How Hasanats handles your data

Who we are

Hasanats is built by Digital Farmers, a small team in Belgium. For anything to do with privacy, email dev@digitalfarmers.co. What follows is a truthful description of what the system actually does, not template text.

Local first: what never leaves your device

Your habits, your streak, the details of your family grave, and your location patterns (your home area, when you usually pray) are stored on your own device. They are not sent to our servers and do not leave your device, not even if you have an account.

Account: optional, but recommended

You can use Hasanats without an account. If you do create one, we use your email address as your identity. This syncs between your devices: your profile, your habits, your intentions, the mosques you follow, your knowledge profile, and the basic details of your family garden (name, role, tree type, the light number from 0 to 30, the weather you chose yourself, and whether someone is marked as deceased).

Never synced, not even with an account: your location history, family relationship details, and the stories you write. Those stay local on the device where you entered them.

The family garden: the riya principle

In the family garden you only see light from the people you follow, never the deeds themselves. Riya here means: the deed stays private, only the light it gives off is visible to family. That way no one can show off or compare, and the intention stays between you and Allah.

Children

On the screens for children (For the children, Watch and learn, the baby space) no visit statistics load, no counter of ours and no measurement of tapping rhythm. The navigation of the adult app is not on them. The parent sheet and every setting there only open after a sum meant for an adult. That question is a lock, not consent.

• On the device: what your child discovers in the game and in Watch and learn, the names of the profiles, today's minutes and your settings. That goes nowhere. The camera only turns on if you allow it in the parent sheet, and the image does not leave the device.
• On our server, only if you add a child under Family with an account: the first name, the birth month if you give it, whether the child is still on the way, the stage, who added it, when you gave consent, and the learning steps you tick off yourself. That is stored on our own servers in the EU (Hetzner and OVH).
• Who sees it: the parents and guardians in your circle who have access to that child. A trophy or a surah sends a notification carrying the first name to the devices of your circle. A teacher can only request access, and without your yes they see nothing. From age 18, a parent no longer adds anything.
• You can only add a child if you tick that you are the parent or guardian and give consent. We keep a record of when you did that. In Belgium, a child under 13 cannot do that themselves.
• Deleting on the device: you erase the memory of Watch and learn in the parent sheet, for every child on that device. The rest disappears when you remove the app or clear the website data of Hasanats. Want a copy first? Under Family you can download everything from your circle, children included.
• Deleting from our server is something you do yourself. Under Manage children each child has the button Delete this child. After you confirm, the first name, the birth month, the milestones, your consent, who had access and the classes the child was in all disappear. Every parent or guardian in your family can do that, no one else.
• If you delete your account and you are the only parent or guardian in your family, your children go too. If there is another parent, they stay with that parent and only your link to them disappears. It only disappears from our backups once those have rotated, see Retention below.

Analytics and visit statistics

We host our own instance of Plausible, within the EU, without cookies and without per-person profiles. We also keep aggregated counters of our own: per day, per type of action, and a count. Never anything that can be traced back to you personally.

Plausible does not load on the screens for children either.

Khutbah listen counters

Per khutbah, per day, we keep track of how many times it was listened to. We never track who listens.

Speakers: Stem-Amanah

Speakers get a separate promise, which we call Stem-Amanah (voice amanah). Your voice remains your property. We never use it to train or imitate speech synthesis: that is forbidden forever within Hasanats. Every step in which your voice is used further goes through an explicit consent ladder: you give consent step by step, not once for everything at the same time.

Third parties

If we share figures with third parties, for example a mosque that wants to see its own statistics, we only share aggregates. Never data about individual people. We log every request for data.

Audio recordings

If you record a khutbah or recitation as a speaker, that audio is uploaded and stored encrypted on our own servers within the EU (Hetzner and OVH), so it can be listened to or approved later. We never sell audio, never share it with advertisers, and never train speech synthesis on it. Only you and the authorised mosque administrator see your recordings.

You manage your own recordings in the app under You › My recordings: you only see what is yours, and you can delete it. If you delete your account, your recordings are detached from your identity.

Retention, export and your rights

You can arrange everything yourself in the app, no email needed:

• Deleting in the app. Under You you delete your account completely. Your recordings are then anonymised and your personal data erased.
• Viewing and erasing what we know about you. Under You › Knowledge you see exactly what the app infers about you, you can export it, and erase it in one tap.
• Your recordings. Under You › My recordings you manage and delete your own audio.

Prefer a person? Email dev@digitalfarmers.co and we'll take care of it.

Retention: most things stay local on your device. What is on our servers (account, recordings) stays within the EU. Backups are transported encrypted and run on a 31-day rotation.

Who processes the data

• SendGrid, for email.
• Hetzner and OVH, for our servers. Both within the EU.
• Aladhan, for calculating prayer times. Aladhan only gets coordinates from us, never your identity.

Questions

Do you have a question about this privacy policy or about your own data? Email dev@digitalfarmers.co.