Qandil is a prayer and Qur’an companion. This policy describes exactly what the app stores, what it sends, and what it deliberately does not.
It applies only to Qandil. Other PixelHurts products are covered by the studio privacy policy, which describes different apps with different behaviour.
1. Your precise location never leaves your device
Prayer times depend on your coordinates. Qandil calculates them entirely on your device. Your latitude and longitude are never sent to our servers, never written to our logs, and never sent to any analytics provider.
What our server does hold is your time zone (for example Asia/Baku) and, if you set one, a city-level label. Neither can locate you more precisely than a city.
This is enforced in our code, not only in this document: the app requests only coarse location permission, our API has no endpoint that accepts coordinates, our database has no column that could store them, and automated tests fail the build if a coordinate appears in any request, log, or analytics payload.
2. What we store
You can use Qandil without giving us a name, an email address, or a phone number. By default your account is anonymous: your device generates a random secret, and we store only a one-way hash of it.
Attached to that account we keep:
- time zone, language, and prayer calculation method
- your school of thought (sect and madhhab), only if you chose to tell us — “Not now” is a supported answer and we store nothing
- which prayers you marked as prayed, and on which date
- your dhikr counts per day
- an optional city label
If you sign in with Apple or Google, we additionally store the identifier that provider gives us, and an email address if the provider supplies one. We never receive your password.
3. Your questions are not stored
When you use Ask, your question is sent to our server and then to our AI provider so an answer can be produced. We keep a record that a question was asked — the date, whether it was answered or declined, and why — so we can enforce a fair daily limit.
We do not store the text of your question. There is no column for it in our database. Answers are not stored either, and nothing you ask is ever shown to another user.
4. Analytics
We use PostHog (EU region) to understand which screens are used. Events are sent through our own servers rather than directly, so PostHog does not receive your IP address, and its location lookup is switched off.
We do not record your screen, and we do not track which verses you read or what you ask.
5. Who else processes your data
- DeepSeek — receives the text of your Ask question in order to generate an answer
- PostHog (EU) — anonymous usage events, without your IP
- Sentry — crash and error reports, with request bodies, cookies, query strings, and IP addresses removed before sending
- Apple / Google — only if you choose to sign in with them
- DigitalOcean — hosting for our servers and database
6. Notifications
Prayer reminders are scheduled on your device. We deliberately do not use push notifications for them, because a push server would need to know your prayer times, and your prayer times reveal your location.
7. Deleting your data
Settings → Delete account removes your account and everything attached to it — prayer logs, dhikr counts, sign-in identities, and question records. The deletion is immediate and permanent; we keep no copy.
8. Children
Qandil is not directed at children under 13, and we do not knowingly collect data from them.
9. Changes
If this policy changes in a way that affects what we collect, we will update the date at the top of this page before the change takes effect in the app.
10. Contact
Questions about this policy: pixelhurts.com/support.