Privacy Policy

Depending on how you use Misbah, we may collect the following information:

• Account information. Information connected to your account, such as your email address, name where available, account identifiers, and authentication information needed to connect and maintain your Misbah session.
• Reflection consent records. We record whether you have explicitly consented to Misbah storing and processing private reflections that may reveal information about your religious beliefs, together with the date and version of the consent you accepted.
• Qur'an learning and progress data. Your guided-workbook progress, completed sessions, activity answers, saved intentions or commitments, and related learning state so that you can continue where you left off.
• Private reflections. Text you choose to write and save in Misbah's reflection features, including independent reflections and reflections started from guided journeys.
• QuranReflect sharing. If you deliberately choose to share a reflection on QuranReflect, we process the reflection text and relevant Qur'an references needed to send that content to QuranReflect.
• Preferences and notifications. App preferences, reflection or reminder settings, and a device push-notification token if you enable push notifications.
• Technical and diagnostic information. Information needed to operate, secure, and diagnose the app, which may include app version, device and operating-system information, timestamps, local calendar dates used for progress features, network or request information, crash reports, and error diagnostics.
• Support communications. Information you provide when you contact us, including your email address and the contents of your support request.

Misbah is designed around Qur'an reflection. What you choose to write in a private reflection or guided activity may reveal information about your religious beliefs. Under UK data protection law, information revealing religious beliefs can be treated as "special category" personal data.

We save private reflections and guided answers so that you can return to them, continue your reflection journey, and use the reflection features you choose. Where required by applicable law, we rely on your explicit consent to process private reflection content that may reveal your religious beliefs.

We record the date and version of that consent so that we can demonstrate what you agreed to. You can withdraw your consent at any time by contacting support@misbahapp.com. Because saved reflection functionality depends on processing this content, withdrawing consent may mean that we can no longer provide some reflection storage features to you. You can also delete your Misbah account at any time.

Private reflections are not made public merely because you write or save them in Misbah. They are shared outside Misbah only when you deliberately choose a sharing feature, such as Share on QuranReflect.

To help protect your work if the app is interrupted, Misbah may keep a recovery copy of an in-progress independent reflection in app storage on your device. This copy is used to restore your draft and is separate from the copy saved to Misbah's backend.

Local reflection recovery data associated with your account is cleared as part of the app's account-deletion cleanup. Information stored on your device may also be affected if you remove the app or clear its application data using your device's operating-system controls.

Misbah keeps your reflection private unless you choose to share it. If you tap Share on QuranReflect, the reflection text and relevant Qur'an references are sent to QuranReflect, a service provided by Quran Foundation, for public posting.

Once content is sent to QuranReflect, Quran Foundation may process and retain it under its own terms and privacy practices. Deleting your Misbah account removes Misbah-hosted reflection data, but it does not automatically delete posts or other content that you previously chose to share with QuranReflect. You should use QuranReflect's own controls or contact Quran Foundation if you wish to manage content held by that service.

We receive personal information:

• directly from you when you write, save, share, or contact us;
• from Quran Foundation when you authenticate or use connected Quran Foundation services, such as account identity information made available through that connection; and
• automatically from your device and our service providers when needed to run, secure, diagnose, and improve the service.

We use personal information to:

• authenticate you and maintain your Misbah account and session;
• save and synchronise your workbook progress, answers, and reflections;
• restore in-progress reflection drafts where recovery data is available;
• provide sharing features when you deliberately choose to use them;
• send reminders or push notifications that you have enabled;
• respond to support requests and feedback;
• protect Misbah, prevent abuse, and maintain account and service security;
• identify, investigate, and fix crashes, errors, and reliability problems;
• understand how the service is performing and improve the product; and
• comply with legal obligations and enforce our Terms of Service.

Where UK or European data protection law applies, we rely on one or more legal bases depending on the processing:

• Contract or steps taken at your request: where processing is necessary to provide the Misbah account, saved progress, reflection, and other features you ask us to provide.
• Legitimate interests: where necessary to operate, secure, diagnose, and improve Misbah, provided those interests are not overridden by your rights and interests.
• Consent: where we ask you to make a choice, including notification permissions and other optional processing that requires consent.
• Legal obligation: where processing is required to comply with applicable law.

For private reflection content that may reveal religious beliefs, we rely on explicit consent as the relevant special-category processing condition where required by law.

We use service providers to operate Misbah. They may process information on our behalf or, for connected services that you choose to use, under their own privacy terms. These include:

• Supabase for backend infrastructure, database services, and server-side functions used by Misbah.
• Quran Foundation for connected authentication, Qur'an services, and QuranReflect sharing features.
• Sentry for crash reporting, error monitoring, and technical diagnostics.
• Expo and platform notification providers, including Apple or Google where applicable, when needed to deliver push notifications you enable.
• Our email provider when you contact support@misbahapp.com.

We do not sell your personal information. We do not use your personal information for third-party behavioural advertising.

If we introduce an optional feature in the future that sends personal information you provide to a third-party AI service or another new provider, we will provide appropriate notice and obtain any permission required before that information is shared.

If you enable notifications, Misbah may store a device push token and related notification preferences so that we can send the notifications you selected. You can change notification permissions through your device settings and, where available, your settings inside Misbah.

We generally keep your account information, private reflections, guided answers, and saved progress while your Misbah account remains active so that you can continue using the service and return to what you have saved.

When account deletion is successfully completed, Misbah deletes the account data and Misbah-hosted reflection and guided-session data associated with your account from its active database. Limited information may remain temporarily in backups, security records, or logs where reasonably necessary for restoration, security, fraud prevention, dispute resolution, or legal obligations.

Information that you chose to send to a separate service, such as a public QuranReflect post, is subject to that service's own retention and deletion practices.

You can initiate deletion of your Misbah account from within the app through Settings → Account → Delete Account. You can also read our account deletion instructions.

Deleting your Misbah account removes Misbah-hosted private reflection sessions, guided-session answers and progress, and other account-linked Misbah data through the account-deletion process. It does not automatically remove content you previously chose to send to separate third-party services such as QuranReflect.

If you need help with deletion or another privacy request, contact support@misbahapp.com.

Some of our service providers may process information in countries other than the country where you live. Where data protection law requires safeguards for an international transfer, we rely on appropriate safeguards offered by our providers or another lawful transfer mechanism.

Depending on where you live and the circumstances, you may have rights to ask us to access, correct, delete, restrict, or provide a copy of your personal information, or to object to certain processing.

Where we rely on consent, you may withdraw that consent at any time. Withdrawal does not affect processing that was lawful before consent was withdrawn. To withdraw reflection consent or exercise another privacy right, email support@misbahapp.com. We may need to verify your identity before completing some requests.

If you are in the United Kingdom, you also have the right to complain to the Information Commissioner's Office. We would appreciate the opportunity to address your concern first, but you do not have to contact us before contacting the regulator.

We use reasonable technical and organisational safeguards designed to protect personal information. Access to Misbah-hosted private reflection data is tied to authenticated user sessions and backend ownership checks. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

When you visit misbahapp.com, our hosting and infrastructure providers may process standard technical request information needed to deliver and secure the site. If we add non-essential analytics, advertising technologies, or cookies in the future, we will update this policy and provide any notice or consent controls required by law.

We may update this Privacy Policy as Misbah changes. When we make material changes, we will update the date at the top of this page and provide additional notice where appropriate. If a change requires new consent, we will ask for it before relying on that consent for the new processing.

Misbah is operated by Taseen Rahman, trading as Misbah. For privacy questions, requests, withdrawal of consent, or concerns, contact us at support@misbahapp.com.