Khandaq

Privacy Policy

Last updated: 18 August 2026

1. Introduction & Scope

This Privacy Policy explains how Khandaq ("we," "us," "our") collects, uses, shares, and protects your personal information when you use the Khandaq mobile application (the "App"). It applies to all users of Khandaq, including free and paid tiers.

Privacy is central to how Khandaq is built. Much of the App's design — including our default-anonymous approach to sensitive data — reflects a deliberate choice to give you control over what you share, and with whom.

2. Information We Collect

We collect the following categories of information:

2.1 Account Data

• Username
• Email address (including addresses provided via Apple's Hide My Email or similar private relay services, where you choose to use them)
• Password (stored in encrypted/hashed form — we never store your password in plain text)

2.2 Data Visible to Khandaq by Default

The following information is visible to Khandaq's admin/Lead Raqi as a normal part of operating the App, without requiring any additional opt-in from you:

• Email address
• Username
• Gender
• General location (e.g. country or region-level — not your precise address)
• Your in-app activity, including screener responses, care plan progress, and Timeline/Diary entries

2.3 Optional Shareable Data (Opt-In Only)

The following information is never collected or made visible by default. You may choose to provide it, and to make it visible to us, via an explicit opt-in toggle in your settings:

• Full legal name
• Home address
• Phone number

Unless you switch this toggle on, we do not have access to your full name, address, or phone number — even if you submit a support ticket.

2.4 Usage & App Data

• Your responses to the symptom screener
• Your care plan and progress through it
• Activity and Timeline/Diary entries you choose to record
• General app usage data (e.g. features used, session activity) for the purpose of improving the App

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the App's features, including your personalised care plan;
• Enable the Lead Raqi to review and respond to tickets you submit;
• Communicate with you about your account, purchases, or support requests;
• Send prayer time notifications and reminders you have enabled;
• Maintain the security and integrity of the App;
• Comply with our legal obligations.

We do not sell your personal information to third parties, and we do not use your Timeline/Diary or screener content for advertising purposes.

4. Who Can See Your Information

Data	Visible to Khandaq (admin)	Visible to other users
Email	Yes, always	No
Username	Yes, always	No
Gender	Yes, always	No
General location	Yes, always (country/region-level only)	No
Screener responses, care plan & Timeline	Yes, always	No
Full name, address, phone number	Only if you opt in	No

By default, Khandaq's admin can see your email, username, gender, general location, and your in-app activity (including screener responses and Timeline entries) — but not your full legal name, home address, or phone number. Those three fields are only ever made visible if you explicitly opt in via a toggle in your settings.

The Lead Raqi's access is ticket-scoped: they can see information relevant to a ticket you have actively submitted to them, not a general directory of all app users.

5. Data Storage & Security

We take reasonable technical and organisational measures to protect your personal information against unauthorised access, loss, or misuse, including encryption of sensitive data and access controls limiting who within Khandaq can view user data.

No method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security. If we become aware of a data breach affecting your personal information, we will notify you and relevant authorities as required by applicable law.

6. Third-Party Services

We use the following third-party services to operate Khandaq. Each processes limited data strictly necessary for their function:

• Formspree — used to process waitlist and contact form submissions (email address only) ahead of app launch.
• Apple App Store / Google Play — used to process in-app purchases (Lead Raqi tickets, future Premium subscriptions). Payment card details are handled entirely by Apple/Google and are never seen or stored by us.
• Text-to-speech services (e.g. ElevenLabs) — used to generate narrated guidance content. Where this involves any user-specific data (rather than pre-generated static content), this will be limited to what is strictly necessary to generate that content, and updated in this policy accordingly.
• Analytics (if enabled) — we may use privacy-respecting analytics to understand general app usage patterns. Where used, this will be limited to aggregated, non-identifying usage data where possible.

We require all third-party providers we work with to handle your data securely and in line with applicable data protection law.

7. Promotional & Marketing Use

We may use anonymised, aggregated platform statistics (such as overall app activity trends, total adhkar completed across all users, or general usage metrics) in our public marketing, social media content, and promotional materials. These statistics contain no personally identifiable information.

If you submit user reviews, testimonials, or direct feedback to us, we may display these publicly in our promotional materials.

We will never publicly share your real name, contact details, email address, or private Timeline/Diary entries without your explicit prior consent. Any case studies or user experiences referenced publicly will be fully anonymised and generalised.

8. Your Rights

Depending on your location, you may have the right to:

• Access the personal information we hold about you;
• Correct inaccurate or incomplete information;
• Delete your account and associated personal information;
• Restrict or object to certain processing of your information;
• Export your data in a portable format, where technically feasible.

To exercise any of these rights, contact us at support@khandaq.app. We will respond within a reasonable timeframe and in accordance with applicable law.

9. Data Retention

We retain your personal information for as long as your account remains active, or as needed to provide you the App's services. If you delete your account, we will delete or anonymise your personal information within a reasonable period, except where we are required to retain certain data for legal, regulatory, or legitimate business purposes (such as records of completed purchases).

10. Children's Privacy

Khandaq is not intended for use by anyone under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have inadvertently collected personal information from a child under 16, we will take steps to delete that information promptly.

If you believe a child under 16 has provided us with personal information, please contact us at support@khandaq.app so we can address it.

11. International Data Transfers

Khandaq may be used by individuals outside the United Kingdom, and some of our third-party service providers may process data in countries outside the UK or European Economic Area. Where this occurs, we take steps to ensure appropriate safeguards are in place, in line with applicable data protection law, to protect your information wherever it is processed.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Where changes are material, we will make reasonable efforts to notify you (for example, via an in-app notice or email) before the changes take effect. The "Last updated" date at the top of this page reflects the most recent revision.

13. Contact Information