Privacy Policy

Last updated: 5 November 2026

This policy explains what data the Sahih Al Bukhari app processes, for what purpose and on what legal basis. It applies to both the Android and the iOS version.

1. Controller

2. No account, no sign-up

The app requires no registration. We do not collect names, addresses, phone numbers or email addresses. The entire collection ships with the app and is displayed without any server connection.

3. Data that stays on your device

The following is stored locally on your device only. It is never transmitted and we cannot see it:

• your chosen language and text size,
• your bookmarks,
• the hadith of the day and the recently shown hadiths, so that content does not repeat,
• the hadith you opened last,
• your collections and personal notes,
• your reading plan and reading progress,
• the end time of an ad-free period,
• which premium subscription, if any, is active.

This data is removed when you uninstall the app or clear its data in your system settings.

Image cards are created on your device. They are only passed to the app you choose yourself when sharing.

4. Advertising (Google AdMob)

The app is funded by advertising through Google AdMob. It shows banner ads, an occasional full-screen ad when changing chapters, an ad when opening the app, and — only at your request — a rewarded ad that unlocks 30 minutes without advertising.

Before any ad is loaded, we ask for your decision through Google's User Messaging Platform. Without your consent, no personalised advertising is served.

To deliver ads, Google processes your truncated IP address, your advertising ID, and device and event data, among other things. For details see Google's privacy policy.

Changing or withdrawing consent

You can change your decision at any time in the app under Settings → Privacy → Privacy options. You can also reset or delete your advertising ID in your device's system settings.

5. Premium subscriptions

The app offers two paid subscriptions — monthly and yearly. While a subscription is active, no advertising is shown in the app, and the AdMob processing described above does not take place. A subscription also unlocks collections, notes, the reading plan and image cards; these features store their data only on your device.

Who handles the purchase

The purchase is handled entirely by your device's store: Google Play (Google Ireland Limited) or the App Store (Apple Distribution International Ltd.). Those providers collect and process the payment data as controllers in their own right.

We receive no payment data. Your name, address, card number and bank details are never passed to us. The app only records locally which of the two subscriptions is active — nothing else.

The privacy policies of the respective provider also apply: Google and Apple.

Legal basis

Processing the subscription status is necessary to perform the contract you enter into when subscribing — Art. 6(1)(b) GDPR.

Cancelling and restoring

You manage and cancel a subscription exclusively in your device's store, not in the app. Under Settings → Premium → Restore purchases you can re-enable an existing subscription on another device; this only asks the store whether a purchase exists.

6. Analytics and crash reports (Firebase)

We use Firebase services, provided by Google. These are switched off by default and are only enabled after you have given consent.

If you withdraw your consent, collection is switched off again.

7. Notifications

If you allow notifications, the app reminds you of the hadith of the day at 6 pm. The reminder is scheduled on your device; no data is transmitted for it. You can turn notifications off at any time in your system settings.

8. Tracking prompt on iOS

On iOS, the operating system additionally asks whether the app may track your activity across other companies’ apps and websites (App Tracking Transparency). If you decline, no advertising ID is used for personalised advertising.

9. Legal bases

• Art. 6(1)(a) GDPR and § 25(1) TDDDG — your consent for personalised advertising, analytics, crash reports and notifications.
• Art. 6(1)(b) GDPR — performance of the subscription contract.
• Art. 6(1)(f) GDPR — our legitimate interest in serving non-personalised advertising and in providing the app technically.

10. Recipients and international transfers

The recipients of the data named above are Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and — for purchases through the App Store — Apple Distribution International Ltd., Hollyhill Industrial Estate, Cork, Ireland. Processing in the United States by Google LLC is possible. Google LLC is certified under the EU-US Data Privacy Framework; in addition, standard contractual clauses under Art. 46 GDPR are in place.

11. Retention

Local settings remain until you change them or remove the app. For data processed by Google, Google's retention periods apply; analytics data is deleted there after 14 months at the latest by default.

12. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). You may withdraw consent at any time with effect for the future.

Please use the email address above. Independently of this, you may lodge a complaint with your competent data protection supervisory authority.

13. Children

The app is not directed at children under 16 and does not knowingly collect data from them.

14. This website

This website is provided through Firebase Hosting (Google Ireland Limited). When you visit it, Google processes technically necessary data such as your IP address, the page requested and the time, in order to deliver and protect the site (Art. 6(1)(f) GDPR). The website sets no cookies, loads no fonts or scripts from third parties, and contains no advertising or analytics.

15. Changes

If the app gains features that process data differently, we will update this policy. The date above shows the current version.