SUNNAH HABIT

Privacy Policy

Effective date: 14 July 2026

App: Sunnah Habit (Android/iOS)

Provider: Next Tech Labs ("we", "us")

Contact: support@nextechlabs.tech

Sunnah Habit helps you build and track sunnah habits and daily prayers. This policy

explains, in plain language, exactly what data the app handles, why, and what your

choices are. We collect the minimum needed to run the app — no ads, no tracking, no

sale of data.

What we collect

Account data. When you sign up we collect your email address and a

display name, and you may optionally add an avatar image. Your password is

used to authenticate you; we never see or store it in plain text.

Habit and prayer tracking data. The core of the app: the habits you choose to

track, your check-ins, prayer logs, streaks, and the points (XP) you earn. This data

is stored on our servers, which are hosted with Hostinger in Mumbai, India, and

backed up to a second Hostinger server in Kuala Lumpur, Malaysia (see

"Where your data is stored" below).

Nothing else. We do not collect contacts, photos (other than an avatar you choose

to set), advertising identifiers, or browsing data. The app contains no advertising or

analytics/tracking SDKs.

Religious-practice data — and your explicit consent

Because Sunnah Habit tracks prayers and sunnah practices, your tracking data reveals

your religious practice. Under the EU/UK GDPR this is **special-category data

(Article 9). We process it only on the basis of your explicit consent

(Article 9(2)(a))**, which we ask for when you create your account. You can withdraw

that consent at any time by deleting your account (see "Deleting your data" below),

which removes the data itself.

Where your data is stored (international transfers)

Our servers are provided by Hostinger and are located in Mumbai, India.

Nightly database backups are copied to a second Hostinger server in **Kuala Lumpur,

Malaysia**, and our host also keeps its own server-level backups in Malaysia. Crash

reports go to Sentry's EU (Germany) region.

This means that if you are in the European Economic Area or the UK, your data —

including your religious-practice data — is transferred outside the EEA/UK to

India and Malaysia. Neither country currently benefits from an EU "adequacy decision".

We ask for your explicit consent when you create your account, and that consent

covers this transfer (GDPR Article 49(1)(a)); you can withdraw it at any time by

deleting your account. You should be aware that these countries' data-protection laws

may not offer the same level of protection as EU law, and that public authorities

there may have different rights of access to data.

If you are not comfortable with this, please do not create an account.

Location

If you grant location permission, it is used only on your device to calculate

local prayer times. Your location is never transmitted to us or to anyone else

the calculation happens entirely on the phone.

Crash reporting

We use Sentry (crash-reporting service, EU data ingestion) so we can fix crashes.

Crash reports contain technical information — stack traces, device model, OS version —

and are not linked to your account; we do not attach your name, email, or user ID

to them. A crash report can incidentally include data present in the error itself, but

we do not use crash data for anything except fixing bugs.

What other users can see

The leaderboard shows your display name, avatar, and XP totals to other users of

the app. If you'd rather compete anonymously, turn on the anonymity toggle in your

profile — other users then see you as anonymous. Your habits, check-ins, and prayer

logs are private to you and are never visible to other users.

What we don't do

parties for their own purposes. The only third-party processor is Sentry (crash

reports, described above).

Deleting your data

You can delete your account and all its data in the app: **Profile → Edit →

Delete account**. Deletion is immediate and permanent: your account, habits, logs,

streaks, XP, and leaderboard entries are removed from our live systems right away.

If you can't access the app, see https://sunnah.nextechlabs.tech/delete-account or

email support@nextechlabs.tech with the subject "Delete my account" from your

account's email address.

Exporting your data

You can request a copy of your data (account details, habits, and logs) by emailing

support@nextechlabs.tech. We'll provide it in a machine-readable format within

30 days.

How long we keep data

history is the product).

immediately.

14 days after they are taken, so data you delete disappears from backups within

14 days at the latest. Backups are transferred over an encrypted (SSH) connection

and are used only for disaster recovery — never to restore a deleted account.

Data cached on your own device (for offline use) stays on the device and is removed

when you sign out, delete your account, or uninstall the app.

Children

Sunnah Habit is not directed at children under 13, and we do not knowingly collect

data from them. If you believe a child under 13 has created an account, contact us

and we will delete it.

Your rights

Depending on where you live (e.g. under GDPR), you have the right to access, correct,

export, or delete your data, to withdraw consent, and to complain to your data

protection authority. Most of these you can do directly in the app; for anything else,

email support@nextechlabs.tech.

Changes to this policy

If we change this policy in a way that matters, we'll update the effective date above

and notify you in the app before the change applies.