Scope of this policy
SAHL+ is a personal organizer app for iOS and Android. This policy covers the app, this website, and the servers that sync your data between your devices. "We" means the operator of the service, and "you" means the person using it.
Four things we do not do
- We do not sell or rent your data.
- There are no ads inside SAHL+.
- No notifications that lure you back without a reason, and no made-up numbers.
- We do not ask for a permission we do not need.
What stays on your device
Your data is stored on your device first, and SAHL+ works offline. None of it reaches our servers before you sign in.
Browsing without an account (the "Skip" button) saves no financial or health records and does not send your data to our servers. Faith reading preferences, saved texts and tasbih may remain on the device.
What reaches our servers after you sign in
- Your phone number, or your Google or Apple account identifier if you sign in with one of them, along with the email, name and profile picture when the sign-in provider supplies them.
- Your birth year, used only to determine your age group.
- The records you add so they sync between your devices: expenses, commitments, tasks, notes, medicines, appointments, habits and similar. These include financial and health data that you enter yourself.
- The photos and files you attach to your records, kept in private storage that only your account can open.
- Technical data needed to protect the account: IP address, device type and name, app version, and sign-in time.
SAHL+ does not upload your location or contacts and does not record audio. If you choose to start live qibla, location and phone heading are used on that screen only; readings stop when you leave it. It does not move money or connect to your bank account.
Faith data and prayer reminders
City, prayer calculation method and Hijri adjustment stay on the device. Saved texts and tasbih state are uploaded only with explicit consent to sync them to your account. They may reveal religious beliefs; we do not use Faith data for usage analytics or advertising.
Faith settings let you stop syncing and delete the content of your cloud copy. An empty deletion record propagates this decision to other devices when connectivity succeeds; backups expire within 14 days. This device keeps its data when sync is stopped, and clears it when you leave the account it was synced with.
Prayer notifications are optional and use the system sound with generic lock-screen text. Prayer times and the Ramadan timetable are calculated; you can adjust the month start to your marja’s announcement. Live location does not change the selected prayer-time city.
Why we process it
- Sync
- So your records appear on every device you sign in from.
- Account protection
- To verify your identity at sign-in and detect illegitimate attempts.
- Fixing crashes
- To learn what broke in the app and fix it.
- Improving the product
- Optional measurement that you can turn off, described below.
We do not use your data for advertising and do not build a marketing profile of you.
Permissions on your device
- Notifications
- To deliver the reminders you set.
- Exact alarms and lock-screen display (Android)
- To remind you of a medicine dose at its exact time.
- Camera and photos
- When you attach a photo to a bill or a record, and only at your request.
- Location
- Only when you open the Qibla, to find its direction. We do not save or upload your location.
- Motion sensors
- To point the Qibla arrow as you move your phone.
- Microphone and speech recognition
- When you tap the voice button in Q to speak your request. Your speech becomes text, and the audio is not saved.
Each permission is requested when its feature is used, and you can withdraw it in your device settings at any time.
Who your data passes through
- OTPIQ (with YCloud as an alternate)
- To send the sign-in code to your number by WhatsApp or SMS. It receives the number and the code only; we generate and verify the code ourselves.
- Google and Apple
- When you choose to sign in with one of them, to verify your identity.
- Sentry
- Technical crash reports so we can fix them, without the content of your records.
- Hosting provider
- Our servers, database and file storage run on a server we manage ourselves, and the provider has no right to use your data.
We do not share your data with anyone else.
The Q assistant
In this version Q works on your device only: it logs an expense from what you type, opens screens, and searches your data. It does not send what you type to any AI provider.
AI chat is not enabled yet. Before it is enabled in a later version, we will update this policy and name the provider and what it receives.
Usage measurement
SAHL+ records which service was opened and when, as identifiers and timestamps only, with no amounts, text or names, to help us decide what to build next. This measurement is not sold and does not leave to any third party.
You can turn it off under Privacy inside the app. Nothing is recorded after that, and what was collected is deleted from your device and from our servers. Measurement does not include anyone under 18 or anyone whose birth year is unknown.
Age
SAHL+ is for people aged 13 and over. We ask for the birth year once at the start for this reason, and anyone under 13 cannot create an account.
If you learn that a child under 13 has created an account, contact us so we can delete it.
Retention
- Your account data is kept for as long as the account exists.
- When the account is deleted, it is removed from the database and from file storage immediately.
- Backups are kept for at most 14 days, so your data leaves them within 14 days of deletion.
- The security log (sign-in attempts, their times and IP addresses) remains after deletion with no link to your account.
How we protect it
- The connection between the app and our servers is encrypted (HTTPS).
- Your session key is kept in your device's secure key storage.
- Your files open through temporary links issued to your account only.
- The sign-in code is not stored in plain text on our servers.
No system is free of risk. If something happens that affects your data, we will tell you without delay.
Your rights
- Access
- Everything you saved is shown to you inside the app.
- Correction
- You can edit any record or your account details at any time.
- Deletion
- You can delete a single record or the whole account.
- Stopping measurement
- Under Privacy inside the app.
- Withdrawing permissions
- In your device settings.
Deleting your account and data
You delete your account inside the app: More, then My Account, then Delete Account. There is no waiting period and no temporary deactivation. Full details are on the Delete Account page.
Where your data is processed
Our servers and the parties listed above may be outside your country of residence. When you sign in, your data is transferred to them only for the purposes stated in this policy.
Changes to this policy
When we change a clause that matters to you, we notify you inside the app before it takes effect, and we update the effective date at the top of this page.