The short version
Rumi has no accounts. You do not give us your name, your email or a password, and nothing you read, count or ask is attached to an identity we hold.
Your location is used to compute prayer times and the qibla direction and is not sent to us for that purpose — the calculation happens on your device. You can choose a city by hand instead and never grant location access at all.
There is no advertising SDK in the app, so nothing you do here is used to target advertising anywhere.
Location
Prayer times and the qibla depend on coordinates. When you allow location access, iOS gives the app your position, and the prayer calculation runs locally on the device.
Your country code is used to choose the calculation method the local authority publishes. If you decline location access, you can select a city from the built-in database and everything continues to work.
You can revoke location access at any time in iOS Settings → Privacy & Security → Location Services.
The assistant and the scanner
When you ask the assistant a question, the text of that question is sent to a processing service to generate the answer. When you scan a product, the photograph of the label is sent for analysis. These two features cannot work without a network.
Requests are relayed through our own service rather than going directly from your device to the model provider, so your IP address is not exposed to them.
Conversations are stored on your device. Deleting a conversation in the app removes it.
Analytics and subscriptions
The app uses Firebase Analytics and Mixpanel to understand which features are used and where people get stuck. These record events and a randomly generated identifier for the installation — not your name, email or phone number. Firebase Remote Config is used to change settings without shipping an update, and Firebase Firestore and Functions support the assistant.
Subscriptions are handled by Adapty on top of Apple's In-App Purchase. Payment happens inside Apple's system; we never see your card details.
On this website, Google Analytics runs only if you allow it in the cookie notice, and Consent Mode v2 keeps storage denied until you do.
Children
Rumi is rated 4+ and contains nothing unsuitable for children, but it is designed for an adult's own practice and is not directed at children. We do not knowingly collect personal information from children.
Your rights
Because there is no account, there is very little we hold about you as an identifiable person. If you want the analytics identifier for your installation deleted, write to us and tell us the identifier — Settings shows it at the bottom of the About screen.
You can reach us at the address on the support page for any question about this policy, including requests under the GDPR or KVKK.