Effective date: February 19, 2026
Noor — Ramadan Companion ("the App") is a free application developed by The Cubitt ("we", "us", "our"). It is designed to help users track prayers, read Quran, count dhikr, journal reflections, plan meals, and track charity during Ramadan. The App is available as a web app and on Android and iOS.
The data controller responsible for your personal data is:
When you use the App without creating an account, we collect no personal data whatsoever. All data you enter (prayer logs, reading progress, goals, reflections, meal plans, charity records, etc.) is stored locally on your device only, encrypted with AES-256-GCM encryption. We have no access to this data.
If you choose to enable Cloud Backup, you will need to create an account with an email address and password. When Cloud Backup is enabled, we store the following on our cloud infrastructure:
Cloud Backup is entirely optional. You can use the App fully without it.
Where we process personal data, we rely on the following legal bases under the UK General Data Protection Regulation (UK GDPR) and the EU General Data Protection Regulation (EU GDPR):
| Processing Activity | Legal Basis |
|---|---|
| Cloud Backup account creation and data storage | Consent — Art. 6(1)(a) GDPR. You actively opt in by creating an account and enabling Cloud Backup. |
| Fetching prayer times and Quran text from third-party APIs | Legitimate interest — Art. 6(1)(f) GDPR. Necessary for core app functionality; no personal data is transmitted. |
The App does not require you to create an account, sign in, or provide any personal information such as your name, email address, or phone number. Account creation is only needed if you choose to enable Cloud Backup.
The App does not use any analytics services, advertising SDKs, or tracking technologies within the app itself. We do not collect usage statistics, device identifiers, IP addresses, or location data through the App.
The App connects to the following third-party services:
| Service | Purpose | Data Sent |
|---|---|---|
| Al Adhan API (api.aladhan.com) | Calculate prayer times | City name and calculation method only |
| AlQuran Cloud API (api.alquran.cloud) | Fetch Quran text and translations | Surah/ayah number only |
| Supabase (hosted on AWS, EU region) | Cloud Backup storage and authentication (optional) | Email, password (hashed), and app data — only if you enable Cloud Backup |
The Al Adhan and AlQuran Cloud APIs receive only the parameters needed to return content. No cookies, identifiers, or personal data are transmitted to these services.
Local storage: By default, all app data is stored locally on your device, encrypted at rest using AES-256-GCM. The App also provides a password-protected backup/restore feature so you can export your data securely.
Cloud storage: If you enable Cloud Backup, your data is stored on Supabase servers (hosted on AWS). Your data is protected by row-level security tied to your account and encrypted in transit (TLS) and at rest.
International transfers: If your data is transferred outside the UK or European Economic Area (EEA) via Cloud Backup, appropriate safeguards are in place in accordance with UK GDPR and EU GDPR, including standard contractual clauses (SCCs) where applicable.
If you clear your browser data or uninstall the App, all locally stored data will be permanently deleted. Cloud backups, if enabled, remain available until you delete them.
Local data is retained on your device until you delete it or uninstall the App. Cloud Backup data is retained until you delete your account or request deletion. We do not retain personal data longer than necessary for the purpose it was collected.
Under the UK GDPR, EU GDPR, and other applicable data protection laws worldwide, you have the following rights:
To exercise any of these rights, contact us at info@thecubitt.com. We will respond within 30 days.
UK residents: You may lodge a complaint with the Information Commissioner's Office (ICO).
EU residents: You may lodge a complaint with your local Data Protection Authority (DPA).
The App does not knowingly collect personal information from children under 13 (or under 16 in the EU/UK where applicable). Since the default mode collects no personal data at all, the App is safe for users of all ages. Cloud Backup requires an email address and should only be set up by users who meet the minimum age requirement in their jurisdiction.
We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated effective date. If we make material changes that affect your rights, we will notify you through the App.
If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us at: