Tayba Privacy Policy
Last updated: October 10, 2026
1) Controller and scope
Tayba is published by Assaad Kenaan, the controller for processing it determines. Privacy contact: itan.hightech@gmail.com. This policy covers the Tayba application. No Tayba account is created, and Tayba operates no application backend of its own.
The bundled supplications come from editions of Hisn al-Muslim distributed by Risalat al-Haramayn. References and source editions can be consulted in the app. These texts are included in Tayba; reading them does not require a connection to the source website. If you open a source-edition link on risala.prh.gov.sa, that website receives the usual network request information and applies its own privacy policy.
2) Data processed locally
The app may store on your device: precise or selected location and recent cities; calculation, display, and language settings; alarms, notifications, and selected sounds; Tasbih and Azkar progress; Quran bookmarks and last-read position; reading settings; the inventory of downloaded content; and crash-reporting consent.
This data is used only to provide requested features. It is not sold or used for advertising or profiling. Depending on Android or Apple settings, it may be included in a system or cloud backup managed by the platform. Tayba cannot access those backups.
3) Permissions, camera, and sensors
Location is used with your permission to calculate prayer times and Qibla and, when needed, resolve city and country. The last position may be kept locally for offline and background operation. Notifications, exact alarms, wake, vibration, startup, and full-screen access support prayer reminders and alarms.
The camera is used only while the augmented-reality Qibla view is open. Tayba does not record, keep, or transmit photos or video. Compass and motion sensors provide live orientation and are not retained. Audio files are selected with the system picker; older Android versions may request limited storage access. The microphone is not used.
4) Network connections and disclosed data
Every connection reveals the IP address, ordinary technical request information, and requested resource to the provider. Depending on the feature used:
• Google or Apple platform geocoding may receive coordinates to return city and country;
• everyayah.com receives the requested recitation file, which may identify reciter, surah, and ayah;
• cdn.jsdelivr.net receives the transliteration-file request when you enable that option;
• tanzil.net receives the Quran-translation file request when you choose to download it;
• archive.org receives requests to preview or download remote adhans;
• raw.githubusercontent.com, operated by GitHub/Microsoft, automatically receives at most one request per day to check the available version;
• Sentry receives a technical report only after explicit consent;
• the store, browser, TTS engine, or email client opens only when you use the related feature. A TTS provider may process text under its configuration.
Tayba adds no advertising account or advertising identifier to these requests.
5) Optional crash reports
Sentry is off by default. Its legal basis is consent, which you can withdraw at any time in Settings > Privacy without losing core features.
When enabled, a report may include error type and message, technical stack trace, date and time, Tayba version, operating-system version, device model, and technical device context. An error can exceptionally include a value displayed by the app; Tayba minimizes collection and does not intentionally send location, religious content being read, screenshots, or performance metrics.
The SDK is configured without default PII and with the fixed user “anonymous.” An IP address is necessary for network transport; IP storage is disabled in the Sentry project. Events are hosted in Sentry's Germany region and automatically deleted after 30 days.
6) Support and external links
If you choose to contact support, your email client sends your address and message; the prefilled template adds Tayba version, operating system and version, and language. This data is used only to respond to and follow up on your request, then deleted when no longer needed unless legally required.
External sites and apps opened by Tayba apply their own policies. Do not include sensitive information in a support message.
7) Purposes and legal bases
Local features, downloads, and connections you initiate are necessary to provide the requested service. Location and Sentry rely on consent. The daily update check relies on the legitimate interest in keeping Tayba secure and maintained. Support relies on your request and the legitimate interest in responding.
There is no automated decision with legal effect, advertising profiling, or sale of data.
8) Recipients and international transfers
Data remains available to the user and system components needed to operate. During a connection, only the relevant provider receives the data described above. Sentry acts as a processor for reports; other platforms may act as independent controllers.
Some providers or subprocessors may process data outside the EEA. Their policies and applicable safeguards, such as adequacy decisions, the EU-US Data Privacy Framework, or Standard Contractual Clauses, govern those transfers.
9) Retention and deletion
Preferences, locations, local history, and downloads remain until deleted in Tayba, the app's storage is cleared, or the app is uninstalled. Temporary caches may be removed automatically by the system.
You can revoke permissions in system settings, disable Sentry in Settings > Privacy, remove downloads from their screens, and remove all local data by clearing Tayba storage or uninstalling it. For any request concerning a support exchange, contact itan.hightech@gmail.com. Sentry reports contain no identifier that lets Tayba link them to a person; they therefore generally cannot be isolated on request and are automatically deleted after 30 days.
10) Security
Local data benefits from Android or Apple application isolation. Connections managed by Tayba use HTTPS, and permissions are requested when needed. No system is infallible, and absolute security cannot be guaranteed, particularly on an unlocked, modified, or compromised device.
11) Your rights
Where the GDPR applies, you may request access, correction, deletion, or restriction; object to processing based on legitimate interests; request portability where applicable; and withdraw consent at any time. Contact: itan.hightech@gmail.com.
You may also complain to the CNIL (cnil.fr) or your local data-protection authority. Tayba will respond within applicable legal time limits, subject to reasonable verification of the request.
12) Children and changes
Tayba does not seek to knowingly collect children's data. Where parental authorization is required, the legal guardian should supervise activation of location, camera, and crash reporting.
This policy will be updated when features, providers, or applicable rules change. The date above identifies the current version.