Legal

Privacy Policy

Last updated: July 27, 2026

1. Who we are

Yah Time (“we,” “us,” or “our”) provides a mobile application and related services that help you track daily prayer watches and streaks (the “Service”). This Privacy Policy explains what information we collect, how we use it, and the choices you have.

Contact: privacy@yahtime.app

2. Information we collect

Depending on how you use Yah Time, we may collect:

Account information: name, email address (when signing in with Google), phone number (when signing in with SMS one-time passcode), profile image if provided by your Google account, and timezone.
Prayer activity: liturgical dates, prayer watch completions (slot indexes), completion timestamps, and streak-related activity derived from those records.
Authentication data: session and refresh tokens (refresh tokens are stored hashed), OTP challenge records (codes are stored hashed), and related security metadata such as expiry and attempt counts.
Technical and device data: approximate device or network information typically included in standard server logs (such as IP address, timestamps, and user agent) when you access our APIs or websites.

We do not sell your personal information. We do not require access to your contacts, photos, microphone, or precise continuous location to use core prayer tracking features.

3. How we use information

Create and secure your account
Authenticate you (Google Sign-In or phone OTP)
Provide prayer history, completion tracking, and streaks
Personalize onboarding (for example, prefilling your name)
Maintain, debug, and improve the Service
Respond to support requests and enforce our Terms
Comply with legal obligations

4. Legal bases (where applicable)

If you are in a region that requires a legal basis for processing (such as the EEA/UK), we process personal data based on: (a) performance of a contract to provide the Service; (b) our legitimate interests in securing and improving Yah Time; and/or (c) your consent where required (for example, certain optional communications).

5. How we share information

We share information only with service providers who help us operate Yah Time, under appropriate safeguards, including:

Google: authentication when you choose Google Sign-In
SMS / OTP providers: to deliver one-time passcodes to your phone (for example, mNotify)
Hosting & database: cloud infrastructure used to store and serve app data (for example, Postgres hosting)

We may also disclose information if required by law, to protect rights and safety, or in connection with a merger, acquisition, or asset transfer (with notice where required).

6. Data retention

We retain account and prayer activity data for as long as your account remains active and as needed to provide the Service. OTP challenges and auth tokens are retained only for short security windows or until revoked. You may request deletion of your account and associated personal data by contacting privacy@yahtime.app. We may retain limited information where required for legal, security, or fraud-prevention purposes.

7. Security

We use industry-standard measures appropriate to the sensitivity of the data, including hashed OTP codes, hashed refresh tokens, short- lived access tokens, and access controls on our APIs. No method of transmission or storage is 100% secure; we encourage you to protect your devices and sign-in methods.

8. Children’s privacy

Yah Time is not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it.

9. Your rights & choices

Depending on your location, you may have rights to access, correct, delete, or export your personal information, or to object to or restrict certain processing. To exercise these rights, email privacy@yahtime.app. You can also stop using the Service and request account deletion.

10. International transfers

We may process and store information in countries other than where you live. Where required, we use appropriate safeguards for cross-border transfers.

11. Third-party links & stores

The App Store and Google Play have their own privacy practices. This Policy covers Yah Time’s collection and use of information through our app and backend services, not Apple’s or Google’s store policies.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the “Last updated” date. Material changes may be communicated in-app or by email where appropriate.

13. Contact

Privacy questions or data requests: privacy@yahtime.app
General support: support@yahtime.app