Privacy Policy — Bugün Allah İçin Ne Yaptın?

This Privacy Policy explains what data is processed, how it is used, and what your rights are when you use the "Bugün Allah İçin Ne Yaptın?" ("App") mobile application[cite: 1]. By installing and using the App, you agree to this policy[cite: 1].

The App is designed as an offline journal for Muslims to personally record their daily prayers and intentions for the sake of Allah[cite: 1]. The core principle of the App is that user data remains only on the user's device—there is no account system, cloud storage, or user tracking[cite: 1].

1. Data We Collect

1.1 Account, Profile, or Identity Data — NONE

The App does not have an account system[cite: 1]. You do not register, provide an email, or create a username[cite: 1]. The App does not identify who you are[cite: 1].

1.2 Data Stored Locally on Your Device

When you use the App, the following information is stored only in the local database (SQLite) on your device and is never sent to any server[cite: 1]:

• Daily entries: Dates, prayer times you marked as performed, selected tags (Quran, prayer/dua, charity, kindness, repentance, fasting), and free-text notes you have written[cite: 1].
• Calendar data: Information on which days you made an entry (this is not a numerical worship statistic, but merely a "record exists/does not exist" indicator)[cite: 1].
• Pause status: Dates when you activated the pause mode for situations such as menstruation, illness, or travel[cite: 1].
• Preferences: Daily reminder time, prayer time notification settings, notification sound, theme selection, and city/district selection[cite: 1].
• Cached prayer times: A one-year prayer schedule fetched from the ezanvakti.imsakiyem.com API (related only to your district, not to you personally)[cite: 1].
• Cached hadith archive: The collection of hadiths that comes with the App (already embedded within the APK, not downloaded separately)[cite: 1].

When you uninstall the App, all of this data is deleted. No copy is stored anywhere else[cite: 1].

1.3 Automatically Collected Data — NONE

The App does not collect, record, or analyze the following[cite: 1]:

• IP address[cite: 1].
• Device ID, advertising ID (AAID/IDFA)[cite: 1].
• Location coordinates (only used for one-time district detection, see §2.1)[cite: 1].
• Crash reports (Sentry, Crashlytics, etc., are not used)[cite: 1].
• Usage analytics (Google Analytics, Firebase Analytics, PostHog, etc., are not used)[cite: 1].
• Advertising data (There are no ads in the App)[cite: 1].
• Push notification tokens (FCM is not used; all notifications are scheduled locally on the device)[cite: 1].
• Telemetry, performance monitoring, or user session tracking[cite: 1].

2. The Only Third-Party Communication: Prayer Times API

2.1 ezanvakti.imsakiyem.com API

The only external network request made by the App are the requests sent to ezanvakti.imsakiyem.com to fetch prayer times[cite: 1]:

• What is sent: Only the numerical ID of your selected district (e.g., "Istanbul/Beşiktaş" → district ID)[cite: 1]. No personal information about you, no identifiers other than the IP address, device info, or user ID is sent[cite: 1].
• Frequency: Once a year (the annual schedule is downloaded in a single request and cached on the device for 1 year)[cite: 1]. It is renewed in the background 30 days before the end of the year[cite: 1].
• Storage: The response is stored in the local database on your device[cite: 1]. ezanvakti.imsakiyem.com may have an IP-access log subject to its own privacy and server logging policies; Yoatech has no control over this[cite: 1].

The IP address of the requesting party may be kept for a short time by the API provider within the scope of standard server logs[cite: 1]. This is only related to the API provider's infrastructure; the App does not record, use, or store this IP[cite: 1].

2.2 Location Permission (Optional, One-Time)

To automatically detect your district, the App may optionally request Android location permission (ACCESS_COARSE_LOCATION)[cite: 1]. When this permission is granted[cite: 1]:

• The location is retrieved only once, converted to a district estimate via offline reverse geocoding on the device (assets/data/turkey_districts.json), and then deleted[cite: 1].
• Location coordinates are never sent to any server and are never recorded[cite: 1].
• If you do not wish to grant permission, you can manually select your district from the list; no features of the app will be restricted[cite: 1].
• Background location is not used or requested[cite: 1].

3. Notifications

The App sends local notifications[cite: 1]:

• Daily "What did you do today for the sake of Allah?" reminder (user selects the time, default is 22:00)[cite: 1].
• Prayer time notifications (optional, for 5 times a day)[cite: 1].
• 15-minute pre-prayer warning (optional)[cite: 1].
• Weekly hadith notification (optional)[cite: 1].

All notifications are scheduled locally on the device using the Android AlarmManager and the flutter_local_notifications package[cite: 1]. Push notification servers (Firebase Cloud Messaging, Apple Push Notification Service, etc.) are NOT used[cite: 1]. No notifications originate from outside the App[cite: 1].

Notification preferences can be turned off at any time from the Settings screen or revoked via the operating system's permission manager[cite: 1].

4. Third-Party Services

The App uses the following services[cite: 1]:

There are no ads in the App (Google AdMob, Facebook Audience Network, etc., are not used), there are no in-app purchases, and there is no subscription system[cite: 1]. The App is completely free, and no revenue is generated from user data or advertisements[cite: 1].

5. Children's Privacy

The App is not directly aimed at children under 13; however, it contains no objectionable material and is suitable for all ages in terms of religious education[cite: 1].

Since the App collects no personal data, it does not possess information regarding the identity, age, location, or contact details of children[cite: 1]. Children may use the App under parental guidance[cite: 1].

6. Data Retention

• Local data: Stored on your device until you uninstall the App[cite: 1]. When you uninstall the App, all local data (Drift/SQLite database, SharedPreferences, cache) is deleted[cite: 1].
• Server-side data: None. The App does not keep user data on any server[cite: 1].
• JSON Export: For phone-switching scenarios, you can save all your local data as a JSON file to your device via Settings → "Export Data" and import it on another device[cite: 1]. This process is entirely local; the file is not sent anywhere[cite: 1].

7. Your Rights

Since the App collects no personal data, "data controller" obligations under KVKK / GDPR are limited[cite: 1]. Nevertheless, you have the following rights[cite: 1]:

• Access: You can obtain all your data on your device in JSON format via Settings → "Export Data"[cite: 1].
• Erasure: You can delete all your data by uninstalling the App[cite: 1]. Additionally, there is a "Reset all data" option in Settings[cite: 1].
• Rectification: All entries can be edited within the App (past day detail screen)[cite: 1].
• Complaint: You have the right to apply to the Personal Data Protection Authority (KVKK Board) in Turkey or the local data protection authority in the EU/EEA[cite: 1].

For rights requests, contact: yunusergul97@gmail.com — a response will be provided within 30 days[cite: 1].

8. Data Security

• The single external request to the ezanvakti.imsakiyem.com API is encrypted via HTTPS (TLS)[cite: 1].
• The local database (SQLite/Drift) is under the standard access control of the device's operating system; on a non-rooted device, only the App can access it[cite: 1].
• The App does not store any user passwords, authentication tokens, or secret keys (because there is no account system)[cite: 1].
• There is no sensitive data processing point in the App[cite: 1]. There is no personal information that could be leaked, even in a hypothetical data breach scenario[cite: 1].

9. International Data Transfer

The App does not send any user data to a server, therefore no international data transfer occurs[cite: 1]. The only external API call (ezanvakti.imsakiyem.com) is made to an infrastructure located in Turkey[cite: 1].

10. Hadith Content — Copyright Notice

The hadith translations shown within the App are taken from Babanzade Ahmed Naim's work, Sahih-i Buhârî Muhtasarı Tecrid-i Sarih Tercemesi[cite: 1]. This translation entered the public domain in 2005, 70 years after the translator's death in 1934[cite: 1].

The volumes continued by Kamil Miras (post-1948) have not been used in the App, as the copyright for those volumes has not yet entered the public domain[cite: 1].

11. Changes to This Policy

We may update this policy from time to time[cite: 1]. In the event of significant changes (e.g., if a new data collection type is added—currently unplanned), the "Effective Date" at the top will be updated, and the App will inform you upon the next launch[cite: 1].

The current version of the policy is always available at: https://yoatech.github.io/bugun-allah-icin-ne-yaptin/privacy-policy (or in the project repository at docs/privacy-policy.md)[cite: 1].

12. Contact

For questions, requests, or complaints regarding this policy:

Data Controller: Yoatech[cite: 1] Email: bubiziyorar@gmail.com[cite: 1] Postal Address: Provided via email upon request[cite: 1].

This policy is published in Turkish. In case of inconsistency between the English translation and the Turkish text, the Turkish text shall prevail.[cite: 1]