What this app stores

Your email address, and your password — the password only as a one-way scramble that cannot be turned back into the password, so nobody, including us, can read it.

And everything you put in: your areas, habits and their parts; each day's answers, comments and notes; your zikr sets and lines with their texts and counts; how long sittings took; your reminders; your settings.

If you write down people to make duaa for, the app stores the names you choose to write and any note you put beside them. Those names are yours: they are never shown to anyone else, never sent anywhere, and they leave this app only in the copy you download yourself. Deleting your account erases them along with everything else.

Nothing else. There are no analytics, no trackers and no advertising, and nothing is ever shared with or sold to anyone.

The app runs on Vercel. The database is Postgres, hosted by Neon.

The only emails the app sends are the sign-up confirmation and password-reset links, through Resend (EU region) — Resend keeps its own log of what it sent and to whom for a time, as sending services do.

One cookie, and it is the sign-in. Nothing follows you around the web. The doors — login, sign-up, reset — count attempts for at most a day, to slow down guessing, and the servers keep the ordinary short-lived technical logs every website's do.

The database is copied automatically every day, and the copies are encrypted — locked so that only the key holder can read them — and age out after about 30 days. Something you delete is gone from the app at once, and leaves the backup copies as they age out.

Both live in Manage > General > Account when you are signed in:

Download my data — one file with everything your account holds, in plain text you can read and keep.

Delete my account — erases everything you own, everywhere, for good. Deleting the account is not archiving: it is you leaving, and leaving means gone.