Its Doable Privacy Policy

What we collect

Account information — such as your email address, name, and profile photo, used for authentication and account management through our provider Clerk.
Approximate location — used on your device to calculate prayer times and Qibla direction. We do not maintain a server-side record of your location.
Purchase information — when you subscribe, the purchase is handled by Apple or Google and our subscription provider RevenueCat, referenced by a pseudonymous user identifier. We do not receive or store your card details. If you enter a creator/referral code, we store that code with your account to credit the creator.
Circle progress — if you choose to create or join a Circle, daily progress numbers (such as prayer completions, streaks, Quran minutes, and dhikr counts) are stored on our servers so they can be shared with your Circle. This only happens with your explicit consent, which you can withdraw at any time by leaving the Circle or deleting your account.
Content you create — plans, journal entries, mood, and similar reflections are stored locally on your device and are not uploaded to our servers, except for limited daily summary numbers where a sync feature requires it.
Basic device information — such as device type and notification tokens, used to operate the app and deliver notifications you have enabled.

How we use data

To sign you in and keep your account working.
To calculate and display prayer times and related features.
To send reminders and notifications you have enabled (you can switch categories off in Settings → Notifications).
To operate optional shared features such as Circles and their leaderboards.
To process and honour subscriptions, and to credit creator/referral codes.
To respond to support requests and keep the service secure.

Where laws such as the EU General Data Protection Regulation (GDPR) apply, we rely on the performance of our contract with you, your consent (for example, for Circle progress sharing), and our legitimate interests in operating and securing the service as legal bases for this processing.

Where data is stored and how it is protected

Most personal app state lives on your device, protected by your device’s built-in encryption. Data that does reach our servers is sent over encrypted connections (TLS) and stored on infrastructure that encrypts data at rest. Authentication tokens are stored securely. Access to server data is restricted and used only to operate the service.

Some of our service providers process data in other countries, including the United States. Where required, such transfers rely on appropriate safeguards, such as standard contractual clauses.

Third-party services

Clerk — authentication and account management.
RevenueCat, Apple App Store, and Google Play — subscription processing and management.
Expo services — notifications and app infrastructure.
Prayer-time and Quran content providers used to deliver app features.

These providers act as processors for us and are bound by their own contractual and security obligations. We do not share personal data with advertisers or data brokers.

How long we keep data

Server-side data is kept while your account is active or while you remain in a Circle, and is deleted when you delete your account. Residual copies in routine backups age out on a rolling basis. Local data stays on your device until you delete it, clear the app’s data, or uninstall the app.

Your rights

Depending on where you live — including under the GDPR (EU/UK) and India’s Digital Personal Data Protection Act, 2023 (DPDP Act) — you may have the right to:

Access the personal data we hold about you, and receive a copy of it.
Correct inaccurate personal data.
Delete your personal data (use Settings → Delete account in the app, or the account deletion page).
Withdraw consent at any time — for example, leave a Circle to stop sharing progress.
Complain to your local supervisory authority (EU/UK) or the Data Protection Board of India.

To exercise any of these rights, email us at the address below. We aim to respond within 30 days. We may need to verify that a request really comes from the account holder before acting on it.

Children

Its Doable is not directed at children. If you believe a child has provided us personal data without the consent required by applicable law, contact us and we will delete it.

Changes to this policy

We may update this policy as the app evolves. Material changes will be reflected on this page with an updated date above. Continued use of the app after a change means the updated policy applies.

Contact & grievance officer

For privacy questions, data requests, or grievances (including under the DPDP Act), contact: raheed.jarqon.app@gmail.com. We aim to acknowledge and address grievances within 30 days.