1. Who we are
Hadithy is the operator and data controller for the Hadithy mobile application and this website. Questions and privacy requests can be sent to support@hadithy.app.
2. Information we process
- Account and profile: email address, authentication provider, user ID, username, display name, optional biography, and optional avatar.
- Reading and personalization: bookmarks, likes, collections, reading progress, reading events, achievements, preferences, reminders, notes, and synchronization state.
- Device and delivery: device identifier, platform, app version, push token, download manifests, and information needed to deliver local notifications and offline content.
- Prayer features: location is requested only when you choose location-based prayer or Qibla features. A manual location option is available. Location used for calculations is designed to remain on your device unless a feature clearly tells you otherwise.
- Purchases: product, entitlement, store, renewal and expiry status. Payment-card details are handled by Apple or Google and are not provided to Hadithy.
- Optional analytics: if you consent, product events and technical diagnostics may be sent to PostHog. Session replay is separately controlled and, when enabled, sensitive fields are masked.
- Website data: standard request and security logs may be processed to operate and protect this website. The marketing site does not use advertising trackers.
3. Why we use information
We process information to provide accounts, synchronize your library, personalize reading, deliver reminders and downloads, restore Hadithy+ entitlements, protect the service, fix technical problems, and comply with legal obligations. Where required, optional analytics relies on your consent.
4. Service providers
Hadithy uses Supabase for authentication, database and server functions; RevenueCat for subscription entitlement management; Apple and Google for authentication, distribution and purchases; and PostHog for optional consent-based analytics. Service providers process information only as needed to support these functions and under their own security and privacy commitments.
5. Storage and retention
Cloud account data is retained while your account is active and removed when you permanently delete the account, subject to short-lived backups, security records, legal obligations, and records that must be retained to resolve payment or abuse disputes. Local downloads and preferences remain on a device until removed in the app, the app is uninstalled, or the device storage is cleared. Anonymous or aggregated information that no longer identifies you may be retained.
6. Your choices and rights
You can control analytics, replay, notifications, location access, downloads and personalization in the app or device settings. Depending on where you live, you may request access, correction, export, restriction, objection or deletion. You can permanently delete your account from Settings inside the Hadithy app. You may withdraw consent without affecting earlier lawful processing.
7. Children
Hadithy is not intended to collect personal data from a child who cannot legally consent in their country without a parent or guardian. A parent or guardian who believes a child supplied personal data should contact us so it can be reviewed and removed.
8. Security and international processing
We use access controls, encrypted connections, row-level authorization and limited service credentials. No system can be guaranteed completely secure. Providers may process data in countries other than your own, using lawful transfer mechanisms where required.
9. Changes
We may update this policy as Hadithy changes. Material updates will be reflected by a new effective date and, where appropriate, an in-app notice.