Hajify
Privacy Policy
Last updated: 13 July 2026
This Privacy Policy explains how Hajify Ltd (“Hajify”, “we”, “us”) collects and uses personal data on this website and in the Hajify mobile app for iOS and Android (together, the “Services”). It is written to satisfy the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations (PECR), the EU General Data Protection Regulation (EU GDPR) for users in the European Economic Area, and, for visitors from California, the California Online Privacy Protection Act (CalOPPA).
1. Who we are
Hajify Ltd is the data controller for the Services. We are registered in England and Wales, company number 17088501, registered office 60 Tottenham Court Road, Fitzrovia, London, W1T 2EW. Contact: contact@hajify.com.
2. What we collect on this website, and why
| Data | Purpose | Lawful basis (UK GDPR Art. 6) |
|---|---|---|
| Email address (launch list) | To send launch updates and early-access emails you asked for | Consent, you tick an unticked box when you sign up |
| Support correspondence | To answer questions you send us | Legitimate interests, responding to your enquiry |
This website runs no analytics and no advertising or tracking scripts, and sets no non-essential cookies, see the Cookie Policy. We do not sell personal data, and we do not collect special-category data through the Services.
3. How long we keep website data
- Launch-list emails: until you unsubscribe, or 12 months after the app launches, whichever is sooner; withdrawn consents are honoured immediately and suppression records are kept only as long as needed to respect your choice.
- Support emails: up to 24 months after the enquiry is closed.
4. Processors and recipients
We use a small number of service providers who process data on our instructions:
- IONOS (IONOS SE, Germany), our email provider: hosts our mailboxes and sends our launch and support emails.
- Google Firebase, hosts this website, stores the launch list (Google Cloud Firestore, London, UK, europe-west2), and, in the app, provides sign-in (see section 10).
- Supabase, hosts the app's database in Frankfurt, Germany (EU) (see section 10).
- The app also uses a small number of feature-specific providers (AI assistant, prayer-time lookups, Quran audio), all listed in section 10.
5. International transfers
The launch list is stored in the UK (London), and the app's database is hosted in the EU (Frankfurt, Germany), which is covered by UK adequacy regulations. Our email provider, IONOS, is a European company. Some providers (for example Google) may process data outside the UK, including in the United States or the EEA. Where they do, we rely on UK adequacy regulations or the UK International Data Transfer Agreement / Addendum to the EU Standard Contractual Clauses, with additional safeguards where required.
6. Your rights
Under UK GDPR you can ask us to: access the data we hold about you; correct it; erase it; restrict or object to processing; port it to another provider; and withdraw consent at any time (which does not affect processing before withdrawal). Every marketing email we send includes an unsubscribe link, and the app includes a full Delete account option (section 10). To exercise any right, email contact@hajify.com. We respond within one month.
You also have the right to complain to the UK Information Commissioner's Office (ICO): ico.org.uk, or by phone on 0303 123 1113.
If you are in the European Economic Area, the EU GDPR gives you the same rights over your data, and you may also complain to the data protection authority in your own country.
7. Marketing emails (CAN-SPAM)
For subscribers in the United States: every marketing email we send will identify Hajify Ltd as the sender, include a working unsubscribe link that we honour promptly, and include our postal address (60 Tottenham Court Road, Fitzrovia, London, W1T 2EW). We never use misleading subject lines.
8. California visitors (CalOPPA & CCPA/CPRA)
- This page is the conspicuous privacy policy for the Services; the categories of data collected and the third parties they are shared with are listed in sections 2, 4 and 10.
- You may review and request changes to your data via contact@hajify.com.
- Material changes to this policy will be posted here with a new “last updated” date.
- Do Not Track: our website does not currently respond to browser DNT signals; no third party collects personally identifiable information about your activity across other sites through our Services.
- Do Not Sell or Share My Personal Information (CCPA/CPRA): we do not sell your personal information, and we do not share it for cross-context behavioural advertising. Because no sale or sharing occurs, no opt-out is required; if this ever changes, we will add an opt-out mechanism here first. California residents may still exercise their rights to know, delete, correct, and non-discrimination by emailing contact@hajify.com.
9. Children (COPPA)
The website and the Hajify app are not directed at children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child has given us personal data, contact contact@hajify.com and we will delete it promptly.
10. The Hajify app
10.1 Using the app without an account
You can use the app's core features, lessons, quizzes, duas, the Quran reader, dhikr, and the Garden, without creating an account. In guest mode all of your data (progress, streaks, XP, favourites, settings) is stored only on your device and is not sent to our servers. Community features, cloud backup, and the AI assistant require an account.
10.2 Accounts
If you create an account, sign-in is provided by Google Firebase Authentication, using either an email address and password or Google Sign-In. We collect: your email address, a display name, and (with Google Sign-In) your Google profile picture. We do not collect your phone number, date of birth, or location at sign-up. Your email address and sign-in credential are held by Firebase Authentication; our own database stores your account identifier, display name, avatar, and the app data below, not your email address. If you sign up after using guest mode, your on-device progress is copied to your new account once and then removed from guest storage.
10.3 What the app stores
With an account and the in-app Cloud backup setting turned on, the following syncs to our database (hosted by Supabase in Frankfurt, Germany, EU): learning progress and achievements, XP/coins and reward history, Garden deeds and streaks, prayer logs and reminder settings, Quran reading position, bookmarks and stats, dua favourites, dhikr history and community dhikr contributions, daily step counts (if you enable the pedometer), zakat and savings entries, shop purchases and equipped cosmetics, your blocked-users list, and your public profile. We also record first-party analytics events (feature-usage events such as screen and action names, with timestamps) in our own database to understand how the app is used and improve it, we use no third-party analytics, no advertising SDKs, and no crash-reporting SDKs.
Kept only on your device: journey lesson snapshots, app theme, prayer-time location preferences, and AI-assistant conversations (see 10.5).
10.4 Community features
If you use the community features, other users can see: your display name, avatar, equipped cosmetic frame and title, weekly activity score, rank, and league. Friend connections use a shareable friend code. You can hide yourself from leaderboards with the “Show on leaderboard” setting, and block other users at any time. The app contains no chat, comments, or posts between users.
10.5 The AI assistant (Hadi)
The optional Hadi assistant sends your typed or dictated question (and your display name, if set) to our server, which forwards it to Groq for AI processing. Conversations are processed transiently: we do not store your chat history on our servers, and it is discarded from the app when you close the chat. Voice input and read-aloud are processed on your device, audio never leaves your phone.
10.6 Other feature providers
- Aladhan (aladhan.com), receives your city/country or device location (only if you grant location permission) to return local prayer times and qibla direction.
- EveryAyah (everyayah.com), streams Quran recitation audio on demand.
- Tarteel QUL (qul.tarteel.ai), serves English tafsir content on demand.
- Google Fonts (fonts.gstatic.com), may serve the app's typeface on first run.
- Public market-data APIs are used for zakat nisab prices; they receive no personal data.
10.7 Device permissions
The app asks permission before using: location (while in use, local prayer times and qibla), notifications (reminders you schedule, these are local notifications; the app sends no push notifications and collects no push tokens), microphone and speech recognition (voice input for the AI assistant), and motion/physical activity (the optional step counter). The app never requests access to your camera, photos, or contacts.
10.8 Purchases and advertising
The app currently contains no advertising and no real-money purchases; all shop items are unlocked with in-app coins earned through activity. If paid features or advertising are introduced in the future, this policy and the in-app store listings will be updated first, with notice.
10.9 Deleting your account and retention
You can delete your account at any time in the app (Settings → Delete account). Deletion permanently removes your data from our database and deletes your sign-in record, in one action. A few narrow exceptions apply: reward-transaction ledgers are retained for integrity and anti-fraud; anonymous community totals (which cannot identify you) are not recalculated; and weekly leaderboard history is automatically deleted after around 180 days for all users. Signing out (rather than deleting) leaves your synced data in place for your next sign-in. You can also request deletion by email: contact@hajify.com.
11. Changes and contact
We will post any changes on this page and update the date at the top. Questions, requests, or complaints: contact@hajify.com.