Privacy

Version 2026-10-05 · Questions: support@muslimgrow.com

MuslimGrow shapes your path from what you practise: which practices you finish, love, keep or pass by, and at what part of the prayer day. What you practise is religious information, which the law treats as sensitive, so the app asks for your agreement once, on its first screen, before anything about you leaves your phone.

Before you tap Begin

The app downloads its content (the practices and their sources), checks for app updates, and can open this page. None of these requests carries anything that identifies you or your phone.

When you tap Begin

The first screen says what is kept and why, links to this page, and has one button. Tapping Begin is your agreement: the app makes an account for you with no name and no email (an id and nothing else), and from then on records what you do in the app under it, never your name, email, contacts, location or time zone. We use it to choose what your path shows next, and to make MuslimGrow better for everyone: which practices people finish, come back to, or skip. If you choose to say your age group or whether you are a man or a woman (each is its own card, and you can say "Rather not say"), it goes with the requests for your path so it can learn what helps people like you; it is never shown to anyone and you can change or take it back in Settings. Crash reports are sent too, without anything that identifies you. You can delete everything at any time in Garden → Settings → Data.

Prayer times

Until you choose your city, the app guesses it so the prayer times work from the start: first from your phone's time zone, on the phone; then, after Begin, by asking our server where your internet connection comes from. Cloudflare places the connection's address in a city, and our server sends that city back and keeps nothing: not the address, not the place, and it is never joined to your account. The app takes it only when it is in your phone's time zone. Your city, guessed or chosen, stays on your phone. The Qibla is worked out on the phone from it; if you use the compass, the phone asks for its location so it can give the compass a true heading, and nothing of that leaves the phone.

Seek

Seek searches the practices on your phone first. After Begin, it also searches the whole library on our server, with nothing that identifies you. To find what a search means as well as the words it uses, our server has Cloudflare's AI (Workers AI) turn the words into numbers that stand for their meaning; those numbers are kept 30 days under a scrambled form of the words, never with who asked, so the same search is answered faster. A hadith you open from Seek is fetched the same way.

Listening to the Qurʾān

When you tap Listen, the app downloads that verse's recitation and its letter timings from our server and keeps them on your phone. Those requests carry nothing that identifies you, and nothing about your listening is recorded.

Only when you tap to send it

Send feedback can take what you say instead of what you type. The first time, it asks whether a recording of what you say may go to Google to be written out; you can take that back in Settings. If you agree, the recording goes from our server to Google's Gemini, which writes it out, and only the words come back to your phone, for you to read and change; they leave again only if you tap Send. We never store the recording and it carries nothing that identifies you; Google processes it only to write it out for us and, under its terms for paid use of Gemini, doesn't use it to improve its products (it may keep it for a short time only to detect abuse). If you don't agree, or you're offline, your phone turns your voice into text itself, on the phone where it can, and only the text goes, when you tap Send.

Signing in with Apple or Google is optional. It joins the account Begin made to your Apple or Google account, so your path, kept lines, garden, daily remembrance and settings follow you to another phone; your city never leaves your phone. If you sign in with Apple, we keep the token Apple gives for that sign-in, encrypted, for one use only: when you delete your data, we tell Apple to end the sign-in.

How long, and deleting it

Raw records are kept for 12 months, then deleted, and only totals that describe no one remain. A record of which path we served you keeps the part of the prayer day it was, never the hour on your phone. Delete everything in the app (Garden → Settings → Data → Delete my data) or on the deletion page; it is gone from our database at once, from our archive within 30 days, from backups within 90. Feedback you sent stays, without anything that links it to you, and its screenshot is deleted.

Who processes it

Our servers and the archive of records run on Cloudflare, whose AI (Workers AI) also turns Seek's searches into their meaning; the database is Neon (United States); crash reports go to Sentry (United States); spoken feedback, only if you agree to it, is written out by Google's Gemini (United States). None of them may use your data for their own purposes. There are no ads and no data is sold.

No AI model sees anything about you. Two see words you chose to send: what you type into Seek, which Cloudflare's AI turns into its meaning without knowing who asked, and spoken feedback you agreed to send, written out by Gemini as above. The app makes no other call to any AI service.