Privacy Policy
Vaktim App
Data Controller: Soner Yılmaz
Contact: destek@vaktim.app
Last Updated: March 2026
1. Introduction
Vaktim values user privacy. This policy outlines what data is collected when you use the app, the purposes for which it is used, and the service providers with whom it may be shared.
2. Categories of Data Collected
2.1 Account and Profile Data
- Email address
- Display name
- Avatar information
- Session and authentication records
2.2 Subscription and Premium Data
- Subscription status
- Technical records originating from app store or payment infrastructure
- Usage quota information
2.3 Optional Sync Data
If you enable the sync feature and provide explicit consent, the following data may be stored in the cloud and linked to your account:
- Quran and prayer progress data
- Dhikr and salawat summary data
- Prayer tracking data and related summary statistics
- Favorite content references
- Badges, points, and similar gamification records
2.4 Spiritual Guide Feature
When you use the Spiritual Guide feature, the messages you write and the limited conversation context required to generate a response are transmitted to OpenAI infrastructure through Supabase Edge Functions.
These message contents are not part of the device-to-device sync dataset. However, they are processed at your request in order to provide the feature.
For this feature, OpenAI acts as an overseas AI service provider and recipient. Additional details about its data-processing practices may be found in its own policies and contractual documents.
2.5 ChatGPT / Vaktim MCP Integration
When you use Vaktim through ChatGPT, the text you ask ChatGPT to send to Vaktim tools may be transmitted to Vaktim's MCP server in order to return Quran references, verse explanations, themed verse suggestions, context-based spiritual suggestions, or prayer times.
Vaktim MCP tools are read-only. They do not create, update, or delete user account data. The MCP server may process request metadata such as language, city name, Quran reference, requested tool type, and technical request information for security, rate limiting, debugging, abuse prevention, and service reliability.
Vaktim does not require precise location for prayer time requests through ChatGPT; city-level information is sufficient. ChatGPT interactions are also subject to OpenAI's own privacy and data-processing policies.
2.6 Data Kept Only on Your Device
- Quran and prayer notes
- Local copies of chat history stored on the device
- Full location history and local search history
3. Purposes of Use
Your data may be used for the following purposes:
- Account creation and authentication
- Managing profile and app settings
- Synchronizing data across devices
- Providing premium services
- Generating AI-assisted responses
- Managing usage quotas
- Ensuring security, diagnosing errors, and complying with legal obligations
4. Third-Party Services
Vaktim relies on the following infrastructure and service providers to deliver the service:
- Supabase Inc.
- Amazon Web Services
- Cloudflare Inc.
- RevenueCat Inc.
- Mapbox Inc.
- OpenAI LLC
These providers maintain their own privacy policies and data-processing procedures.
Overseas data transfers relating to optional features such as Sync and Spiritual Guide are based on your explicit consent.
5. Location Data
Location data is primarily used on the device to calculate prayer times and the qibla direction. If you actively use location search or map features, search queries and related coordinates may be sent to Mapbox.
6. Advertising and Analytics
Vaktim does not sell user data to third parties for ad sales or behavioral advertising. Limited product analysis and technical monitoring may still be carried out only to the extent necessary and proportionate to the purpose.
7. Retention and Deletion
Account data is retained as long as the service relationship continues. Subscription records may be retained for 10 years to comply with tax and financial obligations. Consent records may be kept for 3 years after consent is withdrawn or the account is closed. Sync data may be retained while the sync feature remains active or until your deletion request is completed. Turning off sync stops new transfers, but existing cloud data is not deleted automatically.
8. Your Rights
You may send your requests under Turkish personal data protection law to destek@vaktim.app. If your application is rejected, if the response is found insufficient, or if no response is provided within 30 days, you also have the right to file a complaint with the Turkish Personal Data Protection Authority.