Privacy Policy · Jannah: Your Path To Allah

Jannah: Your Path To Allah is a prayer-times and worship app for Android, published on Google Play as com.allahpolice.app by Trinetra Super App of Avacado Pvt Ltd. This policy covers that app and this website, and nothing else.

Throughout this policy, “we”, “us” and “our” mean Trinetra Super App and Avacado Pvt Ltd, the developer and legal entity behind the app.

We collect as little as the app needs to work, keep most of it on your phone, and do not sell it. The one thing kept on a server is your subscription: whether you have access, and the payments behind it.

What we collect

Phone number

During first-run you give a mobile number. It is stored on your phone, alongside the rest of your settings. We do not send an SMS to it and do not verify it. If you subscribe, it is sent to our server and to Cashfree Payments, our payment provider, because a UPI Autopay mandate has to be registered under a mobile number — it is the number your UPI app shows the autopay against. It is not used for marketing, and it is not what signs you in.

Account

The app signs itself in anonymously with Google Firebase Authentication. That account is an opaque ID and the date it was created. It carries no phone number, no name and no email address, and it exists so the app can recognise the same install across reinstalls for advertising measurement.

Subscription and payments

Jannah is unlocked by a subscription paid through UPI Autopay, or by a promo code. For that our server keeps, against your anonymous account: whether you have access and until when, whether it came from a payment or a promo code, the Cashfree subscription and payment identifiers, the mobile number the mandate was registered under, and a record of each payment and mandate event Cashfree reports. The payment itself is approved in your own UPI app — we never see or store your UPI PIN, bank account or card details.

Location

Prayer times need a place. If you allow location, the app reads an approximate position once, turns it into a city name, and stores coordinates on the device. You can refuse and pick a city yourself. Location is not sent to our servers. On Android, reverse-geocoding may use Google Play services on the device.

Kept only on your phone

Language, gender, hometown and prayer-calculation choices.
Notification preferences and whether menstrual mode is on.
Daily goals, bookmarks and onboarding progress.

These live in the app’s local storage (SharedPreferences). They are not uploaded to us. Neither is anything you read, recite or mark as done — the subscription record above is the only thing we keep.

Advertising and measurement

The app includes the Meta (Facebook) app events SDK, so that installs and in-app milestones can be attributed to the ads that led to them. It reports app installs and app launches, events such as completing sign-up or starting a subscription, and device and advertising identifiers that Meta collects for attribution. Your account identifier is sent with those events so Meta can recognise the same person across reinstalls; your phone number, your location and your worship activity are not sent.

You can stop the identifier being useful for ad targeting from Settings → Privacy → Ads on your phone (“Delete advertising ID”, or “Opt out of Ads Personalisation”).

What we do not collect

We run no crash reporter and show no adverts inside the app. We do not read your contacts, photos or SMS inbox. The gallery wallpapers are public images we host; the app does not upload your pictures. Nothing you read, recite or mark as done is sent anywhere.

Who sees it

Google Firebase

The anonymous account is issued by Google Firebase Authentication, and the subscription record described above is stored in Google Cloud Firestore, in Mumbai, India. Firebase receives no location and nothing you do in the app. Their handling of that data is described in Google’s Firebase privacy policy.

Cashfree Payments

Cashfree Payments processes subscription payments and holds the UPI Autopay mandate. It receives the mobile number you subscribe with and the payment details from your UPI app, under Cashfree’s privacy policy.

Vercel and Upstash

Our server runs on Vercel. Scheduled payment requests pass through Upstash QStash, which carries only internal identifiers, never your number.

Meta Platforms

Meta receives the app events described above — installs, launches, the milestones listed, device and advertising identifiers, and the account identifier — through its SDK inside the app. Meta acts as our measurement provider for advertising. Its handling of that data is described in Meta’s privacy policy.

Google Play

Google Play delivers the app and shows its in-app review prompt. Play services on the device also perform the reverse-geocoding described above. We receive no personal data back from either.

Cloudflare

Gallery photographs are served from a Cloudflare R2 bucket. That request is for a public image file. It does not include your phone number or location.

On-device services

Prayer times are calculated on the device (Adhan). Qibla uses the compass. Athan alerts are local notifications scheduled on the phone. None of those leave the device as a report to us.

Why we hold it

To give this install a stable, anonymous ID.
To keep your number in your profile, on your phone.
To run your subscription: register the UPI Autopay mandate, take the payments you agreed to, and know whether to let you in.
To compute prayer times and Qibla for the place you chose.
To remember settings, goals and bookmarks between launches.
To play the athan at the times you asked for.
To measure which adverts bring people to the app (Meta app events).

Legal bases, where a law asks for one: the phone number and the subscription record are processed to provide the app and the subscription you asked for, and to keep the accounting records the law requires; location is processed with your permission, or from a city you typed yourself; advertising measurement rests on our legitimate interest in knowing which adverts work, and you can limit it with the advertising-ID control above.

How long, and how to delete

Local settings stay on the phone until you clear the app’s data or uninstall it. Uninstalling removes everything stored on that device, but it does not delete your account — and it does not cancel a UPI Autopay mandate. Cancel that first, in the app or in your UPI app.

Your phone number is part of what is stored on the device, so clearing the app’s data or uninstalling removes it. The anonymous Firebase ID stays until you delete it from inside the app, in seconds — see Delete your account for the steps. Payment records — including the number a mandate was registered under — are kept after that for as long as tax and accounting law requires.

To clear what is stored on the device without giving up the anonymous ID, see Delete your data. Revoking location permission stops further reads; the last saved city remains until you change it.

Children

The app is not directed at children under 13, and we do not knowingly collect personal information from them. Subscribing requires being 18 or older. If you believe a child has created an account, write to us and we will delete it.

Changes

If this policy changes in a way that matters, we will update the date at the top of this page. Continued use after that date is acceptance of the new text.

Contact

This app and this policy are the responsibility of the developer named on the Google Play listing:

Trinetra Super App
Avacado Pvt Ltd
Developer of Jannah: Your Path To Allah (com.allahpolice.app)
harshdbugger@gmail.com

Write to that address with any question about this policy, about the data the app holds, or to ask us to delete it. We answer data requests within 30 days.