Privacy Policy
This notice explains which personal data are processed in connection with the SecdeM mobile application (the "App") and the secdem.app services, why they are processed, and what your rights are. It serves as a privacy notice under the Turkish Personal Data Protection Law No. 6698 (KVKK).
In short
- We do not show ads, we do not track you, and we do not sell your data or share it for advertising purposes.
- Most of the App can be used without creating an account.
- Your location coordinates are never sent to our servers; your location is used only for prayer times and the qibla.
1. Data processed if you create an account
| Data | Purpose |
|---|---|
| Full name, email address | Creating the account, signing in, password reset emails |
| Password | Signing in. Your password is never stored in plain text; only an irreversible hash (argon2id) is kept. |
| Apple / Google account ID, profile photo link | "Sign in with Apple" and "Sign in with Google" |
| Subscription status (product, expiry date, transaction ID) | Unlocking Premium features. Your payment details are processed by Apple/Google and never reach us. |
| Session records (sign-in time, hashes of session keys) | Account security |
2. Features that do not require an account
- Location: If you allow it, your device's location is used to calculate prayer times and the qibla direction. Your coordinates are not sent to SecdeM servers. To find Diyanet's official district times, your location is converted into a province and district name by your device's operating system (Apple/Google) address service; only that province/district name and the district number are sent to the SecdeM server, and they are not linked to your account. For days and places without Diyanet data, coordinates are sent to the Aladhan service. If you don't grant location permission, Istanbul is used by default; you can also choose a district in Settings.
- Content services: The Quran text and its translation are retrieved from AlQuran Cloud, audio recordings from EveryAyah, and hadiths via jsDelivr. As is standard, these services may see your IP address.
- Stored on your device: Your settings, bookmarks, reading position, khatm progress, favorite hadiths, downloaded surahs and audio, and cache are kept only on your device.
- Notifications: Prayer time notifications are scheduled locally on your device.
3. Legal basis
Your data are processed on the basis of the establishment and performance of a contract (the service) under KVKK Art. 5/2-(c), our legitimate interest in account security under Art. 5/2-(f), and compliance with legal obligations under Art. 5/2-(ç).
4. Retention and security
- Account data are processed on servers in the European Union (Germany/Finland) over encrypted connections (HTTPS).
- When you delete your account, your data are deleted immediately and removed from backups within 14 days at the latest.
- Server hosting: Hetzner Online GmbH. Domain and DNS: Cloudflare, Inc.
5. Your rights
Under Article 11 of the KVKK, you have the right to learn whether your data are processed, to request information, to request that your data be corrected or deleted, to object, and to claim compensation in the event of damage. You can delete your account at any time in the App via Profile → Delete My Account (details). For other requests: [email protected]
6. Children
Account creation is not intended for children under the age of 13.
7. Changes
If this policy is updated, the new version will be published on this page and the "Last updated" date will change.