Wasariu – وسارعوا

Effective Date: February 10, 2026

            In short: Wasariu is designed with privacy at its core. We use anonymous authentication, store your habit data locally on your device with encryption, and never collect your real name, email, or phone number.
        

1. Overview

Wasariu ("وسارعوا") is an anonymous Islamic habit tracking app that helps you build consistent prayer, dhikr, Quran, and charity habits — individually and within circles of accountability. This policy explains what data we collect, how we use it, and how we protect your privacy.

2. Data We Collect

Stored Locally on Your Device Only

The following data never leaves your device and is encrypted using AES encryption:

Habit entries (prayers, dhikr, Quran pages, charity)
Goals, streaks, and daily summaries
City, country, and GPS coordinates (used only for prayer time calculation)
App preferences and settings

Stored on Our Servers (Firebase)

Data	Purpose
Anonymous user ID	Identify your account without any personal info
Username (chosen by you)	Display name in circles
Avatar selection	Visual profile in circles
Circle membership & contributions	Circle accountability features
Push notification token	Deliver circle nudges and reminders
Hashed contributions	Circle stats with privacy-preserving hashed IDs

3. What We Do NOT Collect

We do not collect any of the following:

Real name, email address, or phone number
Passwords or social media accounts
Precise location on our servers (stays on your device)
Browsing history or contacts
Financial or payment information
Photos, videos, or files

4. Anonymous Authentication

Wasariu uses Firebase Anonymous Authentication. This means:

You never need to sign up with an email or password
A random anonymous ID is generated for your device
There is no way to link your account to your real identity

5. Location Data

If you grant location permission, we use your approximate location solely to calculate accurate prayer times for your area. Specifically:

We request low-accuracy (coarse) location only
Your coordinates are stored locally on your device only
Coordinates are sent to the Aladhan Prayer Times API to fetch prayer times
You can alternatively enter your city and country manually without using GPS
Location is never uploaded to our servers

6. Push Notifications

Wasariu may send you notifications for:

Prayer reminders – scheduled locally on your device
Daily review (Muhasaba) – scheduled locally after Isha prayer
Circle nudges – sent via Firebase Cloud Messaging when a circle member sends you an encouragement

Your push notification token is stored securely and is only accessible by you and the system. You can disable notifications at any time in your device settings.

7. Privacy-Preserving Circle Contributions

When you contribute to a circle (e.g., logging a prayer), your user ID is hashed using SHA-256 with a daily-rotating salt. This means:

Your contributions cannot be traced back to your identity
Cross-day correlation of your activity is not possible
Even if data were accessed, individual habits cannot be linked to a specific user

8. Third-Party Services

Wasariu uses the following third-party services:

Firebase Authentication Cloud Firestore Firebase Cloud Messaging Firebase App Check Firebase Analytics

These are provided by Google. Firebase Analytics may collect basic app usage data (app opens, device type) automatically. No custom tracking events are implemented. See Firebase Privacy Policy.

Aladhan API

Used to calculate prayer times based on your location or city. See Aladhan Privacy Policy.

9. Data Security

Local habit data is encrypted using AES encryption
Encryption keys are stored in the iOS Keychain / Android Keystore
Server communication uses TLS/SSL encryption
Firebase App Check protects against API abuse
Firestore security rules restrict data access to authorized users only

10. Data Deletion

You can delete your account and all associated data at any time from the app's Settings screen. When you delete your account:

Your user profile is permanently deleted
Daily summaries and nudges are removed
Push notification tokens are deleted
Circle memberships and join requests are removed
Your Firebase Authentication account is deleted
Previously hashed contributions remain as anonymous, unlinkable records

11. Data Export

You can export your personal data in JSON format from within the app at any time, giving you full portability of your information.

12. Children's Privacy

Wasariu does not knowingly collect data from children under 13. The app does not require any personal information to use, and anonymous authentication means no age-identifiable data is collected.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date. Continued use of the app after changes constitutes acceptance of the updated policy.

14. Contact

If you have any questions or concerns about this Privacy Policy, please contact us at:

Email: asimokby@gmail.com