Privacy Policy

This Privacy Policy explains how The Innovates Tech Inc. ("we", "us", "our") handles personal information in the Nour Al-Muslim app for iPhone, iPad, Apple Watch, Mac and Android (the "App") and on the website www.nouralmuslim.com (the "Website"). It is written to meet Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), Alberta's Personal Information Protection Act (PIPA), Quebec's Act respecting the protection of personal information in the private sector (Law 25), the EU and UK General Data Protection Regulation (GDPR), U.S. state privacy laws, and the privacy requirements of the Apple App Store and Google Play.

1. The short version

The App works completely offline. It has no account, no sign-in, no advertising, no tracking, no analytics and no data broker.
What you do in the App (what you read, listen to, memorize, record, bookmark or ask STRATA) and your location for prayer times stay on your device. We do not receive them.
STRATA, the App's AI assistant, runs on your device. An outside AI model is used only if you switch it on yourself and enter your own key.
The Website has no analytics, no advertising and no tracking cookies. Our servers keep standard technical logs for security.
We never sell or rent personal information, and we never share it for advertising.

2. What we do not collect

We do not ask for or collect your name, email address, phone number, contacts, photos, precise location, health or religious-practice data, advertising identifiers or payment card details through the App. Because there is no account, we cannot link anything you do in the App to you. We do not use third-party analytics, advertising or crash-reporting software development kits (SDKs) in the App.

3. Information in the App

The App stores the following on your device only, in the App's private storage, so that it can work for you:

Settings and preferences: language, theme, text size, reciter, translation, tafsir, prayer calculation method, Athan and reminder choices.
Location for prayer times and Qibla: the city you choose from the built-in list, or coordinates from your device's location service if you allow it. Times and directions are calculated on the device.
Reading and worship data: bookmarks, notes, reading history and goals, your private prayer and fasting tracker, Tasbih counts and athkar progress.
Memorization data: plans, revision schedule, scores and, if you use recitation checking, your recordings. Recordings are analysed on the device.
STRATA conversations, kept for the period you choose (until you delete them, 1 day, 7 days or 30 days).
Learned adjustments: recitation sync timings, pronunciation and answer-length tuning that STRATA learns on your device.

This information may be included in your device's own backups (for example iCloud or Google backup) if you have switched them on; those backups are governed by your agreement with Apple or Google.

4. Device permissions

The App asks for a permission only when you use the feature that needs it, and you can refuse or withdraw it at any time in your device settings:

Permission	Used for	Leaves the device?
Location	Prayer times and the Qibla for where you are	No
Microphone and speech recognition	Recitation checking and voice questions to STRATA	No, except as described for your device's speech service below
Notifications	Athan, Iqama, athkar and other reminders you set	No; scheduled on the device
Local network	The TV screen on your home network	Stays within your home network
Motion and compass	The Qibla direction	No

Speech recognition and the translate button use the services built into your phone. Depending on your device and settings, Apple or Google may process that audio or text under their own privacy policies; where the device supports on-device recognition or offline language packs, the App prefers them.

5. STRATA AI and outside AI models

STRATA is a language model that runs on your device. Your questions and its answers are not sent to us or anyone else. Its explanations are AI-generated educational content, labelled as such, and can be wrong; STRATA does not issue religious rulings.

Outside AI models (off by default). In Settings you may connect your own outside AI model (for example an OpenAI-compatible service, Anthropic, Google Gemini or a model on your own computer) using your own account and key. If you do, the App sends your question and the categories of context you allow directly from your device to that provider. We do not receive or see it. That provider's terms and privacy policy apply to what you send. Your key is kept in your device's secure storage (Keychain or Android Keystore), never in plain text, and you can disconnect and delete it at any time.

6. When the App uses the internet

Everything needed to use the App is included in it. The App connects to the internet only when you:

choose to download an additional recitation from the catalog. Your device then requests the audio files from the server that hosts them, which, like any web server, receives your IP address and basic technical information needed to deliver the files. No identifier of yours is added;
open a link (for example to this Website or a store page) in your browser;
donate through the App Store or Google Play;
use an outside AI model you connected yourself (section 5).

The TV screen works only on your home network: your phone serves the page to your TV's browser after you pair them with a private QR code. Nothing is sent outside your network.

7. Donations and app stores

Donations are optional and are processed entirely by Apple or Google as in-app purchases. We never receive your card or payment details; we receive only the sales reports that Apple and Google provide to all developers, which do not identify you to us. Downloading the App and leaving reviews are governed by the App Store and Google Play terms and privacy policies. Apple and Google may provide us with aggregated, de-identified statistics (such as the number of downloads by country or crash counts if you have chosen to share them with developers).

8. The Website

The Website is a static site with no user accounts, no comment forms, no analytics scripts and no advertising. When you visit, our servers and our network security and content-delivery provider automatically receive standard technical information: your IP address, the date and time, the page requested, the referring page, your browser's user-agent string, your preferred languages and the country associated with your IP address. We use it to deliver the page in your language (the Website chooses a language from your browser's language or your country), to keep the Website secure, to detect and stop abuse, and to count visits in aggregate. Logs are kept for a limited period and then deleted, unless they are needed to investigate a security incident.

Links to the App Store, Google Play or other sites take you to services we do not control; their own privacy policies apply.

9. Cookies and local storage

nam_lang (cookie, 1 year): set only when you pick a language from the menu, so the Website opens in that language next time. It contains only the language code.
Theme and news-panel choices are kept in your browser's local storage and session storage and are never sent to us.
Our network security provider may set strictly necessary security cookies to protect the Website from automated attacks.

We do not use advertising, analytics or cross-site tracking cookies. You can delete cookies in your browser at any time.

10. When you contact us

If you email [email protected], we receive your email address, your message and anything you choose to include. We use it only to reply, to handle your request and to keep a record of it. We delete enquiries within 24 months unless we need them longer to resolve a dispute or meet a legal obligation.

11. Purposes and legal bases

We process the limited personal information described above only to provide and secure the Website and the App's optional online features, to answer you, and to meet legal obligations. Where the GDPR applies, our legal bases are our legitimate interests in operating and securing our services (website logs, security), performance of a contract or steps you ask us to take (replying to you, delivering a recitation you chose to download), your consent (the language cookie, device permissions you grant; you can withdraw it at any time), and legal obligation. Under Canadian law we rely on your knowledge and consent, implied where the purpose is obvious from the context.

We do not sell, rent or trade personal information, and we do not share it for targeted advertising. We disclose it only:

to service providers that host, deliver and protect the Website and recitation downloads, and provide our email service, under contracts that require them to protect it and use it only for us;
when required by law, a court order or a valid request from authorities, or to protect the rights, safety and security of users, the public or us;
to a successor in a business transaction such as a merger or acquisition, which must continue to protect it under this policy.

13. Where information is processed

We are based in Canada. Our service providers may process information in Canada and in other countries, including the United States, where the law may differ from the law where you live and where it may be accessible to courts and authorities of those countries. Where the GDPR or UK GDPR applies, we rely on adequacy decisions (Canada has one for commercial organizations) or on standard contractual clauses for such transfers.

14. Retention

App data stays on your device until you delete it or uninstall the App.
Website logs: a limited period, then deleted, unless needed to investigate a security incident.
Emails: up to 24 months after the matter is closed.

15. Security

We protect information with safeguards appropriate to its sensitivity: encrypted connections (HTTPS) for the Website and downloads, hardened and monitored servers, least-privilege access, regular security updates and daily security checks. On your device, the App relies on the operating system's sandbox and secure storage. No method of transmission or storage is completely secure, but we work to protect your information and will notify you and the authorities of a breach where the law requires.

16. Children

The App is suitable for all ages and is designed to collect no personal information from anyone, including children. We do not knowingly collect personal information from children through the Website. If you believe a child has sent us personal information by email, contact us and we will delete it.

17. Your rights and choices

Depending on where you live, you have the right to ask whether we hold personal information about you, to access it, to correct it, to delete it, to receive a copy in a portable format, to object to or restrict certain processing, and to withdraw consent. Because the App has no account and keeps your data on your device, we usually hold nothing about you except emails you sent us and, for a short time, website logs. To make a request, email [email protected] with the subject "Privacy request". We will reply within 30 days. We will not discriminate against you for exercising your rights.

18. Deleting your data

In the App: Settings → Storage and data lets you delete your recordings, STRATA conversations, memorization progress, bookmarks, notes and reading history, or erase everything. Uninstalling the App also removes all of its data from the device.
Outside AI key: Settings → STRATA AI → Outside AI model → disconnect.
Emails and other information we hold: email us and we will delete it within 30 days, unless we must keep it by law.
Website: delete the nam_lang cookie and this site's storage in your browser settings.

19. Regional information

Canada and Quebec

Our Privacy Officer is responsible for our compliance with PIPEDA, Alberta PIPA and Quebec Law 25. Quebec residents may also ask for information on the technologies used to identify, locate or profile them (the Website and App use none) and to have personal information communicated in a structured, commonly used technological format.

European Economic Area, United Kingdom and Switzerland

You may lodge a complaint with your local data-protection authority. We do not make decisions based solely on automated processing that produce legal or similarly significant effects on you.

United States

We do not sell or share personal information for cross-context behavioural advertising, and we do not process sensitive personal information to infer characteristics about you. We honour Global Privacy Control signals, although there is nothing to opt out of.

20. Changes to this policy

We may update this policy to reflect changes in our practices, the App or the law. The new version will be posted on this page with a new "Last updated" date. If we make a material change, we will tell you on the Website or in the App before it takes effect and ask for your consent where the law requires. This policy is written in English; summaries in other languages are provided for convenience, and the English version prevails to the extent permitted by law.

21. Contact, Privacy Officer and complaints

Privacy Officer, The Innovates Tech Inc., Calgary, Alberta, Canada
Email: [email protected] (subject "Privacy request")
Company website: www.theinnovates.com

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada, the Office of the Information and Privacy Commissioner of Alberta, the Commission d'accès à l'information du Québec, or your local data-protection authority.