What this app stores
Bedaya is a personal Islamic practice tracker. This page says plainly what it keeps, where that lives, and what you can do about it. True as of 20 August 2026.
What is stored
Your email address, and your password — the password only as a one-way scramble that cannot be turned back into the password, so nobody, including us, can read it.
And everything you put in: your areas, habits and their parts; each day's answers, comments and notes; your zikr sets and lines with their texts and counts; your sequences; how long sittings took; your reminders; your settings.
Nothing else. There are no analytics, no trackers and no advertising, and nothing is ever shared with or sold to anyone.
Where it lives
The app runs on Vercel. The database is Postgres, hosted by Neon.
The only emails the app sends are the sign-up confirmation and password-reset links, through Resend (EU region) — Resend keeps its own log of what it sent and to whom for a time, as sending services do.
One cookie, and it is the sign-in. Nothing follows you around the web. The doors — login, sign-up, reset — count attempts for at most a day, to slow down guessing, and the servers keep the ordinary short-lived technical logs every website's do.
Backups
The database is copied automatically every day, and the copies are encrypted — locked so that only the key holder can read them — and age out after about 30 days. Something you delete is gone from the app at once, and leaves the backup copies as they age out.
Your two buttons
Both live in Manage > General > Account when you are signed in:
Download my data — one file with everything your account holds, in plain text you can read and keep.
Delete my account — erases everything you own, everywhere, for good. Deleting the account is not archiving: it is you leaving, and leaving means gone.