Privacy Policy

Effective date: 3 October 2026

Khushu App ("we") publishes the Khushu mobile application (the "App"). This document explains what data we process, why, who we entrust it to, and how to make it disappear.

01. The principle

Khushu works entirely without an account. Installed and used as is, it entrusts us with none of your prayer times, your Quran reading or your settings: they live on your iPhone.

Creating an account is a choice, never a requirement. It adds three things: a backup of your progress, so you can recover it after a reinstall or on another device, the Circle, which lets you follow the practice of people close to you or of other believers, and lets them follow yours, and the chat inside your circles.

02. What never reaches us

Some data is never transmitted to us, even with an account. It lives on the iPhone and disappears with the App if you uninstall it.

• Your location — GPS coordinates are used to calculate prayer times, which happens entirely on the device. They are never sent to us. The name of your city is obtained from Apple's geocoding service, which therefore receives the coordinates for that sole purpose and does not pass them on to us. Manual city search relies on a database bundled inside the App, with no request at all.
• The apps you block — The selection is handled by Apple's Screen Time, which does not disclose its contents to us. We do not know which apps you block, nor which ones are installed.
• The alarm scan images — If you enable the scan to stop the Fajr alarm, the camera analyses the scene on the device, frame after frame. Each frame is deleted immediately after analysis. Nothing is stored, nothing is transmitted.
• Your prayer reminders — Notifications at prayer times are composed and scheduled on the device. Only notifications coming from other people (a member's nudge, challenges, messages) go through our servers, as described in section 03.

03. What the backup sends

Signing in uses Sign in with Apple, the only method offered. There is no password and no form. From then on, the following data is stored on our servers, tied to your account. It comes back to your iPhone if you reinstall the App and sign in again.

• Your Apple identifier and email address — Apple lets you hide your address behind its private relay. We never write to you: the address is only used to find you if you contact us about a problem with your account.
• Your first name, nickname, avatar, language and time zone — The nickname, optional, replaces your first name in public circles. Your time zone, not your location: it lets your prayer times display correctly for circle members who live elsewhere.
• Your age and gender — As entered during onboarding. Your age is visible to no one but you. Your gender is used to make Arabic texts agree correctly, to draw your character in the garden, and to reserve each public circle for a single gender. Section 05 details who sees it.
• Your prayer log — For each prayer: whether it was performed, on time or late, missed, or excused, with the date, the time it was logged and, where relevant, the lateness reasons chosen from a list.
• The state of your days — The times of your prayers over three days, with sunrise, and the status of each, so your circle sees them live.
• Your streak, your record and your rank — Calculated from your log.
• Your menstrual pause — If you turn it on, the fact that it is ongoing and its start date.
• Your Quran reading and memorisation — Verses read, verses memorised, reading position and memorisation interval, to give them back to you. If your circle has set a reading challenge, the number of verses you have read for it.
• Your circles — Their name, their invitation code, who belongs to them and, for a public circle, the gender it is reserved for.
• Nudges sent and received — Who nudged whom, for which prayer, on which day and at what time, so their number can be capped. As well as the people or circles whose nudges you have muted.
• Your garden — The items you have placed in it, their layout and the stones you have earned.
• A copy of your settings — Calculation method, reminders, manual adjustments, focus blocks and Fajr alarm settings (sleep hours, ringtone, wake-up method), to restore them after a reinstall.
• A notification token — It identifies your iPhone to Apple, which delivers notifications, along with the App's language. It lets us deliver your circle's nudges, challenges and messages, without anyone else knowing it.
• Your messages — If you use the chat, see section 06.

04. Your religious practice and your health

Your prayer log reveals your religious practice, and your menstrual pause a piece of health information. European law treats these as special categories of data, protected under Article 9 of the GDPR, and we treat them as such.

05. What your circle sees of you

There are two kinds of circles. A private circle is joined with a code you share yourself, among people close to you. A public circle appears in a list open to everyone, is joined in one tap, brings together people who do not know each other, and welcomes a single gender only.

Members of a private circle see:

• Your first name, nickname, avatar, language and time zone
• Your streak, your record and your rank
• The times and status of your prayers for the day
• Your lateness reasons, which you can hide with a switch in the settings
• Your garden, read-only, and your gender, which shapes your character
• Your progress on the circle's reading challenge

Members of a public circle see:

• Your nickname, or your first name if you have not chosen one, and your avatar
• Your streak
• The status of your prayers for the day, without their times or your lateness reasons
• Your garden, read-only, and your gender, which is also the circle's
• Your progress on the circle's reading challenge

During a menstrual pause, your circles see your prayers for the day as excused, with no reason shown. A member who sends you a prayer nudge learns your gender, so the text agrees correctly in Arabic.

No one sees your email address, your age, your history beyond the current day, your location or the apps you block. Leaving a circle immediately ends this sharing.

06. Circle chat

With a subscription, you can write in your circles, after accepting their rules. What you write there is stored on our servers, with its author, its circle, its time, the message it replies to and the reactions it receives.

• Who reads it — Circle members, under your first name in a private circle and your nickname in a public one. A message's notifications show that name, the circle's name and the beginning of the text.
• Automatic review — Before it is published, each message is reviewed by Claude, an artificial intelligence model by Anthropic. It receives the text of the message and the circle's five previous messages, with their authors' names, and nothing else: no identifier, no address, no other data. It only says whether the message follows the rules, or whether it shows distress. A message containing a link, an address or a number is refused on the device, without sending anything.
• Our moderation team — It can read a circle's messages, including those that were removed or hidden, to handle a report or a distress alert. Each such reading is logged.
• Reports and blocks — A report records who made it and for what reason. Our team sees the reasons, never who reported. A block is known only to you: it hides the person's messages and stops their notifications.
• Removing a message — A removed message disappears from the circle, but its text remains readable by our moderation team for as long as your account exists.

07. Our legal bases

• Your explicit consent — For your prayer log, your menstrual pause and everything derived from them, under Article 9.2.a of the GDPR.
• Performance of the service — For your account, your backup, circles and chat, which you request by signing in and using them.
• Our legitimate interest — For message review and moderation, which protect circle members, and for usage measurement, which lets us fix what gets in the way and improve the App.
• Your consent — For the advertising identifier, collected through the iOS tracking prompt and refusable with no consequence for the App.

08. Who processes your data

We sell nothing and share nothing for advertising purposes. The providers below act on our behalf, each within a precise scope.

Transfers outside the European Union rely on the European Commission's standard contractual clauses. Exchanges with our servers use encrypted connections, your session is stored encrypted on your device, and every record is protected by access rules that prevent one account from reading another's.

09. Usage measurement and attribution

Two tools tell us how the App is used, with or without an account. Neither reads your messages.

• PostHog — Records your actions in the App: which introduction step was reached, which screen was opened, a logged prayer with its status and your lateness reasons, the start and end of a menstrual pause, a purchase. It also keeps a usage profile drawn from the introduction and the settings: age, gender, prayer and screen habits, number of blocked apps, language, subscription. It receives the App's crashes so we can fix them. It records the App's display during the introduction and the subscription screen, and nowhere else, with input fields masked. This data is tied to your install and, if you have one, to your account. It is hosted in the European Union.
• AppsFlyer — Measures which campaign made you discover Khushu, using an install identifier that we also share with PostHog and RevenueCat. It accesses your iPhone's advertising identifier only if you accepted the iOS tracking prompt. Refusing removes no functionality.

10. What we do not do

• No advertising in the App
• No sale or rental of your data
• No tracking of your activity in other apps or on the web
• No reading of the content of your other applications
• No automated profiling producing legal effects concerning you

11. How long we keep it

Your data stays for as long as your account exists. There is no automatic erasure after a year: your journal and your streak would make no sense cut short. Your messages stay for as long as their circle and your account exist. The automatic review log, for its part, is erased after 90 days.

When you delete your account, everything is erased immediately and permanently, messages included, with no bin and no cooling-off period. A circle you created passes to its longest-standing member, and disappears if no one is left. Our moderation team's log keeps a record of its own actions, without identifying you any longer. Usage measurement data already sent to PostHog does not leave on its own: write to us to have it erased. Our other providers apply their own retention to their technical logs.

12. Deleting your account

Deletion happens inside the App, in seconds, without writing to us: open Settings by tapping your first name on the home screen, scroll all the way down, then "Account management" and "Delete my account". We tell Apple in the same move, so that Khushu stops appearing in your Apple ID.

13. Your rights

You have the right to access, rectify, erase, restrict, object and port your data, as well as the right to withdraw your consent at any time. Erasure is exercised directly in the App, as described above. For the others, write to us: we answer within thirty days.

If our answer does not satisfy you, you may lodge a complaint with the CNIL, the French data protection authority, at cnil.fr, or with the competent authority in your country of residence.

14. Children

The App is not intended for anyone under 13 and we do not knowingly collect their data. If we learn that an account belongs to a child under 13, we delete it. A parent who notices such a situation can write to us for immediate deletion.

15. Changes

This document may change along with the App. Any change is published here with a new effective date. A change that would broaden the use of your data will be presented to you inside the App, and will leave you the choice.