Privacy policy

Who we are and what this notice covers

Qibla Trust is an upcoming iPhone app and has not yet been released on the App Store. This notice covers our website and support contacts and explains how the app handles information. The app sections describe what happens when you use the app; publication of this notice does not mean the app is available to download.

The publisher is Mazen El-Mir, an individual based in Sweden, publishing as Tres Comas. In this notice, “we” means the publisher, who is responsible for the personal information handled for our support and website operations.

For privacy questions, contact support@trescomas.app, call +44 7451 255807, or write to Mazen El-Mir, Poststugan 3082, 211 65 Malmö, Sweden.

Location and heading

The app uses foreground location to calculate a Qibla bearing and prayer times. Device heading supports the live pointer and its confidence guidance. The phone’s date and geographic time zone supply prayer-time inputs. You can refuse or change location access in iPhone Settings. Current-location features may then be unavailable. The app is configured without background or Always location access. It does not use location for advertising.

Records on your iPhone

Current coordinates and calculated results are used as temporary calculation inputs. Saving a place stores its name, latitude, longitude and time zone locally. The app stores recorded Dhikr sessions, including their times, target and final count, together with feedback and personalization preferences. It also stores the introduction acknowledgement and records used to remember Pro access and avoid processing the same transaction twice. These records can disclose private religious practices. Dhikr history is initiated and stored for your own personal use, under your control. We have no service for uploading, retrieving or acting on those history records. Information you choose to send to support is handled separately from these local records.

Local retention and your choices

The app does not automatically expire saved places or Dhikr history. Use Clear Dhikr history and confirm the action to clear recorded sessions. In Saved places, select the intended record and confirm Remove saved place. Changing location permission does not delete a saved place. Preferences, acknowledgements and transaction records remain in the app’s local storage. Removal from an app list is not a promise of secure erasure from storage media. iPhone backups or a later restore may retain or return app data, depending on your system settings. No backup exclusion is promised.

App Store purchases

Apple handles payment and restoration through the App Store. The app receives purchase and ownership information needed to provide Lifetime Pro and keeps local entitlement and transaction-processing records. It does not ask for your payment-card details in an app-owned payment form. Apple operates its own account, payment and platform services under its privacy information. Removing local history or saved places does not cancel or refund a purchase. An Apple-confirmed refund or revocation can remove Pro access when purchase status is checked at startup, on return to the foreground or through Restore. Saved records and your theme preference are retained; Pro-only presentation may be unavailable while access is locked.

Software updates and diagnostics

The app is configured to use Expo’s EAS Update service, operated by 650 Industries, Inc., to check for and download software updates. Requests include a random installation identifier, platform and app-runtime information, identifiers for current, embedded or failed updates, and any configured extra update-request parameters. The service receives connection information such as your IP address. A previous fatal-error description can accompany a request. This processing supports update delivery and diagnosis of update failures. Error descriptions can contain information about the circumstances of a failure.

Expo’s privacy information describes its service, security and service-improvement purposes, retention according to those purposes and legal duties, and processing in the United States and other countries. Its published terms provide contractual safeguards for covered European personal data. The random identifier can still distinguish your installation.

Accounts, advertising and tracking

The app has no app account system, advertising SDK, subscription or developer-operated app database. We do not sell your worship records or use them for advertising tracking. Expo update processing and Apple platform services are separate from the app’s local calculation and record-storage features.

Support by email, telephone and post

If you contact us, we use your contact details, message and any attachments to respond to your technical, purchase or privacy request. Our support page explains what information helps. Please omit private worship records, precise coordinates, passwords and payment-card details. You do not need to share your local worship history to request help.

Email sent to support@trescomas.app passes through Cloudflare Email Routing to an Apple iCloud mailbox managed by the publisher. Cloudflare processes the message to forward it and keeps delivery information; Apple provides mailbox storage and email access under its iCloud terms. iCloud Mail is not end-to-end encrypted by default.

Sonetel supplies our public telephone number and forwards calls. Received text messages are delivered by email. Sonetel and the telephone carriers process connection details such as telephone numbers, call times and duration, and the content of messages sent through their services. We do not record live support calls. Call recording is disabled in our Sonetel service, and this support number does not use Sonetel voicemail. If we receive a voicemail through a forwarding carrier, we use the message and caller details to respond to your request. Poststugan handles mail sent to our postal contact address.

Retention of support information

We retain support emails, their attachments and any voicemail only while needed to handle the issue or meet a legal obligation, then delete them. The same criterion applies to text messages received as support emails and copies of that correspondence we retain. For other support correspondence, including letters, we keep only the information needed for the request or an applicable legal obligation and dispose of it when that need ends. The need to keep information depends on whether the issue is still being handled and whether a specific legal duty requires preservation. We do not keep an unnecessary attachment simply because the rest of a conversation is still needed.

Mailbox Trash, synchronized copies and provider backups can have separate deletion processes. Deleting correspondence does not erase service or security records controlled independently by a provider. Those records are retained for the provider’s delivery, security, billing or legal purposes under its own policy. We do not promise immediate erasure from every provider system.

Visiting this website

Cloudflare Workers Static Assets hosts the website. Cloudflare receives connection and request information, including IP addresses and information about traffic to the site, to deliver and protect the pages. Static hosting can still involve service and security logs. Cloudflare describes these practices and its retention criteria in its privacy policy.

Our website has no contact form, advertising or analytics scripts, and does not intentionally store information in your browser. Hosting security features can involve necessary cookies or other technical processing. Following a link to Apple or another provider takes you to a service with its own privacy practices.

Providers and processing outside Sweden

Cloudflare processes customer content and relevant customer logs on our behalf and also handles certain network and security information for its own purposes. Sonetel processes communications for us and separately handles information needed for its own service obligations. Apple operates its platform and mailbox services under its privacy policy.

Provider processing can take place outside Sweden and the European Economic Area, including in the United States. Cloudflare’s data-processing terms include European standard contractual clauses for covered transfers. For the processing it controls, Apple’s privacy policy describes standard contractual clauses for transfers of European personal data. Sonetel’s data-processing agreement requires compliance with applicable transfer rules. We have not yet confirmed the applicable transfer mechanism for our voice and text-message service. Contact us for information about the safeguards relevant to your information or to request an available copy.

Why we handle personal information

Your local Dhikr history serves your personal use under your control. The publisher has no separate use for it. Website operations, software-update services and information sent to support are separate from that local history.

For information we handle, we rely on performance of the app licence when processing is necessary to supply a service you request under that contract; our legitimate interests in answering ordinary support inquiries and operating a secure, reliable website and support service; and legal obligations where a specific duty requires us to respond or keep a record. These grounds do not give us general permission to use information about your religious beliefs. We do not ask you to send such information for ordinary support. Providing support information is voluntary, but we may be unable to answer a particular request without the details needed to understand it.

Requests and complaints

Under applicable data-protection law, you may have rights of access, correction, deletion, restriction, objection and portability. You can object to processing based on legitimate interests. If processing relies on consent, you may withdraw it without affecting earlier lawful processing. Contact support@trescomas.app or use the telephone or postal contact above.

We cannot retrieve your local worship records through an app backend; we can explain the device controls and address information you have sent to support. We will not require passwords or a new identifying account merely to handle a privacy request. We may need proportionate information to confirm that the request concerns you. You may complain to Sweden’s supervisory authority, IMY, or your applicable local authority.

Changes to this notice

Updates to this notice appear at the Qibla Trust privacy page with a new effective date. Where required, material changes will be communicated before the changed processing begins.

Privacy questions

For questions about Qibla Trust, contact support@trescomas.app.