Privacy policy

NaashNaash is a health app for Muslim women. That means we hold two of the most sensitive kinds of information there are — what is happening in your body, and how you practise your faith. This page says exactly what we keep, why, for how long, and how to take it away. It is meant to be read, not agreed to.

The short version

• We do not sell your data, and there are no advertising or analytics trackers anywhere in this app. Not a reduced set — none.
• Your weight, meals, water, sleep, cycle and skin notes are visible to you alone. Nobody on our team has a screen that shows them.
• Group competitions never show what you weigh. If you join one, your group sees how much you have lost and how far that is towards the goal the group set together — never the number on your scale, and never your starting weight.
• If you turn on the Quran record, what you write down there is yours alone. It is never part of your health record, never shown to anybody, never paid for, and turning the permission off deletes all of it.
• You can download almost everything we hold about you, or delete your account and all of it, from Privacy in the app, without asking us. Three things are not in that download and you can have them by email: our security log of actions on your account, and two small records the app itself cannot read back to you — see "Your rights" below.

Cookies

NaashNaash sets three small cookies of its own, and none of them follows you anywhere else: the one that keeps you signed in; one that remembers light or dark mode if you choose it; and one that remembers the language you tapped on a page before signing in (a language code and nothing more, kept for a year, or for ten minutes after you delete your account so the goodbye page is in your language). There are no advertising or analytics cookies.

What we collect, and why

To have an account: your name, email address, and the language and timezone you choose — at first, the language your sign-up page was shown in, which comes from the language you tapped or your phone's language setting; you can change it any time. If you sign in with a password, we never see it — it is stored as a one-way hash. Optionally a country, city and phone number, used only if we need to reach you about your verification.

If you choose “Continue with Google”: Google tells us your email address, that Google has confirmed it is yours, a number that identifies your Google account to us, your name and a link to your profile photo. We keep your first name as the name your sisters see — you can change it at any time — and throw the rest away: your family name and your photo are never stored. If someone already uses your first name here, we add a number after it (“Amina 2”). We keep none of Google's sign-in keys and never contact Google about you again. Google keeps its own record that you use NaashNaash, under Google's privacy policy, and NaashNaash will be listed among the apps connected to your Google account, where anyone who shares that account could see it. You can remove it there at any time (myaccount.google.com → Security → Your connections); deleting your NaashNaash account does not remove it on Google's side, so do both if you leave.

To verify that this space is women-only: one photograph, reviewed by hand by a woman on our team, then deleted within 30 days. It is never shown to other members, never used for anything else, and we do not run face recognition on it.

Health tracking, if you turn it on: the weights, meals, glasses of water and hours of sleep you write down, along with your workouts, your pre-exercise answers, your skin and hair notes and your pregnancy record if you keep one. This is off until you switch it on. Switching it off deletes all of it — see "Your rights" below, because that is deliberate and it is not what most apps do.

Your Quran reading, if you turn it on: only what you tell us you read — the date, how you are counting it (Juz, pages, ayat or minutes), the amount, the surah and ayat if you choose to add them, and when you wrote it down. Nothing else. There is no mushaf in this app and we do not watch you read; this is a record you keep, of reading you did somewhere else. It is never part of your health record and it is never used for anything to do with your body. Nobody else sees it — not other members, not your group — unless you separately join a group's Quran challenge, where what you take and what you finish appears on your group's board under the one name you picked in your details. That is a separate permission, which you can turn off on its own. Nothing about the Quran in this app is ever paid for. This is off until you switch it on, and switching it off deletes the record you have kept here — see "Your rights" below for the one thing that sits outside it.

Your fasting and dhikr, if you turn them on: the days you tell us you fasted and what kind of fast you say each one was, the adhkar you count and the numbers you reach, and when you wrote each down. Nothing else — there is no box to say why, how it went, or how you felt, because a note like that is usually about your health and we do not need it. Like your Quran reading, this is a record you keep of worship you did somewhere else; it is never part of your health record and it is never used for anything to do with your body. Your day-by-day record of fasting stays on your own pages. If you join a group's fasting or dhikr challenge, what crosses to your group is a count and whether you met the target you set — never which days, and never a streak. That is a separate permission, which you can turn off on its own. Nothing about worship in this app is ever paid for. This is off until you switch it on, and switching it off deletes the record you have kept here.

Reminders about fasting, if you ask for them: they are off until you switch them on. If you switch them on, we store the settings you choose — which occasions you want telling about, how long before, whether the note may name the day on your lock screen, whether to stay quiet during your period, and how your community's moon sighting sits against the calculated calendar — along with a registration for each browser you turned them on in, and a short note of what has already been sent so you are never told twice about the same day. A reminder goes to your own phone and to nobody else, and it says only what you told it it may say. This lives under the same permission as your fasting and dhikr record: switching that off deletes these settings too and the reminders stop.

Group challenges, if you join one: this is a separate permission from health tracking, because it is a different thing. What you record is yours; a challenge shows your group something worked out from it. For a weight challenge that is a figure: how much you have lost, and how far that is towards the goal your group set together — never what you weigh, and never where you started. For a group khatmah it is not a figure at all. The parts of the Quran you take, and the parts you finish, appear on your group's board with your name on them. Joining a challenge means being listed on its board: there is no way to take part without appearing there, and no way to appear under a second name. (One exception, and it clears itself: if we changed something about how you appear without asking — see the note about renaming below — you stay off the boards, with your effort still counted in your group's total, until you answer the one screen that asks how you would like to appear.) You are listed under the name you picked in your details — your name or your nickname — and that one name is how your sisters see you everywhere in the app: in your group's chat, in its member list and on every board. If you would rather they did not see your own name, use a nickname; changing it applies everywhere at once, including everything you have already read. No two members can use the same name or nickname. Turning this permission off takes you out of every challenge and deletes what those challenges worked out about you; a part of the Quran you were holding goes back to your group's board so they can still finish, and one you had already finished stays counted there with your name taken off it.

Cycle dates, if you turn them on separately: used for one purpose — pausing your streak so a rest week does not read as a failure. Kept for 90 days and then deleted automatically. This is the most sensitive thing the app touches and it is deliberately the shortest-lived.

Groups and chat, if you join one: the messages you send. They are encrypted in our database, so a stolen backup or a leaked copy is unreadable without a key we hold separately. Be clear about the limit of that, because it matters: it is not end-to-end encryption. The running app can read messages, because it has to in order to show them to you. If you are told otherwise by anyone, including us, that is wrong.

The wellness coach, if you use it: what you type is sent to Google's Gemini API to produce a reply. With it go up to six earlier turns of the same conversation (never ones the safety check stopped) and, only if health tracking is on, a short summary in words: your goal, how active you are, whether your weight over the last month is steady, going down or going up, and whether you have logged a little or a normal amount of food today. Never the numbers — no weights, no calories — and never your name, email, account number, meal entries, period dates, Quran or worship records, verification photo, or what you wrote about how you eat. We pay for that API rather than using the free tier, which matters: the published terms for the paid tier say Google does not use your prompts or the replies to improve their models, and the free tier says the opposite in as many words. Google does keep a short-lived log of prompts and replies to detect misuse of the service. If you would rather nothing at all left our servers, do not use the coach; the rest of the app works without it.

Where it lives

On a server we rent in Kuala Lumpur, Malaysia. Backups are encrypted before they leave that machine and the key to read them is not kept on it. Our team is small and access is limited to the people who need it to run the service.

How long we keep it

• Verification photographs: deleted within 30 days of review.
• Cycle dates: 90 days, then removed automatically.
• Conversations with the coach: 30 days, then removed automatically — or sooner, if you clear them yourself.
• Your Quran record: until you delete an entry, turn the Quran permission off, or delete your account — whichever comes first. There is no automatic expiry, because it is a record you are keeping rather than something we are holding for our own purposes.
• Everything else: until you delete it, or until you delete your account, whichever comes first.
• Encrypted backups age out on a rolling schedule. If you delete your account, the last copies of your data leave those backups as they expire rather than instantly — we would rather say so than imply a deletion is more absolute than it is.

What we do not do

• No advertising, ever, and no advertising identifiers.
• No third-party analytics. We do not know which pages you visit, because nothing is recording it.
• No selling, renting or sharing your information with anyone for their own purposes.
• No health values, message contents or tokens in our server logs. The logs record that something happened and whether it failed, not what it said.

Your rights

Under the GDPR and Saudi PDPL you can ask to see what we hold, correct it, delete it, take a copy elsewhere, or withdraw a permission you gave earlier. Most of this you can do yourself, immediately, from Privacy in the app — you should not have to write to somebody to get your own information.

Withdrawing a permission usually deletes the data too, and we would rather say so before you tap than after. This is not how most apps behave, so here is exactly what happens:

• Health tracking: deletes your weights, meals, water and sleep, the height and goal on your health profile, your workouts and the answers you gave before your first one, your skin and hair records, and your pregnancy record.
• Cycle dates: deletes the period dates you have stored.
• Your Quran reading: deletes the reading record you keep here — every entry you have written down. A Juz you finished in a group's khatmah belongs to that challenge rather than to this record. Turning group challenges off takes your name off it; the completed Juz itself stays counted on your group's board, so a khatmah your sisters finished together is not un-finished.
• Your fasting and dhikr: deletes the fasting and dhikr record you keep here — every day and every count you have noted. What a group challenge worked out from it belongs to that challenge rather than to this record, and goes when you turn group challenges off instead.
• The wellness coach: deletes your conversations with it. It also takes you out of every group you are in and empties the messages you sent there. Anyone you have blocked stays blocked — turning the coach off does not change that. Be clear about what "empties" means, because it is not deletion: the message row stays, carrying your name and the time you sent it, and only the words are removed and the message marked deleted — so the conversation around it still makes sense to the others in it.
• Group challenges: takes you out of every challenge and deletes what those challenges worked out from your records — including your starting point. A part of the Quran you were holding goes back to your group's board so they can still finish; one you had already completed stays counted there, with your name taken off it.
• The verification photograph works differently: there is no toggle for it, and no way in the app to withdraw it on its own. It is deleted automatically within 30 days of review, and immediately if you delete your account. If you want it gone sooner than that, email us and we will remove it.

Deleting your whole account is still a separate, deliberate action, and it removes everything above at once.

Three things are not in the download, and you can have all three by email. The first is our security log of actions on your account. The second and third exist because names in NaashNaash have to be unique: we keep an internal index of the names and nicknames in use, and — if the change we made on 14 September 2026 affected you — a record of what your name was before, what it is now, and whether you were one of the members we gave a temporary handle to. We deliberately built the app so that it cannot read those back to you itself: a running app that could look up who holds a name is a running app that can be made to list everybody. The rename record is kept until we have written to you about it, and in any case no longer than 90 days. Ask us for any of the three at the address below and we will send it to you.

If you sign in with Google, the download shows that you do and since when, but not the number Google uses to identify your Google account to us. That number is a key to your sign-in rather than information about you, so it stays out of a file that may be saved or shared; ask us and we will send it to you by email as well.

If you would rather write to us, or if something here is wrong, email privacy@naashnaash.com. You also have the right to complain to your data protection authority.

Children

NaashNaash is not for under-16s. If we learn an account belongs to somebody younger, we delete it.

When this changes

If we change something that affects what happens to your data, we will tell you in the app and ask again where the law requires it — not quietly update this page and treat your continued use as agreement.