meowslimah

Privacy Policy

Last updated: 7 June 2026 · App: com.raiyanasaral.meowslimah

meowslimah is built around a single principle: your data stays on your device. We do not collect, transmit, sell, or share any of your personal data. There are no ads, no trackers, no third-party analytics, and no cloud sync in this version of the app. The app makes outbound network requests only for narrow, user-initiated content downloads — Qur'an recitation audio when you tap Stream or Download in the reader, Hisnul Muslim du'a recitation audio when you tap Play on a du'a or Download all du'a audio in Settings, and Mushaf pack archives when you opt in to Page Mode from Settings. Qur'an recitation downloads can cover the current surah or the whole selected reciter, and saved recitations can be reviewed or deleted from Settings → Worship & reading → Qur'an audio. This document explains exactly what that means and the few specific exceptions where information may leave your device — always at your direction, never automatically.

What data does meowslimah collect?

None that leaves your device.

The app stores the following on your device only:

Prayer logs, fasting logs, journal entries, gratitude entries, goals, notes, and reminders
Du'a favorites, Qur'an reading progress, and 99 Names progress
Your selected city (for prayer-time calculation), madhab, calculation method, and voice preference
App settings (notifications, biometric unlock, theme)
Your Khalwah (private journal) entries — encrypted at rest using your device's secure keystore (iOS Keychain / Android Keystore)

We have no servers. Nothing on this list is transmitted to us or any third party.

What permissions does meowslimah request, and why?

Permission	Why	Who sees the data
Location (approximate)	To calculate accurate prayer times and Qiblah direction for your area, on your device.	Only your device. The location is used by an offline calculation library and is never sent anywhere.
Notifications	To send local reminders (prayer times, daily reflections you opted into).	Only your device. Notifications are scheduled locally; no server is involved.
Biometric (FaceID / fingerprint)	To unlock the Khalwah private-journal area, if you enable this option.	Your device's biometric subsystem only. We never receive your biometric data.
Internet	To stream and download Qur'an recitation audio from public CDNs when you tap Stream or Download in the Qur'an reader, including current-surah downloads and user-initiated whole-reciter downloads; to fetch Hisnul Muslim du'a recitation audio from `www.hisnmuslim.com` when you tap Play on a du'a or tap Download all du'a audio in Settings → Worship & reading → Du'a audio; and to download optional Mushaf pack archives for Page Mode reading from meowslimah's content CDN when you tap Download on a pack in Settings → Worship & reading → Mushaf packs.	The CDN or host serving the audio file or Mushaf pack archive (see below). The app sends only the standard HTTP request — no identifiers, no analytics.

Does meowslimah ever connect to the internet?

Yes, in five specific places — all narrow, all initiated by you:

Qur'an recitation audio. When you tap Stream or Download in the Qur'an reader, the app fetches the requested surah or reciter audio MP3s from one of two public Qur'an CDNs:
- audio.qurancdn.com (operated by Quran Foundation / QUL — for Mishary Al-Afasy, As-Sudais, and Al-Shatri)
- www.everyayah.com (BunnyCDN — for Minshawi, Al-Husary, Yasser Al-Dossary, and Aziz Alili)
The CDN sees only the standard information present in any HTTP request — your IP address, your device's user-agent string, and the URL of the audio file you requested. We do not add identifiers, account tokens, analytics pixels, or anything that ties the request to your meowslimah profile (there is no profile to tie it to). We do not operate either CDN; their server-side logs are governed by their own operators' policies. You can download the current surah or the whole selected reciter for offline listening; whole-reciter downloads are large, user-initiated foreground passes with visible progress and a Cancel control. Once audio is downloaded it stays on your device, future playback uses the local copy with no further network calls for those saved files, and you can review or delete saved recitations by reciter from Settings → Worship & reading → Qur'an audio.
Hisnul Muslim du'a audio. When you tap Play on a du'a that includes recitation audio, the app may fetch that MP3 from:
- www.hisnmuslim.com (for Hisnul Muslim du'a recitations)
The request is a plain HTTPS GET. The host sees only the standard information present in any HTTP request — your IP address, your device's user-agent string, and the URL of the audio file you requested. We do not add identifiers, account tokens, analytics pixels, or anything that ties the request to your meowslimah profile. Du'a audio is user-initiated only: no autoplay, no background prefetch, no silent retries, and no telemetry.
You can also download every du'a recitation at once for offline listening: Settings → Worship & reading → Du'a audio → Download all du'a audio fetches all the bundled du'a recitations from www.hisnmuslim.com in a single user-initiated pass (about 120 MB) with visible progress you can cancel. It is whole-library only (there is no per-du'a or per-category download), never automatic, never in the background, with no silent retries and no telemetry. The downloaded audio is cached on your device in a folder that is excluded from device and cloud backups and is not part of the in-app export; once downloaded, du'a playback uses the local files with no further network calls. You can delete all of it anytime from the same screen.
Qur'an Page Mode pack downloads. Page Mode renders the Qur'an in printed-Mushaf page-by-page layout (the same format as a physical mushaf). To keep the install size small, each Mushaf edition is an optional pack you download once from Settings → Worship & reading → Mushaf packs. When you tap Download on a pack, the app fetches a single archive — about 2 MB for the KFGQPC Nastaleeq 15-line pack and about 46 MB for the KFGQPC V1 Madani 1405 pack at V1 — from a CDN we operate:
- meowslimah-assets.raiyanasaral.com (Cloudflare R2 — for Mushaf pack archives)
The request is a plain HTTPS GET. The CDN sees only the standard HTTP request — your IP address, your device's user-agent string, and the archive URL. We do not add identifiers, account tokens, or analytics pixels. The pack archive is sha256-verified at download and per-file on extraction; once verified, Page Mode reading uses the local files with no further network calls — no per-page fetches, no background prefetch, no silent retries. The upstream Qur'an layout and glyph data inside each archive comes from the King Fahd Glorious Quran Printing Complex (KFGQPC) and is aggregated by the Quranic Universal Library / Tarteel AI; those upstream services are contacted only at build time by us, never by your device.
Bug reports (only when you initiate one). Settings → Report a bug opens a screen that previews the diagnostic information attached to your report: app version and build, device manufacturer and model, OS name and version, locale, timezone offset, your voice / gender / madhab / calculation-method preferences, and Android alarm-system signals (battery-optimization status, exact-alarm permission, DND status, pending alarms) — plus the description you type and any screenshot you choose to attach. When you tap Send, your device's browser opens a URL that hands this data to a Cloudflare Worker we operate at meowslimah-bug-report.mraiyanasaral.workers.dev. The Worker then files a GitHub issue in our public issue tracker at github.com/werdoe/meowslimah/issues with the diagnostic block and your description in the issue body. Attached screenshots are uploaded to a public Cloudflare R2 bucket and linked from the issue.
This flow is fully opt-in — it only runs when you explicitly tap Send on the bug-report screen, after you've previewed exactly what will be attached. We use the information only to diagnose the issue you reported. Because the issue is filed in the public repo, please redact anything sensitive (names, locations, prose from your journal, etc.) before sending. If you'd rather email instead, write to [email protected] — same address, private inbox.
Optional outbound links — the app includes occasional links to external Islamic-knowledge sources (currently: islamqa.info, for a referenced fasting fiqh ruling). Tapping a link opens your device's browser. The app itself does not load any web content. Once you leave meowslimah, the destination website's privacy policy applies.
Future versions may include opt-in cloud sync (V3). If and when that ships, this policy will be updated and you will be asked to opt in explicitly. We will never enable sync without your consent.

The app does not contact any meowslimah server, because there is no meowslimah server. Prayer times, Hijri calendar, du'a text, the 99 Names, and the bundled hadith corpus are all calculated or read locally. Du'a audio only leaves the device when you explicitly tap Play on an audio-enabled du'a or tap Download all du'a audio.

Analytics, advertising, and trackers

None.

No Google Analytics, Firebase Analytics, Mixpanel, Amplitude, or other third-party analytics.
No advertising SDKs (no AdMob, no Meta Audience Network, no AppLovin, no IronSource).
No tracking libraries (no Facebook SDK, no AppsFlyer, no Adjust).
No telemetry beacons.

Children's privacy

meowslimah is suitable for users 3 and older per content rating. Because the app collects no personal data from anyone, it does not specifically collect data from children. We comply with the Children's Online Privacy Protection Act (COPPA) and similar regulations by virtue of collecting no data at all.

Your rights and controls

Export your data: Settings → Backup → Export creates a JSON file with your non-sensitive data (Khalwah entries are deliberately excluded from this export).
Delete your data: Uninstalling the app removes all data from your device. There is no server-side data to delete because there is no server.
Withdraw consent: Since we do not collect data, there is nothing to withdraw consent from. You can revoke OS permissions (location, notifications, biometric) at any time in your device settings — the app will gracefully handle reduced functionality.
Bug reports stay opt-in: If you've filed a bug, the issue lives in our public GitHub tracker. You can request deletion or redaction of a specific issue by emailing [email protected].

Changes to this policy

If we ever change this policy — for example, when opt-in cloud sync ships in a future version — we will update the "Last updated" date at the top of this page and notify users in-app before any new data flow begins.

Contact

For privacy questions or concerns, email [email protected].