Privacy Policy for Aya
Effective Date: 16 May 2026
Aya is provided by Mahmoud Elshami. This Privacy Policy explains how Aya accesses, uses, stores, and shares information when you use the Aya mobile application.
Aya is designed to help users build a more mindful relationship with distracting apps by showing Quran verses and brief reflection moments before opening selected apps.
1. Information We Access or Process
Depending on how you use Aya, the app may access or process the following categories of information:
App usage and monitored apps
Aya may request Android Usage Access permission and access to installed apps so it can detect when selected apps are opened, allow you to choose which apps Aya should monitor, and trigger Aya’s pause experience at the appropriate time.
Overlay and device permissions
Aya may request permission to display over other apps and may request battery optimization exemption so the app can reliably show its pause screen and continue working in the background.
Account and sign-in information
Aya may use Google Sign-In and Firebase Authentication to activate your Aya account and support subscription syncing. This may include processing your name, email address, user ID, and related authentication details provided through those services.
App preferences and local configuration
Aya stores certain settings locally on your device, such as your selected language, display preferences, monitored apps, verse frequency preferences, permission status, trial timing, and related app configuration data.
Analytics information
Aya uses Firebase Analytics to collect limited analytics about app usage, such as onboarding progress, feature interactions, and general usage patterns, to improve app performance, reliability, and user experience.
Purchase and subscription information
If you purchase a subscription or lifetime access, Aya uses RevenueCat and Google Play Billing, or the relevant app store billing service, to manage purchases, entitlements, renewals, and restore purchases.
Content and data syncing
Aya may retrieve, refresh, or sync verse content and certain account or app-related data using Firebase services, including Firebase Firestore.
2. How We Use Information
Aya uses information to:
provide the app’s core functionality
detect selected app openings and present pause or intercept screens
save your preferences and configuration
support account activation and subscription syncing
improve app performance, stability, and user experience
understand high-level feature usage and onboarding flow
manage purchases, subscriptions, renewals, and restore requests
deliver, refresh, or sync app content and related data
3. Third-Party Services
Aya uses trusted third-party service providers to support certain features and operations, including:
Google Sign-In and Firebase Authentication
Used for sign-in, account activation, and authentication.
Firebase Analytics
Used for limited analytics and usage insights.
Firebase Firestore and related Firebase services
Used for content delivery, syncing, and certain account or app-related data.
RevenueCat
Used for subscription and purchase management.
Google Play Billing / Google Play, or other applicable app store billing services
Used for payment processing, subscription management, and purchase restoration.
We do not sell your personal data.
Aya does not display third-party advertising.
We may also disclose information when required to comply with applicable law, regulation, legal process, or enforceable governmental request.
4. Local Storage
A significant portion of Aya’s functionality operates locally on your device. This may include monitored apps, language and display settings, local app state, trial timing, cached content, and other app preferences.
5. Data Retention
Locally stored data may remain on your device until you delete it, clear app data, or uninstall the app.
Information processed by third-party services such as Google Sign-In, Firebase, RevenueCat, and Google Play may be retained in accordance with their own policies, technical requirements, and legal obligations.
6. Security
We take reasonable measures to help protect information handled by Aya. However, no method of electronic storage or transmission is completely secure, and we cannot guarantee absolute security.
7. Children’s Privacy
Aya is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13.
8. Your Choices
You may:
choose whether to grant permissions
revoke permissions at any time through your device settings
uninstall the app
clear local app data through your device settings
manage your Google account, Firebase-related data, or subscription settings through the relevant provider or app store, where applicable
Some account, analytics, or purchase-related data may be managed by third-party providers under their own policies.
9. Contact
If you have questions about this Privacy Policy or Aya, you may contact:
Mahmoud Elshami
m.m.shamie@gmail.com
10. Account Deletion and Data Retention
If you create or use an Aya account, you can request deletion of your account and associated app data at any time.
How to request deletion:
1. within the Aya app using the account deletion option; or
2. outside the app by visiting our account deletion page: [ACCOUNT DELETION PAGE URL]
What we delete:
When we process a valid deletion request, we delete the Aya app account and associated account data that we control, including the account record used to provide Aya features and synchronize access across devices.
If your Aya account is linked to third-party service providers that we use to operate the app, we will also process deletion of associated customer records where applicable as part of handling your request.
What we may retain
We may retain limited information where necessary for legitimate purposes such as security, fraud prevention, subscription and store compliance, legal compliance, or enforcement of our terms.
For Aya, this may include a minimal pseudonymous anti-abuse record, such as a hashed account identifier and limited timestamps, to help prevent repeated abuse of one-time trial offers and to maintain a record that a deletion request was processed. We do not use this retained record to recreate your deleted Aya account, for marketing, or for unrelated profiling.
Subscriptions
If you purchased a subscription through Google Play, deleting your Aya account does not automatically cancel your Google Play subscription. Subscription cancellation must be handled separately in Google Play.
Timing
We aim to process account deletion requests within 7 to 14 days, although some requests may take longer if verification or legally required retention is involved.
Contact
If you need help with account deletion, contact us at: [m.m.shamie@gmail.com]
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes, we will revise the Effective Date and post the updated version for Aya.