only the information needed to verify your identity is requested. Your right to complain to the Turkish Personal Data Protection Board is reserved.

12. Website analytics

On the secda.app website, usage data such as page views, approximate location, device and browser details is measured with Google Analytics 4 only if you consent in the cookie banner. The legal basis is your explicit consent, and advertising permissions are off. You can withdraw consent at any time from the “Cookie preferences” link at the bottom of the page. Details are on the Cookies and local storage page.

13. Changes

If this notice changes, the current version is published on this page; significant changes are announced in the app or through another appropriate channel.