Privacy Policy

1. Who we are

ruhly ("ruhly", "we", "us") operates the website at ruhly.app and the ruhly mobile app. ruhly is based in Toronto, Ontario, Canada.

We are the organisation accountable for the personal information described here, as that term is used in Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

For any privacy question, to ask what we hold about you, or to have it deleted, email ruhlysupport@gmail.com. We respond within 30 days, which is the deadline PIPEDA sets.

2. What we collect on the website

• Your email address, if you join the waitlist or send us a message.
• Technical details used only for spam prevention — your browser user-agent and a hashed (not stored in plain text) version of your IP address, attached to waitlist signups.
• Contact form submissions — the topic you select, your email address, and your message, so we can reply to you.
• A CSRF cookie, which is a random token used to confirm a form submission came from our own page. It contains no personal information and is not used for tracking.

3. What the app collects

The app collects only what a given feature needs in order to work:

• Account details — the email address or sign-in identifier you register with.
• Your reading activity — passages and hadith you save, which pillars you read to the end, and your reading streak. This is what allows ruhly to choose tomorrow's passage for you rather than sending everyone the same one.
• Location — used to calculate prayer times, the adhan, the fajr alarm and tahajjud timing. You can decline location access; prayer times then rely on a location you set manually. We do not track your movements or keep a location history.
• Preferences — chosen pillars, theme, delivery timing, notification and adhan settings.
• Diagnostics — crash and performance data, so we can fix what breaks.

4. Consent, and how to withdraw it

We rely on your consent. Joining the waitlist is your express consent under Canada's Anti-Spam Legislation (CASL) to receive email from us about ruhly's launch. Granting location access in the app is your consent to use it for prayer times.

You can withdraw consent at any time. Every email we send carries a working unsubscribe link and identifies us as the sender. You can revoke location access in your device settings, and the rest of the app continues to work. Withdrawing consent does not affect processing that already happened.

5. Payments and donations

ruhly+ subscriptions are billed by Apple through the App Store, and will be billed by Google through Google Play when Android ships. We never see or store your card details.

Sadaqah donations go directly to the charity you choose, through that charity's own payment provider. ruhly does not hold, route, or take a cut of donated money, and we do not receive your payment details.

6. Who we share data with

We do not sell your personal information, and we do not disclose it for advertising. We use a small number of service providers to operate ruhly:

• Supabase — database and authentication hosting.
• PostHog — product analytics.
• Railway — website hosting.
• Apple, and Google when Android ships — app distribution, subscription billing and push notification delivery.

Each is bound to use the information only to provide its service to us. We may also disclose information where Canadian law requires it, or where it is necessary to protect someone's safety.

7. Where your data is processed

Our service providers may store and process personal information outside Canada, including in the United States and the European Union. PIPEDA permits this, and we are accountable for the information while it is in their care.

You should know that information held in another country may be accessible to that country's courts, law enforcement and national security authorities under its own laws. If you would rather not have your information processed outside Canada, please do not use ruhly, because we cannot currently operate it any other way.

8. How long we keep it

• Waitlist emails: until launch, or until you unsubscribe or ask us to remove you.
• Account and reading data: while your account is active, and for up to 30 days after you delete it, so an accidental deletion can be reversed.
• Analytics: retained on PostHog's standard retention schedule.
• Support emails: up to two years.

9. Your rights

Under PIPEDA you have the right to ask what personal information we hold about you, why we have it, and who we have disclosed it to. You can ask us to correct anything inaccurate, and to delete it.

Email ruhlysupport@gmail.com and we will action it within 30 days. Deleting your account in the app also works, and removes your data on the schedule in section 8.

If you are not satisfied with how we handle your request, you may complain to the Office of the Privacy Commissioner of Canada. If you are in Quebec, you have additional rights under Law 25, including data portability. If you are in the UK or EU, the GDPR rights of access, rectification, erasure, portability and objection also apply, and you may complain to your local supervisory authority.

10. Children

ruhly is family-friendly and appropriate for children to use. We do not knowingly collect more information from a child than the app needs to function. We do not profile children, and we show no advertising to anyone.

If you are a parent or guardian and believe your child has provided information you would rather they had not, email ruhlysupport@gmail.com and we will delete it.

11. Security

Data is encrypted in transit. Access to the database is restricted, and the waitlist cannot be read from the browser. No system is perfectly secure, but the most reliable protection is not collecting information we do not need, and we have designed ruhly that way.

If a breach creates a real risk of significant harm to you, we will notify you and the Office of the Privacy Commissioner as PIPEDA requires.

12. Changes

If we change this policy in a way that materially affects you, we will say so in the app or by email rather than quietly editing this page. The date at the top always reflects the current version.