Privacy policy
Last updated: 30 September 2026
Controller
IOQ Software, owner: Ihab Oweis
Lessingstraße 48, 47166 Duisburg, Germany
Email: support@ioqsoftware.com
The short version
Jadwal plans your day along the prayer times. The app works fully without an account. Tasks, prayer times, ibadat and the day review all run on your device. Data reaches our servers only if you choose to sign in.
What data we process
| Data | When | Why | Where it goes |
|---|---|---|---|
| Tasks, goals, projects, ibadat, journal entries | always | running the app | on your device only (local database), without an account |
| the same data | only with an account | backup and use on more than one device | Google Firestore, under your user id |
| Email address | only with an account | signing in | Firebase Authentication |
| Location | only if you grant it | calculating the prayer times for your place | The calculation runs on the device. The app asks your operating system's geocoding service for the place name, not us. With an account your place is part of your settings and also sits in Firestore, so a second device shows the same times. |
| Crash and performance data | on errors | finding and fixing bugs | Firebase Crashlytics; with an account, linked to your technical user ID, never to your email or name |
| Purchases and Premium: purchase status, subscription and expiry date | with an account from sign-in, without one once you open Premium | unlocking Premium and checking purchases | RevenueCat, under your user ID, without an account under a random ID |
| Usage data: which screens you open, when a session starts and how long you use the app | always | seeing which parts of Jadwal get used, and which app version breaks | Firebase Analytics, not linked to you. Since 14 August 2026 the app declares the Android advertising ID. Analytics uses it for these statistics and never for ads, see below |
Your mosque's prayer times
If you pick a mosque, Jadwal fetches its times from an external mosque directory. That request carries the mosque's identifier, not your location and nothing about you. If the mosque cannot be reached, the app calculates the times itself and tells you so on screen.
Legal bases (GDPR)
- Art. 6(1)(b), performance of a contract: your account and the syncing of your data, if you sign in, and purchases.
- Art. 6(1)(a), consent: access to location and notifications. You grant it in the system dialog and can withdraw it at any time in your device settings.
- Art. 6(1)(f), legitimate interest: crash reports, to keep the app stable, and usage data, to see which parts of the app are used.
Processors
- Google Firebase (Google Ireland Ltd., Dublin) for authentication, Firestore, Crashlytics and Analytics. Privacy information
- RevenueCat (RevenueCat, Inc., USA) manages purchases and Premium. Privacy policy
- Mosque directory (external provider, EU) receives only the identifier of the mosque you picked.
- Cloudflare Pages (Cloudflare, Inc., USA) serves this website, which produces technically necessary server logs including your IP address (Art. 6(1)(f) GDPR). Privacy Policy
- Cloudflare Web Analytics (Cloudflare, Inc., USA) counts the visits to this website. It records the page view itself, the address opened, the referring page, the country, the device type, the browser and the operating system. It sets no cookies, stores nothing on your device and reads nothing from it; individual visitors are not recognised. No consent under Section 25 TDDDG is therefore required, the legal basis is our legitimate interest in a website that fits its purpose (Art. 6(1)(f) GDPR). Privacy Policy
- Google Analytics 4 (Google Ireland Ltd., Dublin) counts which pages get opened on this website and which buttons get clicked. This only happens if you agreed in the privacy notice; it sets cookies and sends data to Google, including to the USA. Your IP address is truncated before evaluation, and your decision itself stays local in your browser. The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time through the cookie settings in the footer; withdrawal takes effect immediately and does not affect the lawfulness of processing before it (Art. 7(3) GDPR). Privacy Policy
Transfers to the USA
Google, Cloudflare and RevenueCat also process data in the USA. Google and Cloudflare are certified under the EU-U.S. Data Privacy Framework; the European Commission's adequacy decision applies to them (Art. 45 GDPR). RevenueCat is not certified; the basis there is the European Commission's Standard Contractual Clauses (Art. 46(2)(c) GDPR) in its data processing addendum.
No ads, no sharing
Jadwal contains no advertising and no advertising SDK. Since 14 August 2026 the Android package declares the advertising ID; Firebase Analytics uses it for the usage statistics described above, and for nothing else. There is no ad targeting, no personalisation and no ad network. The usage data stays with Firebase Analytics and is used by us alone, to improve the app. Your data is not sold and not shared for advertising.
Retention and deletion
Without an account your data lives on your device alone, and uninstalling removes it. With an account it is kept until you delete it.
Delete your account and data →
Your rights
Access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), portability (Art. 20) and objection (Art. 21). Write to support@ioqsoftware.com. You may also lodge a complaint with a supervisory authority.
You can export your tasks and entries yourself from inside the app at any time, under Profile → Data management. You do not need us for that.
Children
Jadwal is not directed at children under 13, and we do not knowingly collect data from them.
Changes
If what the app processes changes, this page changes with it, and the date at the top changes too.
Contact
Questions about this policy: support@ioqsoftware.com