Privacy Policy

Nefes app — Last updated: April 24, 2026

Nefes is a mobile application for Islamic lifestyle and worship tracking. This Privacy Policy explains how your personal data is collected, used, and protected when you use Nefes. It is compliant with GDPR and Turkey's KVKK (Personal Data Protection Law).

1. Data Controller

Nefes is published by independent developer Yusuf Hançer. Contact for data protection matters:

Email: nefesapp.iletisim@gmail.com

2. Data We Collect

2.1 Location

Your device location is used to calculate accurate prayer times and Qibla direction. Location data stays on your device and is not stored on our servers. Only latitude/longitude is sent to the prayer time API (Aladhan).

2.2 User Information

Username and family role (Father/Mother/Son/Daughter, etc.) are stored in Firebase. We do not require email or password — family groups are joined using a 6-digit code.

2.3 Family Group Chat Messages

Messages sent in family mode are stored in Firebase Realtime Database (europe-west1, Belgium). Only members of your family group can see your messages. Profanity and political content filters are applied.

2.4 AI Conversation History

Conversations with the Worship Coach and other AI assistants are stored in Firebase to provide personalized responses. These conversations are private to you — no one else can access them. You may delete your conversation history at any time.

2.5 Worship Statistics

Prayers performed, missed prayer count, surahs read, streak data are stored on your device (AsyncStorage) and, if you use family mode, in Firebase.

2.6 Device Notification Token

Expo and Apple Push Notification service are used for prayer time, verse, and family message notifications. Your device token is stored for this purpose.

3. How We Use Your Data

To calculate prayer times and Qibla direction
To provide worship tracking (streaks, badges, statistics)
To enable family group features
To generate personalized responses from AI assistants
To send notifications
To ensure the security of the app

4. Third-Party Services

Nefes works with the following services:

Firebase (Google Ireland Limited) — Database and authentication. Privacy Policy
Anthropic (Claude AI) — AI assistants. Your messages are sent to Anthropic to generate AI responses and are not used for model training. Privacy Policy
Aladhan API — Prayer time calculation (latitude/longitude).
Al-Quran Cloud — Quran verses and audio files.
OpenStreetMap (Nominatim) — Location verification.
Railway (EU West / Amsterdam) — Server infrastructure.
Expo Push Service — Notification delivery.

5. Data Security

Your data is transmitted over encrypted connections (HTTPS/TLS). Our Firebase and Railway servers are located within the European Union. Anthropic API keys are stored server-side; no API keys exist in the client app.

6. Data Retention

AI conversation history: Kept until you request deletion
Family chat messages: Kept as long as the family group is active
Worship statistics: Kept on device until the app is uninstalled
Server logs: Deleted after 30 days

7. Your Rights (KVKK & GDPR)

You have the following rights:

Know whether your personal data is being processed
Access your data and request a copy
Request correction of your data
Request deletion of your data ("right to be forgotten")
Object to data processing
Delete your account and all associated data

To exercise these rights, please email nefesapp.iletisim@gmail.com. We respond within 30 days.

8. Children's Privacy

Nefes is intended for users aged 13 and older. We do not knowingly collect data from children under 13. If you believe your child is using the app, please contact us.

9. Advertising and Tracking

Nefes contains no advertisements. We do not use third-party tracking or behavioral analytics services.

10. Changes to This Policy

This privacy policy may be updated. Significant changes will be announced in-app or on this page. The last updated date is shown at the top of the page.

11. Contact

For any questions, requests, or complaints:

Email: nefesapp.iletisim@gmail.com