Privacy Policy

Your settings, saved supplications, reading progress and voice recordings are stored on your phone. Your recordings are never uploaded. Deleting the app deletes this data.

The app asks for microphone access only so you can record your recitation and listen back. Recordings stay on your device.

Supplications, stories and audio are loaded from our content server. Like any web server, it receives your IP address to deliver the files and keeps it in short-lived access logs. We do not use it to identify you. The server is run by a hosting provider in the USA; the transfer is covered by the EU-US Data Privacy Framework.

Legal basis: our legitimate interest in delivering the app’s content (Art. 6(1)(f) GDPR).

The app sends anonymous usage statistics so we can see how many people use DuaKit and how they use it. This includes a random installation ID created on your phone, your operating system and app version, your language setting and when the app was used. It also includes how you use the app: which stories and supplications you opened, saved or finished, how far you read, whether you made a recording or used the memorize mode for a supplication, how long you spent in each part of the app, and how far you got in the introduction. Only counts and yes/no values are sent, never your recordings themselves. We do not learn who you are.

The data is stored on servers in Germany run by a database provider based in the USA. Transfers to the USA are covered by the EU-US Data Privacy Framework and standard contractual clauses. Data is deleted automatically 12 months after the installation was last used.

Legal basis: our legitimate interest in knowing whether and how the app is used, so we can improve the stories and the app (Art. 6(1)(f) GDPR). The statistics are not linked to your name, so we cannot find or delete your data on request (Art. 11 GDPR). Deleting the app stops all further data; what has been sent expires after 12 months.

If the app crashes, an error report is sent to an error reporting service so we can fix the problem. It contains the error, technical details such as app version, device model and operating system, and a short session signal so we can see how many users are affected. The service receives your IP address with each report and derives from it the country the report came from. The app itself never asks for your location. Screenshots, the text you were reading and your recordings are never included.

The service is run by a US company and stores the data in Germany; transfers to the USA are covered by the EU-US Data Privacy Framework and standard contractual clauses. Reports are deleted after 30 days.

Legal basis: our legitimate interest in keeping the app stable (Art. 6(1)(f) GDPR). You can object at any time by turning off “Anonymous crash reports” under Profile → App → App Settings. The change takes effect the next time you open the app; from then on no reports are sent.

If you write to us through the contact form or by email, we use your message and email address only to reply to you. Messages are delivered through an email service provider in the USA (standard contractual clauses) and stored in our mailbox in the EU. We keep them as long as needed to answer and for up to 12 months afterwards.

Legal basis: our legitimate interest in answering your request (Art. 6(1)(f) GDPR).

This website sets no cookies. To see how many people visit, we use a privacy-friendly analytics service hosted in the EU. It counts page views without cookies and without following you across sites; your IP address is turned into a daily, anonymous number that cannot be traced back to you.

Our hosting provider is based in the USA (EU-US Data Privacy Framework) and processes your IP address to deliver the pages.

Legal basis: our legitimate interest in running and improving the website (Art. 6(1)(f) GDPR).

Some photos on this website, in the app and in our store listings come from stock photo services and are used under their licenses. They are served from our own servers, so viewing them sends no data to those services.

Bassam Mednini, salam@duakit.com.

Under the GDPR you can ask us for access to your data, correction, deletion, restriction of processing and data portability, and you can object to processing based on legitimate interest. You also have the right to complain to a data protection supervisory authority. Write to salam@duakit.com.

We update this policy when the app changes. The date at the top shows the latest version.

Write to salam@duakit.com. Our full contact details are in the Legal Notice.