DuaInsta Privacy Supplement

DuaInsta keeps the apps you choose locked until a short Quran reading is completed. This page describes the data processing specific to DuaInsta.

Our general policy, which applies to every Codition AI app, is on the Privacy Policy page. Where the two differ, this supplement governs DuaInsta.

• Account (iPhone): the user identifier and email address provided by Sign in with Apple. If you use Apple's "Hide My Email", your real address never reaches us.
• Account (Android): the user identifier and email address provided by Google Sign-In. The name and profile photo link included in Google's identity token are also kept in the sign-in record; the app does not use them. We store no passwords.
• Preferences: your unlock window, chapter length, reciter and translation choices.
• Reading records: only if you give the separate, explicit consent described below.

DuaInsta uses Apple's FamilyControls framework in individual authorization mode. You choose the apps to protect with Apple's own picker.

We cannot see which apps you choose. iOS gives us only opaque identifiers; they stay on your device and are never sent to our servers. We collect no data about which app you use, when or for how long.

Android has no Screen Time framework. To step in when one of your chosen apps opens, DuaInsta uses Android's AccessibilityService. Only you can turn the service on, in your device's Accessibility settings; before that, the app explains in-app exactly what it does and asks for your consent.

The service sees only which app the foreground window belongs to (its package name) and compares it with the apps you chose. Permission to read screen content is turned off: it cannot see on-screen text, your messages, what you type or your passwords. It performs no taps or actions.

The list of apps on your device is read only on the device, so you can choose which to protect. Your choice and which app you open stay on your device; they are never sent to our servers or anywhere else, logged or shared.

You can turn the service off at any time in Settings > Accessibility; protection then stops.

The chapters you read and the intentions you choose reveal your religious practice. Under KVKK Article 6 this is special category personal data (GDPR Article 9). We therefore ask for separate, explicit consent before storing it; accepting the general terms is not enough.

If you consent, we store only:

• The number of the chapter read
• The date, time and duration of the reading
• Your intention, if you chose one (for example "patience")
• Whether the reading unlocked an app or was voluntary

If you do not consent, the app keeps working fully; only the streak and reading history stay off. The verification record needed to unlock an app is deleted as soon as the unlock completes. You can withdraw consent at any time in Settings > Reading history; all reading records kept until then are permanently deleted.

The short prayer shown after a reading is generated with third-party AI providers. Google (Gemini API) is the primary provider; OpenRouter and OpenAI are used as backups when Google cannot respond.

What is sent: the name of the chapter read, the title of the intention you chose (for example "gratitude") and the kind of app being opened (for example "social media").

What is not sent: your name, email address, user identifier, device information, location or reading history. Requests are made from our server, not your device, so the providers do not see your IP address either.

Generated prayers are cached and may be shown to other users; no prayer is linked to any person. AI providers process the request transiently to answer it; their own retention is governed by their terms.

If you report a prayer in the app, the prayer text, the chapter read and your intention are stored with your account so the report can be reviewed. Deleting your account also deletes your reports.

If you turn on prayer times, your approximate location (to about 1 km) is sent directly from your device to the prayer time service (api.aladhan.com) to fetch the monthly timetable. Your precise location never leaves your device.

Your location never reaches us and is not linked to your account. Turning prayer times off in Settings also deletes the stored location and timetable from your device.

Recitations are streamed directly to your device from download.quranicaudio.com. As with any internet request, that server sees your device's IP address.

DuaInsta is used with a monthly subscription. Payments are taken by Apple on iPhone and by Google Play on Android; your card details never reach us. Whether your subscription is active is read from the App Store or Google Play records on your device. You can manage or cancel it in your App Store account settings or in Google Play > Payments & subscriptions; deleting your account does not stop the subscription.

Your data is hosted in the European Union (Frankfurt, Germany), and row-level security rules make it accessible only through your own account.

You can permanently delete your account and all of its data in-app via Settings > Account > Delete account. Details are on our Account Deletion page.

DuaInsta shows no ads, contains no analytics or advertising SDKs and does not track you across apps or websites. We do not sell your data.

You can withdraw reading-history consent in Settings, delete your account and all of its data in the app, and manage location and accessibility permissions in your device settings. To exercise your KVKK Art. 11 and GDPR rights, email bekir@codition.co.

DuaInsta is not directed at children and we do not knowingly collect data from anyone under 13. If you believe a child has sent us data, contact us and we will delete the account.

For privacy questions, data access requests or deletion requests: bekir@codition.co.