Alhalalgo privacy policy
About Alhalalgo
Alhalalgo is the name of this app. Privacy and support contact: alhalago78@gmail.com. Last updated: 12 October 2026.
Accounts and reports
Supabase processes your email, account name, authentication information and account identifier. Passwords are sent to Supabase for authentication; we do not store plain-text passwords in our app database or logs. Reports you submit include your observations, language, date and any text you provide. Pending reports stay private; approved summaries may be shown publicly. Document uploads are not enabled in this MVP.
Location and searches
Nearby search uses location only after you grant permission. A typed city or country can be used without location permission. Search text, location when used, and requested place identifiers pass through our Supabase function to Google Places. Google processes those requests under its own privacy terms. We do not store a location history or search history in our app database. Supabase and Google may keep operational logs according to their service policies.
Data on your phone
Saved collections are stored on this phone by account and do not sync to the cloud. Optional prayer tracking, tasbih, Quran bookmarks, listening position and other private activity are stored locally using encrypted storage. Quran audio downloads are stored on the phone. Device backups may include local app data depending on device settings. Notifications are optional; prayer calculations and Qibla can use device location and compass sensors.
Why we use data
We use account data to provide the account features you request, reports to review submitted information, and limited security data to prevent abuse. The usual basis for requested account services is performance of the service contract, and for security is legitimate interest in protecting the service. Optional location, reminders and private activity are enabled by your choice and can be disabled. Do not include sensitive personal information about yourself or others in reports.
Providers and support
Our providers include Supabase for accounts, database and server requests; Google for Places; and the email providers used for sign-in and support. Quran listening contacts MP3Quran audio servers only when you play or download a recording. External links open their own services. Support Submit opens your email app; the message is sent only when you send it. The app does not save support tickets in Supabase. Providers may process information outside your country under their own applicable data-transfer arrangements.
Retention and deletion
Account data and reports remain while your account exists unless you delete them or ask us to remove them. Search usage counters keep at most three UTC date buckets, and older counters are removed when new server requests arrive; they store counts and a daily hashed guest identifier or account ID, not raw IP addresses or search text. In Account, Delete account removes the live account and linked text reports and clears this account’s collections and private activity on this phone after successful deletion. Data on other devices, generic settings and downloaded Quran audio may remain locally; remove app data there to clear them. Provider logs and backups may expire on provider schedules rather than immediately. Where document cleanup is required, contact support; deletion must include the stored files, not only their database records.
Your choices and rights
Contact alhalago78@gmail.com for access, correction, deletion, portability or restrictions on processing. We may verify your identity using your account email; never send your password. We aim to respond to privacy requests within one month. You may complain to your local data protection authority, including Spain’s AEPD where applicable. You can use guest features without an account, revoke location/notification permission in device settings, and clear private activity in the app.
No advertising or AI review
This MVP has no advertising, marketing tracking or paid AI analysis, and we do not sell your personal data. Donation payments are not enabled and no card details are collected. Policy changes will be reflected in this page; material changes will be communicated appropriately.