Last Updated: September 4, 2026

Effective Date: September 4, 2026

Last Updated: September 4, 2026

Ebadah is operated by EQ Enterprises Inc. (“Ebadah,” “we,” “us,” or “our”), a company based in Edmonton, Alberta, Canada. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use the Ebadah mobile application, our website (ebadah.app), and related services (collectively, the “Services”).

We built Ebadah to help you reclaim your time and attention through intentional acts of worship, and we take the trust you place in us — your amanah — seriously when it comes to your personal information.

By using Ebadah, you agree to the collection and use of information as described in this Privacy Policy. If you do not agree, please do not use the Services.

1. Information We Collect

Account Information

When you create an account, we collect:

Name
Email address
Age range
Password, managed securely through our authentication provider and never stored in plain text

App Activity and Worship Data

To provide the core Ebadah experience, we collect:

Salah (prayer) completion
Quran reading and listening sessions
Dhikr sessions
Istighfar sessions
Tokens earned and spent
Unlock activity and blocked-app settings
Streaks and progress statistics
App settings and preferences
Screen time associated with blocked apps, used to calculate unlock timing and progress

This information is used to operate the app, show your progress, and personalize your experience — for example, adapting your unlock settings to your current habits.

Blocked Apps and Screen Time

Ebadah requires certain device permissions to block selected apps and manage unlock timing. On Android, the app may read your list of installed apps locally so you can choose which apps to block; this list is not sent to our servers and is not used to identify you or contact other users. On iOS, blocked app selections are managed through Apple’s FamilyControls / ManagedSettings framework and never leave your device. Depending on your device, Screen Time, Usage Access, Accessibility, Notifications, and Background Activity permissions may be required, and are used only for app blocking, unlock timers, reminders, focus management, and token functionality.

Support Requests

If you contact us for support, bug reports, or feedback, we may collect your name, email address, and the content of your message. We use this information to respond to you and improve Ebadah.

Diagnostic and Analytics Data

We use PostHog, a product analytics platform, to understand how Ebadah is used and to improve reliability. This may include onboarding responses, completed prayers, Quran / Dhikr / Istighfar session events, tokens earned and spent, app unlock events, device model, operating system version, app version, and diagnostic or crash logs.

2. Information We Do Not Collect

Ebadah does not collect:

Precise location
Contacts
Photos or camera access
Microphone access
SMS or call logs
Health or medical data
Financial account information
Government identification numbers

3. How We Use Your Information

We use your information to:

Create and manage your account
Provide core app functionality, including app blocking, unlocking, and tokens
Track your worship activity and progress
Personalize your experience and unlock settings
Provide insights available with Premium
Maintain and improve app performance and reliability
Respond to support requests
Maintain the security of the Services and prevent fraud or abuse
Communicate important account or service updates
Comply with legal obligations

4. Emails and Communications

We may send emails related to account verification, password resets, support responses, and important service updates — these are necessary to operate your account and cannot be opted out of while your account is active. If we send newsletters, marketing emails, or announcements, you may unsubscribe from those at any time.

5. Subscriptions and Payments

Ebadah offers an optional Premium subscription. Subscriptions are billed and processed by Google Play or the Apple App Store, with subscription status and entitlement managed on our behalf through RevenueCat. We do not collect or store your credit card number, banking information, or payment credentials — these are handled directly by the applicable app store. Pricing, billing cycle, and cancellation are governed by the terms of the platform through which you subscribed.

6. Third-Party Services

We use trusted third-party service providers to operate Ebadah, including:

Supabase, for authentication and database services
Amazon Web Services (AWS), for cloud hosting infrastructure
PostHog, for product analytics
RevenueCat, for subscription management and purchase validation
Resend, for sending account verification, password reset, and other transactional emails
Quran API and content providers (including api.quran.com, everyayah.com, and the Quran Flutter package), for Quran text and audio
Google Play and Apple App Store, for app distribution and purchases

These providers act as our service providers and may process your information only as needed to provide their services to us, subject to confidentiality and security obligations.

7. Cookies and Website Analytics

Our website (ebadah.app) uses Google Analytics to help us understand website traffic, such as which pages are visited and how visitors arrive at our site. Google Analytics uses cookies, which are small text files stored on your device, to collect this information.

Where required by law — including for visitors in the European Economic Area and United Kingdom — we will ask for your consent before setting non-essential analytics cookies, and you can decline or withdraw consent at any time. You can also control or disable cookies through your browser settings, though this may affect how parts of our website function. Google’s use of information collected through Google Analytics is governed by Google’s own privacy policy.

The Ebadah mobile application does not use browser cookies; app usage data is collected through PostHog as described in Section 1.

8. International Data Transfers, Storage, and Security

Ebadah is based in Canada, but your information is stored and processed on servers located in the United States (AWS, us-east-2 / Ohio region). This means your information may be accessed, stored, and processed outside of your country of residence, including in the United States, which may have data protection laws different from those of your jurisdiction.

Where required by applicable law — for example, for users in the European Economic Area or United Kingdom — we rely on appropriate safeguards for these transfers, such as Standard Contractual Clauses, and take steps to ensure your information continues to be protected to a standard consistent with this Privacy Policy.

We protect your information using:

Supabase Auth for authentication, with passwords securely hashed and never stored in plain text
Encryption of data at rest and in transit
Row-Level Security (RLS), so each user can only access their own records

No method of transmission or storage is 100% secure, but we take reasonable, industry-standard steps to protect your information.

9. Data Retention

We retain personal information only as long as necessary to provide Ebadah, maintain business records, comply with legal obligations, resolve disputes, and enforce our agreements. Activity data tied to your account is generally retained for as long as your account remains active, and is deleted as described in Section 10 upon account deletion.

10. Account Deletion

You can delete your account directly within the app. When you delete your account:

Your account is immediately disabled
Your personal information and associated account data are permanently deleted within 30 days
Some information may temporarily remain in encrypted backups before being securely overwritten as part of our normal backup retention process
Where required or permitted by law, we may retain limited information for legal, security, fraud prevention, or regulatory compliance purposes

If you need help deleting your account, contact us at contact@ebadah.app.

11. Children’s Privacy

Ebadah is intended for users aged 13 years and older. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information. If you believe a child under 13 has provided us with personal information, please contact us at contact@ebadah.app.

12. No Sale of Personal Information; Advertising

We do not sell your personal information, and we do not sell or monetize your spiritual activity or worship data. We may introduce advertising within the Services in the future; if we do, we will not sell your personal information or worship activity to advertisers, and we will update this Privacy Policy before any such change takes effect.

13. Your Privacy Rights

13.1 All Users

Regardless of where you live, you may contact us to:

Request access to the personal information we hold about you
Request correction of inaccurate information
Request deletion of your account and personal information (see Section 10)
Object to certain uses of your information
Withdraw consent where processing is based on consent, such as marketing emails

Contact contact@ebadah.app to exercise these rights. We will respond within a reasonable time and in accordance with applicable law.

13.2 European Economic Area and United Kingdom (GDPR)

If you are located in the European Economic Area or United Kingdom, EQ Enterprises Inc. acts as the data controller for your personal information. Our legal bases for processing include performance of a contract (providing the Services), our legitimate interests (improving and securing the Services), your consent (for example, optional marketing emails), and compliance with our legal obligations.

Subject to applicable law, you have the right to:

Access, rectify, or erase your personal data
Restrict or object to our processing of your data
Receive your data in a portable format
Withdraw consent at any time, without affecting processing that occurred before your withdrawal
Lodge a complaint with your local data protection supervisory authority

13.3 California (CCPA/CPRA)

If you are a California resident, you have the right to:

Know what personal information we collect, use, and disclose
Request deletion of your personal information
Request correction of inaccurate personal information
Opt out of the “sale” or “sharing” of personal information — we do not sell or share your personal information for cross-context behavioral advertising
Not be discriminated against for exercising these rights

The categories of personal information we collect are identifiers (such as name and email) and app/internet activity (such as worship activity and usage data) as described in Section 1. We do not sell or share this information as those terms are defined under the CCPA/CPRA.

To exercise these rights, contact contact@ebadah.app. We may need to verify your identity before completing your request, and you may designate an authorized agent to submit a request on your behalf.

13.4 Canada (PIPEDA)

As a Canadian company, we handle your personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws. You may request access to, or correction of, your personal information, or file a complaint with the Office of the Privacy Commissioner of Canada.

14. Religious Guidance Disclaimer

Ebadah is a productivity and habit-building tool intended to encourage acts of worship. It is not intended to provide religious rulings, professional advice, or replace guidance from qualified scholars or professionals.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make changes, we will update the “Last Updated” date above, and where changes are material, we will provide additional notice, such as an in-app notice or email. Your continued use of Ebadah after any changes means you accept the updated Privacy Policy.

16. Contact Us

If you have questions about this Privacy Policy or how your information is handled, contact us at:

EQ Enterprises Inc. (operating as Ebadah)
Edmonton, Alberta, Canada
Email: contact@ebadah.app
Website: https://ebadah.app

This Privacy Policy works together with our Terms of Service, available at https://www.ebadah.app/terms-of-service.

‍