QiblaFlow Privacy Policy

Who we are

QiblaFlow is operated by BSAPH Limited (Company No. 17532433), registered office 71-75 Shelton Street, Covent Garden, London WC2H 9JQ. BSAPH Limited is the data controller. This page describes what is specific to QiblaFlow; it sits alongside the full BSAPH Privacy Policy, which applies to all BSAPH platforms and is written under UK GDPR and the Data Protection Act 2018.

What QiblaFlow uses

• Location. Used to calculate prayer times and Qibla direction for where you are, and to find nearby mosques. If you allow background location, it is used so scheduled prayer notifications use the right times. Location is not linked to your identity for tracking and is not sold or shared with advertisers.
• Camera. Only for the augmented-reality Qibla compass. If you save an AR photo it goes to your photo library so you can share it.
• Account details. If you create a BSAPH account, your name and email address, and the sign-in method you choose (email, Google or Apple). You can use parts of QiblaFlow without an account.
• Your choices. Calculation method, Asr setting, notification settings, theme, and the mosques you follow, so they follow you between devices when you are signed in.
• Notifications. A device token, so we can send notifications you have turned on.
• Purchases. Where the app offers an optional upgrade, the purchase is made through Apple (or Google on Android) and managed with RevenueCat, which receives your BSAPH user ID and your purchase status. We do not see or store your card details.

What we do not do

• We do not sell your personal data.
• We do not use your data to track you across other companies' apps or websites.
• We do not show third-party advertising in QiblaFlow.

Why we process it

To provide the app you asked for (contract), to keep it secure and prevent abuse (legitimate interests), to meet legal obligations, and for optional features you switch on, such as notifications (consent). The full list of legal bases and processors is in the BSAPH Privacy Policy.

Deleting your account

In the app open Settings and choose Delete Account, or start it at bsaph.com/delete-account. You are signed out straight away and your remaining personal details are erased within 30 days. We keep only records the law requires us to keep. One BSAPH account is shared across BSAPH apps, so deleting it removes it for all of them.

Your rights

Under UK GDPR you can ask for access to, correction of, or erasure of your data, object to or restrict processing, and ask for a portable copy. Email [email protected]; we respond within 30 days. You can also complain to the Information Commissioner's Office.

Contact

Privacy questions: [email protected]. App help: [email protected] or the support page.