This privacy policy explains how the Thābit mobile app ("Thābit", "we", "our", "us") handles your data. Thābit is a habit tracker published by Mao Apps and available on Google Play and the Apple App Store under the bundle identifier com.maoapps.thabit.
Short version: Thābit is local-first. Your habits and history are stored on your device. We do not require an account, and we do not collect your name, email, phone number, or contacts. Your location — if you enable prayer-time features — is used only on your device to calculate prayer times and is never uploaded. Optional cloud backup, ads, and in-app purchases involve the third-party services described below.
This data never leaves your device unless you explicitly enable Cloud Backup (Section 3). You can erase it at any time from Settings → Data & privacy → Erase all data, or by uninstalling the app.
Each permission is requested only when you open a feature that needs it, and is used solely for that feature.
| Permission | Used for | Leaves device? |
|---|---|---|
| Notifications | Habit reminders you schedule yourself | No — reminders are scheduled locally on your device |
| Location (when in use) | Calculating accurate prayer times for prayer-anchored habits (Islamic mode only) | No — coordinates are used on-device to compute prayer times and are never uploaded |
| Network | Ad serving, purchase verification, and optional cloud backup | Yes — see Sections 1 and 3 |
| Tracking (iOS App Tracking Transparency) | Allows AdMob to use the device advertising identifier for personalized ads (only with your explicit consent) | Yes if you allow it; otherwise no advertising identifier is used |
Thābit does not access your camera, microphone, contacts, calendar, photos, or motion sensors.
Cloud Backup is an optional Premium feature, turned off by default. When you enable it, Thābit creates an anonymous account (no email or password) and uploads a copy of your habits, history, and settings to Mao Apps' Firebase project so you can restore them on a new device. The backup is tied to an anonymous identifier; it contains your habit data but no name, email, or contact information. If you never enable Cloud Backup, no habit data is ever sent off your device. To delete a cloud backup, email us at the address below.
When you tap "Share progress" or "Share Thābit", the app hands a short text message to your operating system's share sheet. You choose where it goes. Thābit does not upload anything to our servers when you share.
The free version shows ads served by Google AdMob. AdMob may use a device advertising identifier to deliver more relevant ads. You can:
If you are in the EEA, UK, or Switzerland, a Google UMP consent form is shown where you can accept or reject personalized advertising. See Google's privacy & terms for partners.
Thābit offers a Premium upgrade (Yearly with a free trial, Monthly, or Lifetime). Purchases are processed by Apple or Google; we never see your payment details. RevenueCat verifies your entitlement using the purchase token. See RevenueCat's privacy policy.
Thābit is not directed at children under 13 (or the minimum digital-consent age in your country). We do not knowingly collect personal information from children. Contact us if you believe a child has provided personal information and we will delete it.
Local data is removed when you erase app data or uninstall. Optional cloud backups remain until you delete them; email myao.apps@gmail.com to request deletion. Subscription records held by RevenueCat are retained while your subscription is active and per Apple/Google receipt-validation policies.
Depending on your jurisdiction, you may have the right to access, correct, or delete data held about you, to restrict or object to certain uses, to withdraw consent for ad personalization, and to lodge a complaint with a data-protection authority.
EEA/UK/Switzerland (GDPR): the legal basis is your consent (personalized ads, cloud backup) and our legitimate interests (non-personalized ads, purchase verification). You can withdraw consent at any time.
California (CCPA/CPRA): we do not sell personal information. Allowing personalized ads lets Google AdMob access your advertising identifier, which may be considered "sharing." You can opt out at any time via the ATT prompt (iOS), your Android ad settings, or the UMP form.
The third-party services we use (Google, Apple, RevenueCat, Firebase) operate globally and may process data in the United States and other countries, relying on Standard Contractual Clauses or equivalent mechanisms where required.
We do not operate user accounts or collect identifying personal data, which limits the data at risk. Optional cloud backups are stored in Firebase with access restricted to the anonymous identifier that created them. All network requests use HTTPS.
If this policy changes materially, we will update the "Last updated" date above and, where appropriate, surface a notice in the app.
Questions, requests, or concerns: myao.apps@gmail.com