Privacy Policy

Salah Calendar · Last updated: 28 September 2026

Salah Calendar is a calendar that places prayer times around your events and helps you schedule. This policy explains what data the app handles and why. Questions or requests: support@salahcalendar.app.

Using the app without an account

You can use the app as a guest. In guest mode, everything you create like events, protected-time rules, and prayer settings, is stored only in your browser (localStorage) on your device. It is never sent to our servers, and clearing your browser data removes it.

What we collect when you sign in

If you choose to sign in (to sync across devices), we store the following in your account:

• Account identifier — your email address, used to sign you in via a magic link or Google sign-in.
• Calendar data — event titles, dates, times, recurrence rules, and colors.
• Protected-time rules — the "blackout" windows you define (e.g. sleep).
• Prayer settings — your chosen location (latitude/longitude and timezone) and calculation preferences, used to compute prayer times.
• Prayer log (only if you turn it on) — for each prayer you choose to mark: the date, which prayer, and whether you marked it prayed, prayed late or missed, plus when you made up a missed one and any make-up counts you enter.

Prayer log

The prayer log is off by default. It reveals religious practice, which data protection law treats as a special category, so we collect it only because you explicitly switch it on, and use it for nothing but showing it back to you. It is stored in your browser and, if you are signed in, in your account so it syncs across your devices. It is never written to Google Calendar, Outlook, your calendar feed, reminders or analytics, and never shared with anyone. Clear any entry by tapping it again, turn the log off at any time, or delete your account to erase it completely.

Location

Location is used solely to calculate accurate prayer times. You can enter it manually, allow your device's geolocation (only when you tap "use my location"), or let the app approximate it from your IP address via ipwho.is. Coordinates are stored with your prayer settings; they are not used for tracking or advertising.

How your data is stored and protected

• Account data is stored in Supabase (our database and authentication host).
• Row-Level Security ensures each row is readable and writable only by its owner — the browser uses a public key that cannot reach another user's data.
• All traffic is encrypted in transit (HTTPS/TLS).

Service providers we share data with

We do not sell or rent your data. We share it only with the providers needed to run the app:

• Supabase — authentication and database hosting.
• Vercel — hosting of the web app.
• Google — if you sign in with Google, or connect your Google Calendar (see below).
• Microsoft — only if you sign in with Microsoft or connect an Outlook calendar.
• Resend — the email provider that delivers sign-in (magic link) emails.
• Vercel Web Analytics — cookieless, aggregated page-view counts (see Analytics below).
• ipwho.is — only for optional IP-based location approximation.
• Sentry — optional error diagnostics, enabled only if configured; your calendar contents are scrubbed from error reports.

Google Calendar and Microsoft calendar sync

If you choose to connect a calendar, the app asks for permission to read and write your calendar (Google: the calendar scope; Microsoft: Calendars.ReadWrite). It uses that access for exactly two things:

• Reading events from your primary calendar (a window of roughly the past month to the next six months) so they appear in the app as read-only meetings and prayers can be placed around them.
• Writing the events you create in the app and your prayer slots into a separate calendar named "Salah Calendar" that the app creates in your account. It never modifies events in your other calendars.

Access tokens are stored server-side only, protected by row-level security, and are never sent to your browser. Disconnecting a calendar in the app deletes the tokens and every meeting mirrored from that calendar; deleting your account removes them as well. We do not use calendar data for advertising, do not sell it, and do not share it with anyone.

Salah Calendar's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Analytics

We count page views with Vercel Web Analytics. It is cookieless, does not fingerprint devices, and only produces aggregate numbers (visits, pages, countries). Error diagnostics (Sentry) never include the contents of your calendar.

Cookies

The app sets no tracking cookies. When you sign in, your session is kept in your browser's local storage so you stay signed in; that is all.

Retention and deletion

Your data is kept until you delete it. The app provides:

• Export data — download a copy of your calendar at any time.
• Delete account — permanently removes your account and all associated data (events, protected-time rules, and settings). This cannot be undone.

Children

The app is not directed to children under 13, and we do not knowingly collect their data.

Changes

We may update this policy; material changes will be reflected by the "Last updated" date above.

Contact

For access, export, deletion, or any privacy question, contact support@salahcalendar.app.

← Back to the app