DuaGo Privacy Policy

Summary

DuaGo needs an account, so unlike our games it does keep data about you on a server of ours: your account details, your profile picture if you add one, and what you save in the app — favorites, collections, reminders and prayer settings — so that they follow you to another phone. DuaGo has no advertising, no analytics and no tracking, and we never sell your data. You can delete your account and everything stored with it from inside the app at any time.

Your account

You sign in to DuaGo with one of three methods. Sign-in itself is handled by Firebase Authentication, a Google service, which verifies who you are and gives the app a token our server checks:

• Email and password — Firebase receives your email address and password and sends the verification and password-reset emails. Your password goes to Firebase, not to us; our server never receives or stores it.
• Google — you choose a Google account, and Firebase shares its name and email address with us. We do not receive your Google contacts, your Google profile photo or anything else from that account.
• Phone number — Firebase sends a one-time code to your number by SMS to confirm it is yours.

On our own server, your account holds:

• your name, as you entered it or as it came from Google — you can change it in the app
• your email address or phone number, whichever you signed in with
• the identifier Firebase assigned to your sign-in, so we can recognise you next time
• your profile picture, if you choose one (see below)
• when the account was created and last updated

What you save in the app

So that your setup follows you when you sign in on another phone, these are stored with your account on our server:

• the duas you mark as favorites
• the collections you create — their names and the duas in them
• your dua reminders — the title, time and days of each one, and whether it is on
• your prayer-time settings — your location (see below), the calculation method, the Asr method, which prayers alert you, and how many minutes before each prayer to remind you

Only you can see them. Nothing you save is shown to other users: DuaGo has no public profiles, no sharing between accounts, no comments and no messaging.

Location

DuaGo needs a location only to work out prayer times, and you choose how to give it one. You can pick a city from the list, which uses no location permission at all, or tap “Use my location”, which asks for your device's location once. On both Android and iOS, DuaGo asks only for your approximate location, and it rounds what it gets to about 1 km before saving it.

The prayer times themselves are calculated on your device. But whichever way you set it, the location you chose — the city's name and coordinates, or the rounded coordinates from “Use my location” — is saved in your prayer settings and synced to your account so your prayer times are right when you sign in elsewhere. DuaGo does not track your location in the background, and it does not record where you go; it keeps only the one place you last set. If you would rather not have your coordinates on our server, pick the nearest city from the list instead.

Profile picture

Adding a profile picture is optional. If you do, DuaGo opens your photo library so you can choose one picture; it cannot see any of your other photos. That picture is uploaded to our server (up to 2 MB) and shown in your profile. It is visible only to you and to our authorised staff, never to other users. Choosing a new picture replaces the old one on our server, and removing it from your profile in the app deletes it there too.

Recitations and content

The duas, translations and recitations come from our server. Recitations you play are saved on your device so they work offline; they are encrypted with a key tied to your account, and signing out or deleting your account removes them. Apart from the short-lived server logs described below, we do not keep a record of which duas you read or play.

What stays on your device

Some things never leave your phone: the duas you opened recently, your recent searches, your language and display preferences, and the notifications DuaGo schedules for prayer times and reminders — those are set by the app on your device, not sent from a server. Signing out of DuaGo or deleting your account clears your favorites, history, searches, prayer settings, reminders and saved recitations from the device.

Who processes your data

We use two service providers, each only for the job described:

• Google (Firebase Authentication and Google Sign-In) — verifies your sign-in, sends verification and password-reset emails and phone sign-in codes. Firebase privacy and security · Google Privacy Policy
• Amazon Web Services — hosts our server and database in the Mumbai (ap-south-1) region in India. AWS Privacy Notice

Our server keeps standard web server logs — IP address, time and the request made — to keep the service secure and fix faults. They are rotated out after about two weeks. A small number of authorised Angyal (OPC) Private Limited staff can see account details (name, email or phone, and sign-up date) through our admin panel, to provide support and keep the service running. We do not sell your data, share it with advertisers or use it to profile you.

What DuaGo does not do

• No advertising and no advertising identifier.
• No analytics SDK and no third-party crash-reporting SDK.
• No in-app purchases or subscriptions — the app is free.
• No public profiles, no user-generated content visible to others, and no user-to-user communication.
• No access to your contacts, camera or microphone, and no background location.

Keeping your data, and deleting it

We keep your account and what you have saved for as long as the account exists. You can delete it at any time:

• In the app — Settings → Delete account. You confirm with your password, your Google account or a recent sign-in, and the account is deleted immediately: your profile, picture, favorites, collections, reminders and prayer settings are erased from our database, and your Firebase sign-in record is deleted at the same time.
• Without the app — write to support@angyal.in from the email address on your account, or tell us the phone number you signed in with. We confirm it is your account, then delete it within 30 days.

Copies of deleted data remain in our daily database backups and server snapshots until those expire, which takes up to 7 days; they are not used for anything else in that time. DuaGo account and data deletion sets out every route.

Security

All traffic between DuaGo and our server is encrypted with HTTPS. Passwords are handled by Firebase and never stored by us. Our database is not reachable from the internet; only our own server can connect to it. Signing out revokes your session on our server. No system is perfectly secure, but if we ever learn of a breach affecting your data, we will tell you and the relevant authorities as the law requires.

Children

DuaGo is suitable for all ages but is not directed to children under 13, and it is not enrolled in Google Play's Designed for Families programme. Creating an account requires an email address, a Google account or a phone number; we do not knowingly create accounts for children under 13. If you believe a child has created an account or provided personal information, write to grievance@angyal.in — the designated contact named in our child safety policy — and we will delete it.

Angyal Group's child safety policy sets out the standards we apply to every app we publish, including this one, and how to report a concern about a child's safety.

Your rights

You can see and correct your name and picture in the app, and delete your account and everything stored with it as described above. You can also ask us for a copy of the data we hold about you, or to correct or erase it, by writing to support@angyal.in. These rights apply under India's Digital Personal Data Protection Act, 2023, and, where they apply to you, under other laws such as the GDPR. If you are not satisfied with our answer, you can escalate it to our grievance and data protection contact.

Changes

If a future version of DuaGo changes what it collects, stores or shares, this policy will be updated before that version is released, and the app's store data disclosures will be updated to match. The date at the top of this page shows when it last changed.

Contact

If you have any questions about this Privacy Policy, please contact Angyal at support@angyal.in, or through our grievance and data protection contact.