Sakeena Privacy Policy

1. Who We Are (Data Controller) & How to Contact Us

Sakeena is provided by QidientLabs, operated by QIDIENT GLOBAL LTD ("Sakeena," "we," "us," or "our"). "QidientLabs" is our consumer brand; QIDIENT GLOBAL LTD is the registered legal entity behind it. QIDIENT GLOBAL LTD is the data controller responsible for your personal information under applicable data-protection law, and is the provider of the Sakeena app. QIDIENT GLOBAL LTD is the sole data controller of your personal information; within a paired couple or household, each user controls only their own sharing choices, and no user acts as a controller of another user's data.

For any privacy question, or to exercise your rights, please contact us using the details below. We monitor these mailboxes, read every message, and respond as promptly as we can.

EU representative: If you are in the European Economic Area, you may also contact our data-protection representative appointed under Article 27 of the EU GDPR at garryhill GDPR Services B.V., Museumplein 3, Ede AB, Gelderland, Netherlands (privacy@garryhill-representative.eu, tel +31 20 123 4567). UK representative: If you are in the United Kingdom, you may contact our representative appointed under Article 27 of the UK GDPR at Luke Bailey, 298 Wallisdown Rd, Bournemouth, Dorset BH11 8PN, United Kingdom (representative@garryhill.co.uk, tel +44 1202 535333).

Data Protection Officer: We have assessed whether we are required to appoint a Data Protection Officer under Article 37 of the EU/UK GDPR. Based on the nature and scale of our processing, a mandatory DPO appointment is not required. You can reach our privacy team for any data-protection matter at privacy@sakeenamarriage.com.

• Consumer brand: QidientLabs.
• Provider / data controller: QIDIENT GLOBAL LTD.
• Contact address: Jumeirah Beach Road, Villa 399b, Jumeirah 2, Opposite Jumeirah Beach Park, Gate No. 6, Dubai, United Arab Emirates.
• Contact telephone: +971 55 862 1062.
• Registered in: Federal Republic of Nigeria (registration number 8520851).
• Privacy & data-rights requests: privacy@sakeenamarriage.com
• General support: support@sakeenamarriage.com
• Legal notices: legal@sakeenamarriage.com
• EU Art. 27 representative: garryhill GDPR Services B.V., Museumplein 3, Ede AB, Gelderland, Netherlands (privacy@garryhill-representative.eu, tel +31 20 123 4567)
• UK Art. 27 representative: Luke Bailey, 298 Wallisdown Rd, Bournemouth, Dorset BH11 8PN, United Kingdom (representative@garryhill.co.uk, tel +44 1202 535333)
• Website: https://sakeenamarriage.com
• App Store listing: https://apps.apple.com/app/id6787559144

2. What We Collect and Why

We collect only what we need to run Sakeena, keep your account secure, compute your prayer times, and improve the app. We group it into four categories below.

1) Account information. When you create an account we collect your name, email address, and your role in your marriage (husband or wife). Your password is never stored in readable form — we keep only a bcrypt hash of it. To connect you and your spouse, we use a one-time invite code (couple pairing). You may optionally add profile details such as your anniversary or nikah date and your relationship goals. We use this to create and secure your account, pair you with your spouse, and personalize your experience.

2) Couple content. This is the heart of the app, and it is stored on our servers, strictly isolated per couple using database row-level security. It includes: your Connection Card answers; ibadah logs (salah, Qur'an, dhikr, fasting, sadaqah); couple challenges; shared du'as; reflections; weekly check-ins; issues and repair sessions; memories, including any photos you add; love notes; planned dates; love languages; learning progress; milestones; your notification preferences; and your chosen language/locale. We use this content solely to provide the features you are using and to show it to you (and to your spouse only where you have chosen to share — see the sharing section below).

3) Location — for prayer times and qibla only. If you grant permission, we use CoreLocation to determine your location so we can compute your local prayer times and the qibla direction. We request only coarse (kilometer-level) accuracy, we do this only with your permission, and this location data is never shared or sold. You can decline or revoke this permission at any time in your iOS settings; prayer-time features simply won't be able to localize without it.

4) Usage metadata. We collect privacy-safe metadata about how features are used so we can understand what works and fix what doesn't. This means event names and counts — for example, "opened app," "answered card," or "logged prayer." See the next section for the strict limits on what this can and cannot include.

• Account: name, email, role (husband/wife), password (bcrypt hash only), invite code, and optional anniversary/nikah date and relationship goals.
• Couple content: answers, ibadah logs, challenges, du'as, reflections, check-ins, issues, repair sessions, memories and photos, love notes, dates, love languages, learning progress, milestones, notification preferences, and locale.
• Location: coarse (kilometer) location via CoreLocation, only with your permission, used only for prayer times and qibla.
• Usage metadata: feature-usage event names and counts only.

3. Sensitive Information We Handle With Special Care

Some of what Sakeena handles is, by its nature, sensitive: your religious-practice content (ibadah logs for salah, Qur'an, dhikr, fasting and sadaqah, and your du'as), your role in your marriage (husband or wife), and — if you enable it — your coarse location. Under laws such as the EU/UK GDPR this may be "special category" data, and under the California Privacy Rights Act (CPRA) it is "sensitive personal information" (SPI).

We use this sensitive information only to provide the specific features you have chosen to use — for example, to record and display your ibadah, compute prayer times, or personalize your experience. We do not use it to infer characteristics about you, and we never use it for advertising or for cross-context behavioral advertising. Because we only ever use sensitive information for these permitted, feature-providing purposes, the CPRA "right to limit the use and disclosure of sensitive personal information" is effectively honored by default — there is no additional use to limit.

Where the GDPR requires it, our lawful basis for processing special-category (religious) data is your explicit consent, obtained through a specific, affirmative step before we begin (see "Explicit Consent for Religious-Practice Data" below); you can withdraw that consent at any time by discontinuing the feature or deleting your account.

4. Explicit Consent for Religious-Practice Data

Because your ibadah logs and du'as reveal your religious beliefs and practice, we treat them as special-category data under Article 9 of the EU/UK GDPR. We do not treat merely opening or browsing the app as consent to process this data. Instead, before you first record religious-practice content, Sakeena presents a clear, standalone explanation of what will be logged and why, and asks you to give explicit, affirmative consent — for example, by an unticked opt-in control that you actively confirm. This consent is specific to religious-practice logging, informed, and unambiguous, and it is separate from your acceptance of these terms generally.

Your consent is entirely voluntary, and the rest of the app remains available if you decline. You can withdraw your consent at any time — by turning off the relevant feature, discontinuing use of religious-practice logging, or deleting your account — and withdrawal is as easy as giving consent. Withdrawing consent does not affect the lawfulness of processing carried out before you withdrew it. If you withdraw consent, we stop processing that data for the relevant feature and delete or de-identify it in line with the retention rules below.

• Explicit, opt-in consent is requested before any religious-practice content is logged.
• The consent step is specific, informed, and unambiguous — never implied by simply using a feature.
• You can withdraw consent at any time, as easily as you gave it, without affecting prior lawful processing.

5. Our Strict Line on Analytics: Metadata Only, Never Your Words

This distinction matters to us, so we want to be exact. Our analytics are first-party and in-house — they run on our own servers, and we use no third-party analytics SDKs.

Our analytics record metadata about feature usage: which features are opened and how often, expressed as event names and counts. They do NOT record the content of what you write. We never send the text of your Connection Card answers, notes, reflections, du'as, check-ins, repair-session entries, or any message into analytics. They contain no special-category or sensitive content — knowing that a card was answered is not the same as knowing what it said, and we only ever collect the former.

Because there are no third-party analytics SDKs in Sakeena, this usage metadata is not shared with outside analytics companies. If you are in the EEA or UK, you may object to this metadata processing at any time by contacting privacy@sakeenamarriage.com.

• First-party only, on our own servers. No third-party analytics SDKs.
• We record event names and counts (e.g., "opened app," "answered card," "logged prayer").
• We never record the content of your answers, notes, reflections, du'as, or messages — and no special-category content.
• You can object to this metadata processing at any time.

6. Sharing Between Spouses — Opt-In, Granular, and Isolated

What you record in Sakeena is yours by default. Sharing any of it with your spouse is opt-in and granular — you decide, item by item, what your spouse can see. For example, sharing your salah log with your spouse is OFF by default; it becomes visible only if and when you choose to turn it on.

We honor the boundaries of a plural marriage. Co-wives never see each other's data. Each spouse's private content stays private unless that spouse has specifically chosen to share it, and our per-couple isolation and sharing controls are built to keep it that way.

Outside of the sharing you turn on, we do not disclose your personal information to third parties except as needed to run the app (see "Payments" and "Service Providers"), or where we are legally required to do so.

• Sharing is off by default and controlled item-by-item.
• Salah sharing with your spouse is OFF unless you enable it.
• Co-wives in a plural marriage never see one another's data.

7. Payments and Subscriptions

Sakeena is free to download and use with core functionality, with an optional auto-renewable subscription ("Sakeena Premium") that unlocks premium features. Subscriptions are purchased and processed by Apple, with subscription status managed through RevenueCat. We never see or store your card number or other payment details — those are handled entirely by Apple.

Subscription tiers are: Standard — Weekly (1 week) US$12.99 and Annual (1 year) US$129.99; and Plural (for households with more than one marriage) — Weekly US$19.99 and Annual US$159.99. Prices vary by storefront, and the exact price applicable to you is always shown in the app before you purchase.

We receive only what we need to know whether your subscription is active (for example, your subscription status and entitlement), so we can unlock the features you've paid for. Apple's and RevenueCat's own privacy terms govern their handling of your payment information.

• Free to download; optional auto-renewable subscription.
• Payments are handled by Apple; subscription status is managed via RevenueCat.
• We do not see or store your card or payment details.
• We receive only your subscription/entitlement status.

8. Advertising and Tracking — No IDFA, No Cross-App Tracking

We do not collect the IDFA (Apple's advertising identifier), and we do not track you across other companies' apps or websites. There is no cross-app tracking and no fingerprinting in Sakeena.

If we ever run install ads to help other Muslim couples find Sakeena, we use only Apple's privacy-preserving SKAdNetwork, which reports results in aggregate — with no per-user identifier and no fingerprinting. If we ever add any attribution or measurement technology beyond aggregate SKAdNetwork, we will update this policy and our App Store privacy disclosures before doing so.

• No IDFA collection.
• No tracking across other companies' apps or websites; no fingerprinting.
• Any install ads use Apple's aggregate SKAdNetwork only.

9. Cookies and Local Storage

Our website at sakeenamarriage.com sets no cookies and loads no third-party resources — no third-party scripts, fonts, pixels, or trackers. Because we place nothing on your device that is not strictly necessary and we run no analytics or advertising trackers on the site, no cookie-consent banner is required under the EU ePrivacy Directive or the UK Privacy and Electronic Communications Regulations (PECR).

The app itself stores your login token securely on your device in the iOS Keychain and keeps limited local data needed to function; this is not used for advertising or cross-site tracking. If we ever introduce cookies, analytics, or any non-essential trackers on the website or app in the future, we will first put in place a compliant consent mechanism and obtain your consent where the law requires it before any such technology is set.

• The website sets no cookies and loads no third-party resources.
• No consent banner is required because we run no non-essential trackers.
• Any future trackers would be introduced only with a compliant, prior-consent mechanism.

10. Legal Bases for Processing (GDPR / EU, incl. Germany & France, and UK)

If you are in the European Economic Area or the UK, we rely on the following legal bases to process your personal information:

• Performance of a contract — to create and run your account, pair you with your spouse, and provide the features you use.
• Explicit consent — for processing your religious-practice (special-category) content under Article 9 (given through the affirmative step described above), for location access (prayer times and qibla), and for each spouse-sharing setting you turn on. You may withdraw consent at any time.
• Legitimate interests — to keep Sakeena secure, prevent abuse, and improve the app using privacy-safe usage metadata (which contains no special-category content), balanced against your rights and subject to your right to object.
• Legal obligation — where we must process data to comply with applicable law.

11. Your Data-Protection Rights (GDPR / UK GDPR)

If you are in the EEA or UK, you have the following rights over your personal information. Many are available directly in the app; for the rest, contact privacy@sakeenamarriage.com and we will help. We respond to requests without undue delay and in any event within one month of receipt; where a request is complex or we have received a number of requests, we may extend this by up to two further months and will tell you within the first month if we do.

Where you object to processing based on our legitimate interests, we will stop that processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing is needed to establish, exercise, or defend legal claims; a valid objection to our usage-metadata processing will be honored.

You also have the right to lodge a complaint with your local data-protection authority (for example, the CNIL in France, the BfDI or your Land authority in Germany, or the Information Commissioner's Office in the UK). If a personal-data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the competent supervisory authority, and affected users, where and as required by law and within the applicable timeframes.

• Access — get a copy of the personal data we hold about you.
• Rectification — correct data that is inaccurate or incomplete (you can also edit most data in-app).
• Erasure — delete your account and associated data, which you can do yourself in Settings.
• Portability — receive your data in a structured, commonly used, machine-readable format.
• Object / Restrict — object to or restrict certain processing, including our legitimate-interests (usage-metadata) processing; valid objections are honored.
• Withdraw consent — turn off location access, stop using religious-practice features, or turn off any spouse-sharing setting at any time.
• Complain — lodge a complaint with your supervisory authority.

12. California Privacy Rights (CCPA/CPRA)

This section applies if you are a California resident. It provides our Notice at Collection, a category-by-category description of the personal information we collect, and how to exercise your rights.

Notice at Collection. We collect the categories of personal information (PI) and sensitive personal information (SPI) described below, for the business purposes stated. The SPI we collect is limited to your religious beliefs (your ibadah and du'a content), your role in your marriage, and — if you enable it — your coarse location. We do NOT sell your personal information, and we do NOT share it for cross-context behavioral advertising, as those terms are defined under the CPRA. For the retention period of each category, see the "Data Retention and Account Deletion" section, which applies category by category.

Categories we collect (with sources, business purpose, and categories of recipients):

• Identifiers and account data (name, email, role in marriage, invite code). Sources: you; your paired spouse (e.g., the invite that links you). Business purpose: create and secure your account, pair you with your spouse, provide the service. Recipients: Amazon Web Services (AWS), Europe (Stockholm) region (eu-north-1); legal/compliance advisers where required. This is not sold or shared for advertising.

• User content (Connection Card answers, ibadah logs, du'as, reflections, check-ins, issues and repair sessions, memories and photos, love notes, dates, love languages, learning progress, milestones, preferences, locale). Sources: you; your paired spouse for content they choose to share. Business purpose: provide the features you use and display your content to you and, where you choose, your spouse. Recipients: Amazon Web Services (AWS), Europe (Stockholm) region (eu-north-1). This is not sold or shared for advertising.

• Commercial / subscription information (subscription status and entitlement). Sources: Apple and RevenueCat (subscription status). Business purpose: unlock and maintain the premium features you have paid for. Recipients: Apple; RevenueCat; Amazon Web Services (AWS), Europe (Stockholm) region (eu-north-1). This is not sold or shared for advertising.

• Geolocation — coarse, kilometer-level (if enabled). Sources: you (your device, with permission). Business purpose: compute prayer times and the qibla direction. Recipients: Amazon Web Services (AWS), Europe (Stockholm) region (eu-north-1). Note: this coarse, kilometer-level location is NOT "precise geolocation" as defined by the CPRA, but we treat it with care and use it only for prayer-time and qibla features. This is not sold or shared for advertising.

• Internet / usage metadata (feature-usage event names and counts). Sources: you (your interactions with the app). Business purpose: understand feature usage, maintain and improve the app, and keep it secure. Recipients: Amazon Web Services (AWS), Europe (Stockholm) region (eu-north-1). Processed by our first-party, in-house analytics only; no third-party analytics SDKs; not sold or shared for advertising.

• Sensitive personal information (SPI) — religious beliefs (your ibadah and du'a content) under Cal. Civ. Code §1798.140(ae), your role in your marriage, and coarse location if enabled. Sources: you. Business purpose: provide the specific religious-practice, personalization, and prayer-time features you request. Recipients: Amazon Web Services (AWS), Europe (Stockholm) region (eu-north-1). We use SPI only to provide the features you request, never to infer characteristics and never for advertising, so the CPRA right to limit the use and disclosure of SPI is honored by default. This is not sold or shared.

Your California rights. You have the right to know what personal information we collect and how we use it; to access and obtain a copy of your personal information; to delete your personal information; to correct inaccurate personal information; to limit the use and disclosure of SPI (honored by default, as explained above); and not to be discriminated against for exercising any of these rights. We do not offer financial incentives in exchange for your personal information, and we will never charge you a different price or provide a different quality of service because you exercised your privacy rights.

How to make a request. To exercise your California rights, delete your account in Settings or contact privacy@sakeenamarriage.com. We will acknowledge your request within 10 business days and respond within 45 calendar days; where reasonably necessary, we may extend our response by an additional 45 days and will notify you of the extension and the reason. You may use an authorized agent to submit a request on your behalf; we will require the agent to provide signed written permission (or a valid power of attorney) demonstrating your authorization, and we may still ask you to verify your identity directly. We do not knowingly sell or share the personal information of consumers we know to be under 16 years of age; in any event, Sakeena is an adults-only (18+) service.

• Notice at Collection: categories of PI and SPI, purposes, sources, and recipients set out above; retention is stated per category in the retention section.
• We do not sell your personal information and do not share it for cross-context behavioral advertising.
• Right to know, access, delete, correct, and limit the use/disclosure of SPI (honored by default).
• Right to non-discrimination; no financial incentives for your data.
• Authorized agents must provide signed written permission or a power of attorney; we may verify your identity.
• Request handling: acknowledged within 10 business days; responded to within 45 days (extendable by a further 45 days).
• No knowing sale or sharing of the data of anyone under 16; the service is adults-only (18+).

13. Other U.S. State Privacy Rights

If you are a resident of Virginia, Colorado, Connecticut, Texas, Utah, Oregon, Montana, or another U.S. state with a comprehensive consumer-privacy law, you have rights equivalent to those described above, which we honor regardless of which state you live in.

These include the right to confirm whether we process your personal data and to access it; to correct inaccuracies; to delete personal data you provided or that we obtained about you; and to obtain a portable copy of your data in a readily usable format. Where these laws provide an opt-out, you have the right to opt out of any targeted advertising, any "sale" of your personal data, and any profiling in furtherance of decisions that produce legal or similarly significant effects. As explained throughout this policy, we do not engage in targeted advertising, we do not sell your personal data, and we do not carry out such profiling — so in practice there is nothing to opt out of.

Before we process any sensitive data (including your religious-practice content), we obtain your opt-in consent, as described in the explicit-consent section above. If we decline a request, you have the right to appeal our decision; to appeal, reply to our decision or contact privacy@sakeenamarriage.com, and we will respond within the timeframe required by your state's law. If your appeal is unsuccessful, you may contact your state Attorney General.

• Access, correct, delete, and obtain a portable copy of your personal data.
• Opt out of targeted advertising, sale, and significant profiling — none of which we do.
• Opt-in consent obtained before we process sensitive data.
• Right to appeal a declined request, and to contact your state Attorney General.

14. International Data Transfers

Sakeena is used by couples around the world, so your information may be processed in countries other than your own — including at our hosting provider, Amazon Web Services (AWS), Europe (Stockholm) region (eu-north-1) — whose data-protection laws may differ from those where you live.

Where we transfer personal data internationally, we rely on appropriate safeguards recognized under applicable law, chosen according to the destination: for data exported from the EEA, the European Commission's Standard Contractual Clauses (SCCs); for data exported from the UK, the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU SCCs; and for personal information processed in the United States by Apple and RevenueCat for subscription and payment purposes, reliance on the EU-US Data Privacy Framework (and its UK extension) where the recipient is certified, or the SCCs/IDTA as applicable — together with any additional safeguards required to protect your information.

You can request a copy of the relevant safeguards, or information about where your data is processed, by contacting privacy@sakeenamarriage.com.

• EEA exports: Standard Contractual Clauses (SCCs).
• UK exports: UK IDTA or the UK Addendum to the EU SCCs.
• US processing by Apple/RevenueCat: EU-US Data Privacy Framework (and UK extension) where certified, or SCCs/IDTA.
• Hosting: Amazon Web Services (AWS), Europe (Stockholm) region (eu-north-1). Request a copy of the safeguards at privacy@sakeenamarriage.com.

15. Service Providers

We work with a small number of providers who help us operate Sakeena — for example, our hosting/infrastructure provider (Amazon Web Services (AWS), Europe (Stockholm) region (eu-north-1)), Apple for app distribution and payments, and RevenueCat for subscription management.

These providers may process personal data only on our instructions and only to provide their service to us; they are not permitted to use it for their own purposes. As noted above, we use no third-party analytics SDKs, and payment details are handled by Apple rather than by us.

16. How We Protect Your Information

We take reasonable and appropriate measures to protect your information, matched to how sensitive marriage-related content can be.

No method of transmission or storage is ever completely secure, but we work continually to safeguard your data and to limit access to it.

• Encryption in transit — all data travels over TLS/HTTPS.
• Passwords are stored only as bcrypt hashes, never in readable form.
• Your login token is stored securely on your device in the iOS Keychain.
• Couple content is isolated per couple using database row-level security.

17. Data Retention and Account Deletion

We keep your information for as long as your account is active and you are using Sakeena, so that your couple content and history remain available to you. We apply the following retention rules category by category, so that every category of data has a defined retention period or criteria.

You can delete your account and its associated data at any time from within the app — go to Settings and choose to delete your account. When you do, we delete your account and associated couple content — including your account data, user content, and any special-category religious-practice data — from our active systems without undue delay, and in any event within 30 days. Deletion then propagates to our routine backups within a further 90 days as those backups cycle; while it remains in a backup pending purge, that data is stored only for restore/disaster-recovery purposes, is not accessed or used for any other purpose, and is deleted when the backup cycles. Coarse location is used transiently to compute prayer times and is not retained as a location history beyond what is needed for that calculation.

Usage metadata is retained only as long as needed for the purposes described, and is kept in aggregated or limited form (typically no longer than 24 months) after which it is aggregated further or deleted; because it consists only of event names and counts, it cannot be used to reconstruct the content of anything you wrote. We retain limited records beyond account deletion only where the law requires it — for example, transaction or tax records we must keep for accounting and legal-compliance purposes — for the applicable statutory retention period, after which we delete them. You can also view and edit most of your data directly in the app at any time.

• View and edit your data in-app whenever you like.
• Delete your account and associated data (including religious-practice data) from in-app Settings.
• Active-system deletion without undue delay and within 30 days of your request; backup purge within a further 90 days.
• Backup data pending purge is restore-only — never used for any other purpose.
• Usage metadata kept in aggregated/limited form (typically up to 24 months), then aggregated further or deleted.
• We keep only what the law requires us to retain (e.g., limited accounting/tax records), for the applicable statutory period, then delete it.

18. Age Requirement (Adults Only)

Sakeena is an adults-only service. You must be at least 18 (or the age of majority where you live, if higher) to hold an account, use the app, and purchase a subscription, as our Terms explain. The App Store age rating for Sakeena is 18+, and the service is not directed to children.

We do not knowingly collect personal information from anyone under 18. Because our service is restricted to adults, the child-consent mechanics of Article 8 of the GDPR (consent in relation to information-society services offered to children) are not engaged. If you believe someone under 18 has provided us with personal information, please contact privacy@sakeenamarriage.com and we will take appropriate steps to delete it.

19. Changes to This Policy

We may update this Privacy Policy from time to time — for example, as we add features or as laws change. When we make material changes, we will update the effective date and the "last updated" date and, where appropriate, notify you in the app.

Effective date: 5 July 2026. Last updated: 5 July 2026.