Privacy Policy

1 In short

• No account: You do not need to register or sign in to use the App.
• Location: The Qibla direction is calculated on your device. For features such as prayer times, nearby mosques and weather, your location or city is sent only to the relevant service (see section 3).
• Ads: The App does not show ads on its own. Only the support page has an optional support ad that you can choose to watch (not in the EU, EEA, UK or Switzerland). The advertising ID (IDFA/GAID) is not collected.
• Statistics: Usage statistics and crash reports are collected to improve the App; they are not collected in the EU, EEA, UK or Switzerland (see section 10). This data does not include your name, email or advertising ID.

2 Data we use

• Location (precise or approximate): Used for the Qibla direction, prayer times, the name of your city, nearby mosques, weather and the Qibla map. If you do not grant location permission, you can choose your city from a list.
• Notification registration: Prayer time notifications are scheduled on your device and are not sent to a server. For remotely sent notifications, the Firebase Cloud Messaging token, a random device ID generated by the App, the platform (iOS/Android), the app version, the app language and the time of last use are stored on our server.
• Usage statistics: Firebase Analytics collects which screens are opened, which features are used, some settings (such as theme and notification sound), permission states (location, notifications), whether you are a supporter and, on iOS, which Apple Search Ads campaign the App was downloaded from. Firebase links these records to an identifier specific to the App installation; Google may derive your approximate country and city from your IP address. This data is not linked to your name, email or advertising ID.
• Crashes and performance: Firebase Crashlytics and Performance Monitoring collect error logs, device model, operating system version and launch times. To help us understand an error, a random ID generated by the App, the app version, some settings (theme, notification settings) and the name of your city are added to the crash report.
• Counters: To show how many people are using the App at the moment, a regular signal with a random ID generated by the App is sent to our server. When you join the community dhikr, only the dhikr count is sent.
• Photos: Only permission to add photos is requested, so that you can save the Quote of the Day card. Your photos are not read.
• Data on your device: Your settings, prayer tracking, personal dhikr records and Quran progress are stored on your device; apart from the items listed above, nothing is sent to a server.

3 Which services receive your location

The Qibla direction is calculated entirely on your device. For the following features, only the information needed is sent to the relevant service, encrypted with HTTPS:

• Prayer times (Türkiye and cities abroad with a Diyanet timetable): vakit.kiblem.com (Kıblem server). No coordinates are sent; only the province/district or city number is sent. The times come from the timetables published by the Presidency of Religious Affairs of Türkiye (Diyanet).
• Prayer times (other places): Aladhan API. Your location coordinates are sent. aladhan.com/privacy
• Nearby mosques: Geoapify and OpenStreetMap (Overpass, Nominatim). Your location coordinates are sent.
• Weather: Open-Meteo, with wttr.in as a fallback. Your location coordinates are sent.
• Qibla on the map: OpenFreeMap. Your coordinates are not sent; map tiles for the area shown on screen are requested.

4 Other third-party services

• Google Firebase: Analytics, Crashlytics, Performance Monitoring, Remote Config and Cloud Messaging. firebase.google.com/support/privacy
• Supabase: Notification registration, counters and app content (duas, quotes, religious days). supabase.com/privacy
• Quran content: Quran.com, QuranicAudio and Qurango (text, translations and audio files).
• YouTube: The live Kaaba stream is shown in YouTube's embedded player and is subject to YouTube's own privacy policy.
• Truncgil Finans: Current gold price for the zakat calculation.
• Apple App Store: Checking for new versions.
• Google AdMob: Only if you choose to watch the optional support ad (see section 5). policies.google.com/privacy

5 Advertising and tracking

The App does not show ads on its own. On the support page, you can choose to support us by watching a short ad if you wish (this option is not available in the EU, EEA, UK or Switzerland, see section 10). This ad is requested as non-personalized through Google AdMob. When you watch the ad, Google processes data such as your IP address, device information and your interaction with the ad in order to serve and measure it.

The advertising ID (IDFA/GAID) is not collected. On Android, the advertising ID permission has been removed from the App; on iOS, App Tracking Transparency (ATT) permission is not requested. On iOS, Apple's AdServices is used to measure the results of our Apple Search Ads campaigns. This service does not use the advertising ID; it only reports which campaign the App was downloaded from.

Your data is not sold and is not shared for third-party ad targeting.

6 Voluntary in-app support

Kıblem is free; no feature requires a subscription or payment. Optional support options are offered for those who want to support the App. Payments are processed by the Apple App Store or Google Play; your card and payment details are not seen, processed or stored by Kıblem.

7 Children's privacy

The App is suitable for all ages (4+). We do not knowingly collect personal data from children under 13.

8 Retention and security

All network requests are encrypted with HTTPS. The notification registration is deleted from our server when you turn off notifications. Data collected by Firebase is subject to Google's retention periods. The data on your device is deleted when you uninstall the App.

9 Your rights

You can turn off location and notification permissions at any time in your device's Settings. Under Article 11 of the Turkish Personal Data Protection Law No. 6698 (KVKK), you have the right to learn whether your personal data is processed; to request information about the processing if your data has been processed; to learn the purpose of the processing and whether the data is used in accordance with that purpose; to know the third parties in Türkiye or abroad to whom the data is transferred; to request the rectification of incomplete or inaccurate data; to request its erasure or destruction under the conditions set out in Article 7 of the Law; to request that these actions be notified to the third parties to whom the data was transferred; to object to a result against you arising from analysis exclusively by automated systems; and to claim compensation if you suffer damage due to unlawful processing. You can send your requests to [email protected].

10 EU, EEA, UK and Switzerland

In the European Union, the European Economic Area, the United Kingdom and Switzerland ("this region"), the App does not do any of the following: usage statistics (Firebase Analytics), crash and performance reports (Firebase Crashlytics, Performance Monitoring), signals to the "reading now" counter, Apple Search Ads campaign measurement and the support ad (Google AdMob). Whether this applies to you is determined on your device: it applies if your time zone or your phone's region setting points to one of these countries; this information is not sent.

Data processed in this region and the legal bases (GDPR Art. 6): your location or city is sent to the services listed in section 3 only to perform the feature you request (prayer times, nearby mosques, weather) (Art. 6(1)(b)); the notification registration (the data listed in section 2) is stored only if you turn on notifications, in order to send remote notifications, and is deleted when you turn notifications off (Art. 6(1)(b)). The remote settings service (Firebase Remote Config) is not used in this region either; the App runs with its built-in settings.

The notification registration and counters are stored on Supabase servers in Germany (Frankfurt). With Google Firebase services, data may be transferred to the USA; Google participates in the EU-U.S. Data Privacy Framework.

Under GDPR Art. 15-21, subject to the conditions set out in those articles, you have the right to access your data, to request its rectification, erasure or restriction of processing, the right to data portability and the right to object. You can send your requests to [email protected]. You can lodge a complaint with the data protection supervisory authority in your country (in the UK, the Information Commissioner's Office).

For the United Kingdom, the corresponding provisions of the UK GDPR apply, and for Switzerland those of the Federal Act on Data Protection (FADP). The controller is established outside the European Union, in Türkiye; you can send requests from this region directly to [email protected].

11 Website

kiblem.com does not use analytics or advertising cookies and does not use Google Analytics. Total visits are measured with Cloudflare Web Analytics, which does not use cookies. The website contains no ads or ad-tracking tools.

12 Changes

This privacy policy may be updated from time to time. Changes are published on this page together with the date of the update.

13 Contact

Data controller: Burak Fatsa

Address: Karadolap Mah. Neşeli Sk. No: 9 İç Kapı No: 7, 34065 Eyüpsultan/İstanbul, Türkiye

You can contact us with questions about our privacy policy and with requests under the KVKK:

Email: [email protected]