Salati

Privacy Policy for Salati

Last updated: September 3, 2026

Salati is an independent, privacy-first Islamic prayer companion developed by sulfuro25 (application ID: io.github.sulfuro25.salati).

1. Core privacy principles

• No user accounts. Salati does not require, support, or use accounts, registrations, passwords, or emails.
• No advertisements. Zero advertisements, banners, or advertising SDKs.
• No analytics or telemetry. No tracking tools, behavioral analytics, telemetry SDKs, or crash-reporting trackers.
• No data selling or advertising use.
• Local-first storage. Preferences, calculations, configured coordinates, and cached responses stay in Android’s sandboxed storage.

2. Device permissions

Location (ACCESS_FINE_LOCATION, ACCESS_COARSE_LOCATION)

Used only when you tap “Detect my location” / “Use current GPS location” to obtain coordinates for prayer times and Qibla. Location is optional. You can skip GPS during onboarding, keep the default Brussels coordinates, or enter city name, latitude, and longitude manually without granting location permission. Salati never reads location in the background.

When monthly prayer timetables are retrieved, the configured latitude and longitude (default, GPS, or manual) are sent over HTTPS to the Aladhan API (api.aladhan.com).

Notifications (POST_NOTIFICATIONS)

On Android 13+, this permission allows prayer alerts and optional White Days reminders. You can mute all notifications or configure them per prayer.

Exact alarms (SCHEDULE_EXACT_ALARM)

Used solely to schedule precise local alarms for prayer notifications and pre-reminders. If access is unavailable, Salati falls back to inexact alarms and does not crash.

Do Not Disturb / ringer policy (ACCESS_NOTIFICATION_POLICY)

Used only if you enable optional prayer silent mode. Salati checks that policy access is granted, silences the ringer for a bounded prayer window, and restores your previous ringer mode. It never leaves the device in a permanent silent or DND state.

3. External network communications

1. Prayer times API (Aladhan, api.aladhan.com): monthly schedules using configured latitude, longitude, year, month, calculation method, school, and high-latitude rule. No account, advertising ID, or analytics identifier is sent by the app.
2. Currency feed (cdn.jsdelivr.net, fallback latest.currency-api.pages.dev): used when you refresh metal prices. Coordinates are not included.

Connections use HTTPS. Service operators can see standard connection metadata such as the device’s public IP address. Salati does not operate a developer backend.

4. Data retention and deletion

All data Salati itself retains lives in your device’s private application sandbox. Android cloud backup and device-to-device transfer of this app data are disabled. Clearing app storage or uninstalling removes local preferences, coordinates, and caches.

5. Contact

• Repository: https://github.com/Sulfur0o/Salati
• Questions and support: https://github.com/Sulfur0o/Salati/issues