Privacy
Policy

The short version.

Sadd exists to put a deliberate barrier — سدّ — between you and the scroll, and to turn each crossing into sadaqah. That mission only works if you trust the barrier. This policy is the long form of a simple promise: we collect the minimum required to run the app, and nothing for our own gain.

The full detail follows, but you are not required to read it. The summary above is binding, not decorative.

What we collect.

We group data by why it exists. If a use disappears, so does the data.

What we never see.

Some boundaries are not configurable — they are structural. The iOS Screen Time API does not expose this data to us, and we have designed the app so it never could.

• The content of any app we shield — what you scrolled, posted, watched, messaged, or searched inside Instagram, TikTok, X, or anything else.
• Your contacts, photos, location, microphone, or camera. Qibla uses your device compass and a coarse, on-device heading — no coordinates leave your phone.
• The text of your niyyah — see the next section.
• Your browsing history or any data from apps you have not explicitly chosen to seal.

Your niyyah text.

The Niyyah Gate asks you to write why you are opening a sealed app. That text is the most personal thing in Sadd, so it is the most protected.

If you choose to export your weekly muḥāsaba (a Pro feature), the file is generated on your device and shared only where you send it. We keep no copy.

Payments & sadaqah.

The app itself never charges you. Sadaqah works as a commitment contract you set up once on our web portal (sadd.app): you save a card with Stripe and authorize “charge me $X every time I log a bypass,” up to a monthly cap. Here is the data trail.

• Stripe stores and processes your card under its own privacy terms. We receive a customer reference and a confirmation — never your card number.
• When you log a bypass in the app, our server records the amount, the charity, and the timestamp, then asks Stripe to charge your saved card.
• The donation is routed to the charity you chose through Stripe Connect. We show you an itemized receipt for every charge.
• Charities receive disbursement totals — never your identity, niyyah, or app usage.

Who we share with.

A short, complete list of the third parties involved in running Sadd. We do not sell, rent, or trade personal data to anyone, for any purpose.

We will disclose data only where legally compelled, and will notify you unless prohibited by law. Because your niyyah and in-app activity never reach us, they cannot be produced.

How long we keep it.

• Niyyah text — 24 hours, on-device, then erased.
• Usage counts — rolling 90 days for your trends, then aggregated and anonymized.
• Receipts & sadaqah records — 7 years, as required for charitable and tax recordkeeping.
• Account data — until you delete your account, after which it is purged within 30 days.

Your controls.

Wherever you live, you can exercise these rights from inside the app — no email required.

• Access & export — Settings → Privacy → Download my data.
• Delete — Settings → Account → Delete account. Immediate and irreversible.
• Correct — edit your profile and worship preferences at any time.
• Opt out of diagnostics — Settings → Privacy → Diagnostics.

Residents of the EU/UK (GDPR) and California (CPRA) have additional statutory rights, including objection and non-discrimination. Reach us at privacy@sadd.app and we will respond within 30 days.

Children.

Sadd is rated 12+ and is not directed at children under 13. We do not knowingly collect data from children under 13. A parent or guardian may set up Sadd for a minor using Apple Family Sharing; in that case the organizer is responsible for consent.

Changes to this policy.

When we make a material change, we will update the date above and notify you in-app before it takes effect. Continuing to use Sadd after the effective date constitutes acceptance. Past versions are archived and available on request.

Contact us.

Questions about your privacy are answered by a human, not a form.