Privacy Policy — ActivePray

Last updated: 24 September 2026

ActivePray is built to respect your privacy. We have no analytics, no advertising, and no tracking, and almost everything the app knows about you never leaves your device and your own iCloud. There is one exception — your username — and this policy explains it plainly, along with everything else.

The short version

• We run no analytics, no advertising, and no third-party tracking.
• Almost everything stays on your device — and in your own iCloud. Your name, prayer streaks, history, saved verses, saved places, pilgrimage progress and settings are stored locally, and (if you're signed into iCloud) synced across your devices under your Apple ID. That lives in your iCloud account, which we cannot access. Your profile photo stays on your device only.
• One thing is stored in a database we control: your username. Usernames have to be unique, and uniqueness cannot be checked on a device that can't see any other device. See Your username below for exactly what is kept and who can read it.

Signing in

The app uses Sign in with Apple. Apple gives the app an identifier for you, and the name you choose to share; both are stored on your device and in your own iCloud. We never see your Apple ID password, and if you use Apple's Hide My Email we never see your address either.

Signing out clears this device and nothing else. Your username stays yours, and what is synced to your iCloud stays there, so it returns when you sign in again with the same Apple ID; your profile photo, which is only ever on the device, does not. Delete Account, in Settings, erases everything the app stored: your identity, your progress and history, your saved places and pilgrimage progress, your profile photo, any reminders it had scheduled — on this device and in your iCloud — and your username record (see below).

To be exact about what "delete" can mean here: revoking a Sign in with Apple token is a server-to-server call, and we have no server to make it from. So the app removes everything it holds, and does not claim a revocation it cannot perform. You can withdraw the app's access yourself at any time under Settings → your Apple Account → Sign in with Apple on your device.

Your username

Your username is unique across everyone who uses ActivePray. That is only possible if there is one shared list, so this is the part of the app that does not live solely on your device.

Where it lives. In a CloudKit database belonging to ActivePray, hosted by Apple on our behalf. Unlike your personal data, this database is ours rather than yours.

What is stored in it. Three things, and nothing else:

• the username you chose,
• the identifier Apple gave us for you when you signed in with Apple,
• the date you claimed it.

Your display name, your profile photo, your prayer times, your streaks, your history and your location are not in it.

Who can read it. It is a public CloudKit database, which means it is readable by the app on other people's devices, which is what keeps two people from choosing the same username. The app has no people search, so your username isn't a way for anyone to find you. It is not published on the open web, is not indexed by search engines, and we do not sell, share or transfer it to anyone.

Removing it. Choosing Delete Account releases your username so that it returns to the pool and can be claimed by someone else. That deletion needs a network connection; if the app is offline when you delete your account, the record may remain until the app can reach Apple again. Everything on your device is erased immediately either way.

Changing it. Changing your username claims the new one and releases the old.

Your profile

Your display name and profile photo are yours to set and are stored on your device — the photo as a file in the app's own storage, never uploaded. The name syncs through your own iCloud so your devices agree; the photo stays on the device you chose it on. Neither is in the username database described above.

Location

If you allow it, the app uses your location on your device to calculate accurate prayer, Shabbat, and new-moon times, and the direction of prayer (toward Jerusalem or the Kaʿba). The app asks iOS for kilometre-level accuracy rather than the most precise fix available; iOS decides what it hands over, and you can restrict it further with Precise Location in iOS Settings.

To show the name of your city, your coordinates are sent to Apple's geocoding service (a standard iOS feature). If you use the places-of-worship directory, your coordinates and what you're searching for are likewise sent to Apple Maps to return nearby results. Both are handled by Apple under Apple's privacy terms; your location is never sent to us or to any other third party. You can also set your city manually instead, and you can turn location off entirely in iOS Settings.

Optional calendar feeds

The Karaite and Hijri calendars depend on the moon being seen, so the app can show confirmed sightings alongside its own calculated dates. It does that by fetching a calendar file from an https web address that you enter in Settings — one for each of those two calendars. Both are off by default, and the app ships with a bundled copy so it works with neither set. If you do set an address, the app downloads that file from where you pointed it; the request carries no personal information, no identifier, and no location.

Reminders and widgets

Reminders are scheduled on your device by iOS. There is no push server: we cannot send you a notification and never learn whether you received or opened one. The Home and Lock Screen widgets read a small file the app writes into storage it shares with them on the same device — the next prayer, the saved verse — which never leaves the phone.

Bug reports

If you send a bug report, the app composes an email to the developer in your own mail app. Alongside what you write, it fills in your display name, the app version and your iOS version, so a fault can be placed. You can see and edit all of it, and nothing is sent until you press send. Nothing is transmitted automatically.

Subscriptions

Active+ is an optional subscription handled entirely by Apple's App Store. We never see your payment details. The app asks the App Store whether your subscription is active and gets back yes or no; nothing about the purchase is sent to us. Managing or cancelling is done through your Apple Account, and if the subscription lapses the app simply returns the paid settings to their free values on your device.

Your data and deletion

Apart from the username record described above, your data lives only on your device and in your own iCloud, so you are in control. Signing out erases what the app keeps on this device — your profile, streaks, history, saved places and pilgrimage progress — and leaves the copy in your iCloud for when you sign in again. Deleting the app removes its data from your device; data already synced to your iCloud is removed with Delete Account, or by deleting the app's data in iOS Settings under your Apple ID.

Children

The app is a general-audience prayer companion and is not directed at children. It sends no personal information to us about anyone.

Changes

If this policy changes, we will update the date above and post the new version here.

Contact

Questions about privacy? Email kastlefive@icloud.com.