Privacy
This policy covers Musfira Labs, this website, and every app we make, including Musfira for iOS and Android. It describes what our software actually does, not what we would like it to do.
The short version
We have no accounts, no servers of our own, no analytics, no advertising, and no tracking. What you record in our apps is written to your device and stays there. We never receive it, and we never sell or share it.
We do not claim that nothing leaves your device. Two things do — crash diagnostics, and anything you deliberately switch on — and both are named below.
Who we are
Musfira Labs is the data controller for the processing described here. Write to hello@musfiralabs.com about anything in this policy, including a request to exercise the rights set out below.
What we hold about you
In the ordinary course of using our apps, nothing. We hold no account for you, because there are no accounts. Your records live in the app’s storage on your device and we have no route to them. Three narrow exceptions:
- Crash and diagnostic reports, described next.
- Anything you send us. If you email us, we have your address and whatever you wrote, for as long as we keep the correspondence.
- Web-server request data for this site, described under This website.
Crash and diagnostic reports
Our apps send diagnostic information to Sentry (Functional Software, Inc.), an error-monitoring service, processed on servers in the United States. In Musfira this is the only thing the app itself transmits, and it cannot currently be turned off inside the app.
A report says where in the code something failed — a crash, a freeze, or the operating system shutting the app down for using too much memory — along with your device model, operating system version, the app version, and a short trail of the app’s recent internal steps. The app also reports that a session started and ended, so we can measure how often it runs without crashing. That is reliability data, not analytics of what you did.
Each report carries a random identifier created on your device at install, so reports from one installation can be grouped. It is not your name, email, phone number, or Apple or Google account, and it is not your device’s advertising or hardware ID. It resets if you reinstall.
Reports do not contain your records. The apps are configured so they cannot include screenshots, a capture of what was on screen, or the data you track. They also carry no location. The app removes your IP address before sending, Sentry is configured not to store the address your device connects from, and the approximate location — country, region, or city — that would otherwise be inferred from it is discarded rather than kept. If you would rather send no diagnostics at all, the only way to stop it is to remove the app. Test builds from TestFlight and Google Play internal testing report to the same place as public releases.
What our apps keep on your device
This stays in the app’s own storage and is never transmitted to us. In Musfira it is the profile you set during onboarding — gender, date of birth, the age of religious maturity, your prayer and fasting start dates, and for female users a menstruation-days-per-month figure — together with your prayer and fast counts, your activity history, your settings, and a counter of how many tips you have left.
Some of that is sensitive: it concerns religious practice, and for female users, reproductive health. We treat it accordingly. It does not reach us, and it is not in the diagnostic reports described above.
Things you switch on
Some features move your data to a service you already control. It goes to your account, not to us, and we cannot see it:
- Backups.On iOS, Musfira offers to keep a backup in your own iCloud; nothing is written unless you agree. On Android, the app takes part in Android’s standard device backup, which is governed by your system settings and is on by default— it copies the app’s stored data to your Google account. There is no in-app switch for the Android one; turn it off in your Android settings if you would rather it did not happen.
- Calendar sync. Off until you turn it on. Musfira then adds a small number of all-day events for your projected completion dates. Be aware the event titles describe religious practice: on iOS they go to your default calendar, which for most people is an iCloud, Google, or Exchange account, so that provider receives them. On Android the calendar is local to the device. The app reads your calendars only to find the events it created.
Tips. Payment is handled entirely by the App Store or Google Play. We never receive your payment details, and the app keeps no receipts or purchase history. Tips unlock nothing.
The Musfira support page explains how to turn each of these off and how to erase what they left behind.
This website
musfiralabs.com is a set of static pages. It sets no cookies, runs no analytics, embeds no third-party scripts or fonts, and has no forms — the contact links open your own email application. There is nothing here to consent to, which is why you are not asked. Our host receives standard request information — IP address, timestamp, path, user agent — in the ordinary course of serving the page and keeping it available. We build no profiles from it.
Why we are allowed to process it
Where UK or EU data protection law applies, we rely on two legal bases and no others. Consent, for anything you switch on — you can withdraw it by turning the feature off, and withdrawing it does not affect what was lawful beforehand. And legitimate interests, for crash diagnostics and for keeping this site up: our interest is in software that works, weighed against your privacy, which is why diagnostics carry a throwaway identifier and none of your records.
Data that would count as special category — religious practice, and in Musfira’s case reproductive health — is not transmitted to us and we do not process it. Where it moves at all, it moves on your explicit instruction to a service you control.
Where your data goes
Sentry processes diagnostics in the United States. That transfer is covered by the processor’s data processing addendum and the Standard Contractual Clauses approved by the European Commission and the UK Information Commissioner. Sentry is our only processor. We do not sell personal information, do not share it for cross-context behavioural advertising, and disclose it to no one except where the law compels us.
How long we keep it
Diagnostic reports are deleted automatically after no more than 90 days. Email is kept as long as it is useful to the conversation, and deleted on request. Data on your device is kept until you delete it.
Your rights
Under UK and EU law you have the right to access what we hold, to have it corrected or erased, to restrict or object to how we use it, to receive it in a portable form, and to withdraw consent. You may complain to a supervisory authority — in the UK, the Information Commissioner’s Office — though we would rather you gave us the chance to put it right first.
If you are in California you have the right to know what is collected, to delete it, to correct it, and to opt out of sale or sharing. There is nothing to opt out of: we do not sell or share personal information. Exercising any of these rights costs nothing and we will not treat you differently for it.
Because we hold no account for you, the honest answer to most requests is short — there is rarely anything on our side beyond diagnostics and email. Write to hello@musfiralabs.com and we will tell you exactly what exists and deal with it within one month.
Children
Our apps are general-audience software and are not directed at children. We do not knowingly collect personal information from children, and since we hold no account data, there is none for us to collect. Musfira has no age verification, and because it stores a date of birth on the device it may hold data relating to a child — that data stays on the device on the same terms as everyone else’s. If you are a parent or guardian and want data removed, the support page explains how to erase it.
Changes
If this policy changes materially, we will update the date at the top and describe the change here. We will not quietly broaden what we collect.
Contact
Questions about this policy, or a request to delete data, go to hello@musfiralabs.com.