Privacy

Last updated: 9 November 2026

Ebru keeps your prayer data on your device. A server is only involved if you explicitly turn on the Friends feature.

1. Controller

Umut Resit Ungan

Email: support@ebruapp.com

2. What stays on your device

• prayers you have ticked off, streaks, Kaza entries and learning progress
• your name in the app, your profile picture and your settings
• your posture variant and your language

This data does not reach us. You choose a profile picture yourself through the photo picker; it is stored only in the app on your device. If you delete the app, this data is gone.

3. Location and Qibla

Ebru uses your location only if you allow it, and only while the app is open. Your device uses it to calculate prayer times and the direction of the Kaaba. The coordinates are stored on your device and are not sent to us or to Supabase.

To turn coordinates into a place name, or to find a city you type in, the app uses your operating system's location service. Your coordinates or search term may be sent to Apple (iPhone) or Google (Android) for this. You can also enter your place by hand instead of allowing location access.

4. Notifications

The app schedules prayer time reminders locally on your device. Nothing is sent to us for this. Only if you use the Friends feature are there also push notifications (see section 5).

5. Friends feature (optional)

This feature is off by default. Only when you tap "I agree" on the consent screen does the app connect to the server and create an anonymous account with no email, phone number or password. Because your daily status can reveal your religious practice, we treat it as a special category of personal data.

Legal basis: your explicit consent, Art. 6(1)(a) and Art. 9(2)(a) GDPR. You can withdraw it at any time, with effect for the future, by deleting your account.

What is stored on the server

• a random account ID
• the name you enter for this feature, and your colour
• app language, time of consent, whether you have Premium, and your setting for friend notifications
• for each prayer day, only "completed" (all five prayers) or the withdrawal of that status
• friendships, shared streak, longest streak and streak protection used
• invite codes (valid for 7 days) and attempts to redeem a code (protection against guessing, kept for about 1 day at most)
• greetings sent, from fixed texts only; free-text messages do not exist
• your push token, if you allow notifications

What is never sent

Which prayer you performed and when, how many prayers you ticked off on a day, your location and your profile picture.

Who sees what

Only people you are friends with through an invite code can see your name, your colour, your completed days from the last 35 days and your shared streak. There is no public profile, no search and no leaderboard. Friends cannot see your push token or settings.

Push notifications

Friend notifications contain the name and a fixed text, for example "… completed the day." They are delivered through Expo's push service and then through Apple or Google.

Retention and deletion

Whenever you report a day, the server deletes your daily statuses and greetings older than 35 days. If you stop reporting days, the existing entries remain until you delete your account. The shared streak number remains for as long as the friendship does.

With Delete account you remove your account and all related data from the database immediately.

6. Subscriptions

Purchases and subscriptions are made through Apple's App Store. We do not receive payment details. Apple processes them under its own responsibility. The legal basis is performance of a contract, Art. 6(1)(b) GDPR.

We use RevenueCat to manage subscriptions. RevenueCat receives a random user identifier, details of your purchases and technical device data so that your subscription can be recognised and restored.

7. App updates

The app asks Expo's service for updates. This transfers technically necessary data such as IP address, app version, platform and a random installation identifier. The legal basis is our legitimate interest in an up-to-date and secure app, Art. 6(1)(f) GDPR.

8. Recipients and locations

With providers outside the EU, data may be transferred to third countries, in particular the USA.

9. No tracking

Ebru contains no advertising, tracking or analytics SDKs and does not build advertising profiles. This website also uses no cookies, no analytics and no advertising services.

10. This website

This site is hosted on GitHub Pages (GitHub Inc., USA). When you visit, GitHub processes technically necessary data such as your IP address. Fonts and images are served from this same site. The legal basis is Art. 6(1)(f) GDPR.

11. Your rights

You have the right of access, rectification, erasure, restriction, data portability and objection, as well as the right to withdraw consent. Write to support@ebruapp.com. You can also complain to a data protection authority, for example the Bavarian State Office for Data Protection Supervision (BayLDA).

12. Children and teenagers

The Friends feature is intended for people aged 16 and over. Younger users need their parents' consent.

13. Changes

If the app changes, we will update this policy. The version published here applies.