Privacy policy

The short version

Iqra is a local-only Android app. We do not collect, transmit, sell, or share your personal data. Your apps list, your reading progress, your settings — all live on your device.

Two kinds of anonymous, optional data may leave your phone, both controlled from Iqra's Settings → ABOUT: crash reports (Firebase Crashlytics, on by default) and anonymous usage statistics (PostHog, on by default — you can turn them off). Neither contains personal information. You can disable crash reports in two ways: turn off Crash diagnostics in Iqra's Settings (Settings → ABOUT → Crash diagnostics), or turn off "Usage & diagnostics" in your device's Google account settings. Either is sufficient.

What we do, in plain language

Iqra watches one thing: which app is in the foreground of your phone. If that app is one you have asked us to lock, we draw a screen over it showing a verse from the Quran. After the timer completes, we get out of the way. That's it.

What we do not do

• We do not read passwords.
• We do not read messages.
• We do not log keystrokes.
• We do not capture screenshots.
• We do not record audio.
• We do not access your camera.
• We do not access your contacts.
• We do not access your location.
• We do not use third-party advertising networks.
• We do not have user accounts. There is nothing to sign in to.

Permissions and why we ask for them

NOTIFICATIONS

Used for forward compatibility — V1 of Iqra does not send notifications. A future version may send a single morning reminder. You can deny this and the app still works.

EXACT ALARM

Used to start your morning lock at the exact time you chose. Without this, Android may delay the lock by minutes. Iqra cannot function without this permission.

DRAW OVER OTHER APPS

Used to draw the reading screen on top of a locked app. The window is full screen and dismisses itself when the timer completes.

USAGE ACCESS

Iqra uses Android's UsageStatsManager API to detect which app is currently in the foreground while your morning lock window is open. This is the API Iqra reads to know when you have opened one of the apps you chose to lock.

We do not read the contents of any app. UsageStatsManager exposes only the package name and event type (e.g. MOVE_TO_FOREGROUND with packageName) — there is no API on this surface for reading app content, text fields, window contents, or input events. Iqra reads only the package name from each event.

We poll foreground-app events while your morning lock window is open (typically 10–30 minutes per day, not all day). In code we drop events from our own package, system UI, and the keyboard, then check whether the remaining package matches one you chose to lock. Only the package name feeds the lock decision; the event is then discarded and never leaves your phone.

Iqra does not use the Android Accessibility API. Earlier versions of Iqra (v0.2.x and earlier) used Accessibility for the same foreground-detection purpose; v0.3.0 onwards uses Usage access exclusively, which is a narrower and more privacy-respectful API surface.

Crash reports

We use Firebase Crashlytics to receive automated crash reports. These contain: the model of your device, the version of Android, the version of Iqra, and a stack trace from where the app crashed. They contain no personal information. You can disable Crashlytics in two ways: turn off Send crash reports in Iqra's Settings (Settings → ABOUT → Crash diagnostics), or turn off "Usage & diagnostics" in your device's Google account settings. Either is sufficient.

Anonymous usage statistics

Iqra can optionally send anonymous product-usage events to PostHog (EU-region servers, GDPR-compliant) so we can understand which onboarding steps people complete, where they get stuck, and which features are used. We use this only to make the app better.

This data flow is on by default. You can turn it off anytime in Settings → ABOUT → Anonymous usage statistics. While it is on, we send:

• The name of the screen you are on (Welcome, Value, Intent, …).
• The action taken (continue tapped, permission granted, a reading completed).
• An anonymous identifier generated by PostHog — not tied to your Google account, device IMEI, phone number, or any identifier you would recognise.
• App version, Android version, device model.

We do not send:

• The Quran text you read, or the surah / ayah identifier.
• The names of the apps you chose to lock.
• The exact morning time you set.
• Any reading content or personal information.

Turning the toggle off purges any queued, unsent events immediately.

Premium features

Iqra is free. We are preparing an optional premium tier for a future release using Adapty, which manages subscription state on top of Google Play Billing. As of this version no paywall is shown and no in-app purchases exist; the Adapty SDK is included but transmits an empty profile. When a premium tier launches, Adapty will store anonymous subscription status (active / inactive) — never your payment details, which Google handles. No personal information is sent.

Children

Iqra is intended for users aged 13 and older. We do not knowingly collect data from children under 13.

Changes to this policy

If we change this policy, the "last updated" date at the top of this page will change. For material changes we will surface a notice in the app.

Contact

Email feedback@iqralock.app with any question, including data-deletion requests. There is nothing server-side to delete on our end — uninstalling the app removes all of your data — but we are happy to confirm this in writing.