Dua For Me – Amin
iOS & Android — Privacy Policy

Privacy Policy

Effective: May 20, 2026  |  Last updated: November 3, 2026

Dua For Me – Amin ("the App") has no ads, no sign-up form and no third-party analytics, advertising or cross-app tracking SDKs. The App creates an anonymous account automatically; we never ask for your name, email address, phone number, contacts, photos or location. Dua requests use fixed categories only. Our servers process only what the online features need: the anonymous account, category-only dua requests, push-notification tokens and purchase status. Details are below.

1. Who Is Responsible for Your Data

The data controller is Yasir Kara, an independent developer based in Türkiye. Contact: skyes@yasirkara.com.

2. Data Stored Only on Your Device

The App stores the following locally on your device: language, theme and favorite themes, onboarding status, notification preferences, and cached copies of your community state and Full Version status. This data is not sent to our servers. It is removed when you delete your account in the App, uninstall the App or clear its data.

3. Anonymous Account (Firebase Authentication)

The App automatically creates an anonymous account with Firebase Authentication (Google). This gives you a random user ID. We use this ID to run the community dua pool, deliver notifications and link your purchases. It is not your name, email address or phone number, and the App does not show it to you.

4. Community Dua Pool (Shared with "Peygamber Duaları")

Dua For Me – Amin and our other app, "Peygamber Duaları (Duas of the Prophets)", use the same community dua pool and the same backend. Requests created in either app are shown to users of both apps. Other users see only the category of a request (and how many requests are open in each category). They never see your ID, name or any text, because the pool has no text field.

When you use the pool, our servers (Cloud Firestore and Cloud Functions) store records linked to your anonymous ID:

Requests stop being shown after their duration ends, but the records above are kept until you delete your account (see Section 10).

5. Notifications

The App does not schedule daily reminders. Its only notifications are community notifications sent by our server. If you allow notifications, the App obtains an Expo push token and registers it with our server, together with your anonymous ID and the notification language. When people make dua for your request, or when your request or queue finishes, our server sends the notification through the Expo Push Service (operated by Expo, USA), which delivers it through Apple Push Notification service or Firebase Cloud Messaging. Expo receives the push token, the notification text and a request reference. When your device obtains the token, Expo also receives the device's native push token, app identifiers and your IP address.

The push token is removed from our records when you turn off notification permission for the App (the next time you open it), when Expo reports that the token no longer works, or when you delete your account.

6. Purchases (RevenueCat, Apple and Google)

Purchases are processed by Apple (App Store) or Google (Google Play). We never receive your payment card details. We use RevenueCat (RevenueCat, Inc., USA) to verify purchases. The App identifies you to RevenueCat by your anonymous Firebase ID. RevenueCat receives your purchase and transaction history, and device and app information such as device model, operating system and app version, locale and store country, plus your IP address. Our server stores a snapshot of your Full Version status (active or not, expiry time and when it was last checked) under your anonymous ID. When RevenueCat notifies our server of a purchase event, we keep a record of the event ID, type, app and time, together with the anonymous IDs it concerns. See the RevenueCat Privacy Policy.

7. Security, Technical and Diagnostic Data

8. Data We Do Not Collect

9. How Long We Keep Data

10. How to Delete Your Data

Open the side menu and choose Delete account and data (available from version 1.0.1). After you confirm, the App deletes your anonymous Firebase account; your dua requests (including other users' dua actions on them), your dua actions, queue, history and rate-limit records; your push-token registration; your Full Version status snapshot; and your RevenueCat customer records. Because the two apps share one backend, the RevenueCat records for your anonymous ID are deleted in the RevenueCat projects of both Dua For Me – Amin and Peygamber Duaları. RevenueCat processes deletion requests asynchronously. Local app data is also cleared.

A one-way hash of the deleted account ID is kept so that delayed requests or purchase notifications cannot recreate erased data. It contains no original ID, device token, prayer content or purchase history.

Deleting your account or the App does not cancel an Apple or Google subscription; cancel it in your store account (see the Terms of Use). Uninstalling the App removes local data but does not erase server records. If you use an older version, update the App first to use in-app deletion.

Because accounts are anonymous, we cannot find your data from an email address alone. If you cannot use the in-app option, email skyes@yasirkara.com. We will help you complete deletion through the App.

11. Legal Bases (GDPR and KVKK)

12. Service Providers and International Transfers

Using the App therefore means that some of your data is transferred to and processed in countries outside Türkiye and the EU, including the United States.

13. Your Rights

Depending on where you live (for example under the EU/UK GDPR or Türkiye's Personal Data Protection Law No. 6698, "KVKK"), you have the right to know whether we process your data and to access it, to have it corrected, deleted or restricted, to object to processing based on legitimate interests, to receive your data in a portable format where applicable, to learn which third parties receive it, and to seek compensation for unlawful processing. You can delete your data yourself in the App at any time (Section 10). For other requests, email skyes@yasirkara.com. Because accounts are anonymous, we may need your help in the App to identify your records. We aim to respond within 30 days.

You can also complain to a data protection authority. In Türkiye, this is the Personal Data Protection Authority (Kişisel Verileri Koruma Kurumu), after you have first contacted us as KVKK requires. In the EU/EEA or UK, it is the authority in your country.

14. Children

The App is not directed to children under 13 (or the minimum age of digital consent in your country, for example 16 in some EU countries), and we do not knowingly collect personal data from them. The community pool has no names, free-text messages, photos, profiles or chat. If you believe a child has used the App, contact us and we will help delete the data.

15. Changes to This Policy

We may update this policy when the App or our services change. We will post the new version on this page with a new "Last updated" date, and we will announce material changes in the App or in the app-store release notes.

16. Contact

Yasir Kara, Türkiye — skyes@yasirkara.com