Privacy policy

Utluma is developed by Utluma Technologies. This policy explains what data the app handles, where that data is stored, and the choices you have. Utluma is built to work primarily on your device, so most of your data never leaves your phone.

Information we collect

Logging in is optional — you can use all core features without an account. If you choose to log in to unlock Public Share, leaderboards, and multiplayer rooms, you can log in with Google or with email. From a Google account we receive the name, email address, and profile photo; from email login we receive only your email address, and its password is managed by Firebase Authentication, not by us. Your profile (display name, photo, and WhatsApp number if you provide it) is then stored in our database. Monthly game scores and your participation in multiplayer rooms are also stored on our servers. We do not collect advertising identifiers, and we do not use analytics or crash reporting services. The app handles only the data described in the sections below, and it does so solely to provide the features you asked for.

Data stored on your device

Your settings, bookmarks, reading and memorisation progress, tasbih counts, downloaded Quran databases, and recitation recordings are kept in the app’s private storage on your device. This data is not uploaded, except recordings you yourself choose to publish as a Public Share (see Microphone and recordings). Uninstalling the app removes the data on your device permanently, so make your own backup first if you want to keep it.

Location

If you grant location permission, the app uses your approximate or precise coordinates to calculate prayer times and the qibla direction. Coordinates are sent to the prayer time service only to obtain a schedule; we do not store them and do not link them to an identity. You may deny or revoke this permission at any time in your system settings and set a location manually instead.

Microphone and recordings

Recitation features use the microphone to listen while you recite. Audio is processed on your device, and any recording you choose to keep is saved in the app’s private storage. The microphone is active only while a recitation session is running, and you can delete recordings at any time from inside the app. Recordings are never used to train anything. If you publish a recitation as a Public Share, that audio clip (at most three minutes from one surah) is uploaded to our storage at Cloudflare, together with your display name, the surah name, and its verse range as the share caption, and is shown in the app to other users who are logged in; the audio file itself is stored at a public address, so anyone who has its link can play it. You can withdraw it at any time, and its audio is deleted from the server as well.

Notifications

If you enable notifications, prayer time and reminder notifications are scheduled locally on your device. We do not operate a push server, and we receive no information about which notifications you see or open.

Third-party services

The app connects to the internet for a small number of purposes: fetching prayer times from the Aladhan API, downloading Quran and content databases, opening links you tap, and, if you log in, storing your account and profile with Firebase (Google) and your profile photo and Public Share audio with Cloudflare. Those providers may process your IP address and request details under their own privacy policies. The app store you installed Utluma from also handles ratings and updates under its own terms.

How we share data

We do not sell, rent, or trade your data, and we never share it with advertisers or data brokers. What others can see is only what comes with the features you choose to use: Public Shares you publish, together with your display name and profile photo, are shown to other users who are logged in to the app, and those audio files and that profile photo are stored at public addresses that anyone who has the link can open; your display name and score on the monthly leaderboard can be seen by anyone who opens that leaderboard; and your display name is visible to participants in the multiplayer rooms you join. Reported shares are reviewed by moderators and may be hidden. Beyond that, we disclose information only where the law requires it, and only to the extent required.

Security

Data on your device is protected by the operating system app sandbox and by whatever device lock you have configured. Network requests use encrypted connections. No method of storage or transmission is completely secure, so please keep your device updated and protected as well.

Children’s privacy

Utluma is suitable for a general audience and does not knowingly collect personal information from children. All core features work without an account, and we receive personal data only when someone chooses to log in. If you learn that a child has created an account without the consent of a parent or guardian, contact us at the address below and we will delete the account and its data.

Your choices and rights

You control every permission the app uses and can revoke any of them in your system settings; the related feature simply becomes unavailable. You can review or erase the data on your device at any time from inside the app or by uninstalling it. You can withdraw your Public Shares yourself from inside the app. To delete your account together with your profile, scores, and shares on our servers, send a request from your account email address to the address below; we complete it within 30 days after the request is confirmed.

Changes to this policy

We may update this policy as the app evolves. The date shown at the top of this page always reflects the current version, and a material change will be announced in the app or in the release notes.

Contact us

Questions about this policy can be sent to admin@utluma.com or raised through utluma.com.