Privacy Policy

Najma – Prayer Stars · Last updated 12 October 2026

Who we are

Najma is a small app that helps people of all ages, children included, build the habit of praying the five daily prayers on time by earning stars. It is made by an independent developer, who is responsible for your information ("we", "us"). You can reach us at support@demzs.com.

Children

Najma is for everyone, including children. Accounts are for adults, or for anyone old enough to agree to this policy where they live. Children don't have their own accounts: a parent or guardian adds them as a profile in their own account and decides whether they join groups. By adding a child's profile you confirm that you are their parent or legal guardian and that you agree to this policy for them. If we learn that a child under 13 (or the minimum age where they live) has created an account on their own, we will delete it. Please contact us if you think this has happened.

What we collect

InformationWhat exactlyWhy
Account Email address. If you sign in with Google or Apple, the name and email that service shares with us. Passwords are handled by Firebase Authentication and we never see them. Your app language. To sign you in and keep your stars safe on any device.
Profiles A name or nickname (up to 30 characters; for a child, please don't use their full name), a picture chosen from the app's set, time zone, approximate location (rounded to about 1 km), prayer calculation settings and language. To show the right prayer times and work out whether a prayer was on time.
Prayer activity Which prayers were marked, when, and whether on time; stars, streaks and badges. This is what the app is for: counting stars and showing progress.
Prayer status (optional) Whether "Travelling" is on. If "Excused from prayer" is turned on (for days of menstruation or after childbirth): the day it started and, once it is turned off, the first and last day of that most recent pause. Nothing older is kept on our servers, and the reason is never stored. Earlier excused days are kept only on the phone, so its calendar can show them. So travelling prayers can be combined, and so the streak pauses instead of breaking.
Groups (optional) Group name and invite code; each member's name, picture, weekly stars and streak; short progress updates such as "prayed all 5 today"; emoji cheers (clap, star, dua) and which account sent them. So families who share an invite code can cheer each other on.
Technical logs Our servers (run by Google) keep standard request logs, such as IP address and time of request. Security and fixing problems. They expire automatically, usually within 30 days.

What stays on the device

The device's location (when you allow it), prayer reminders and app settings are kept on the phone. Exact location never leaves the device: only a rounded location (about 1 km) is saved in the profile. Reminders are created on the phone itself, so no message is sent from our servers to show them. When location is allowed, Najma checks it when opened so it can offer to update prayer times after you travel; this check happens on the phone.

Place names and search

To show the name of a place, find a city you type, and pick that country's usual calculation method, Najma uses the phone's built-in place service (Google on Android, Apple on iPhone). It receives only the rounded location or the words you type, and handles them under Google's or Apple's privacy policy. Nothing else about you is sent with it.

What we don't collect

No advertising, no analytics or tracking tools, no contacts, photos, camera or microphone, no free-text chat and no payments. We do not build profiles for advertising and we do not sell personal information.

Who can see it

How long we keep it

We keep your information while the account exists. When you delete the account, the account, every profile on it, all stars and history, group memberships and progress updates are erased straight away. A group that has no members left is deleted entirely. When a profile leaves a group, it is removed from its member list; updates already posted there stay until the account is deleted. Server logs expire on their own, usually within 30 days.

Your choices and rights

Where laws such as the EU/UK GDPR apply, we use your information because it is needed to provide the app you asked for, and for children's data, with the consent of their parent or guardian. In the United States we follow the Children's Online Privacy Protection Act (COPPA).

Keeping it safe

All data is encrypted in transit and at rest. Access rules on our servers make sure each account can read only its own information and its groups, and stars are worked out on the server so they can't be changed from the app. No system is perfectly secure, but we work to protect your information and will tell you if something goes wrong that affects you.

Changes to this policy

If we change this policy we'll update the date above, and for important changes we'll tell you in the app before they take effect.

Contact

Questions or requests: support@demzs.com.