Privacy
Kafi โ Prayer times, Qibla, Quran, supplications, halal scanner, and AI-powered religio
Last Updated: March 22, 2026
1. Introduction
Kafi ("App") is developed by LYC Partners ("Company", "we", "us"). This Privacy Policy explains how your personal data is collected, used, stored, and protected when you use our application. This policy complies with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable data protection regulations.
2. Data Controller
| Information | Details |
|---|
| Company Name | LYC Partners |
| Location | Istanbul, Turkey |
| Email | adminators@gmail.com |
| Website | https://kafi.lycpartners.co |
3. Personal Data We Collect
3.1 Data You Provide Directly
- Account Information: Name, surname, email address, phone number (for SMS verification).
- Profile Information: Profile photo, username, preferred language.
- Content Data: Questions asked to the AI assistant, favorite prayers, hadith records.
- Feedback: Support requests and feedback form submissions.
3.2 Automatically Collected Data
- Location Data: GPS location for prayer times, Qibla direction, and nearby mosques.
- Device Information: Device model, OS version, app version, unique device identifiers.
- Usage Data: In-app interactions, page views, session duration, crash reports.
- Camera Data: Camera access for barcode scanning; images are not stored.
3.3 Data from Third Parties
- Google Account: Name, email, profile photo when signing in with Google.
- Apple Account: Name and email when signing in with Apple.
4. How We Collect Data
- Through registration and login forms
- Automatically during in-app interactions
- Via device sensors (GPS, compass, camera)
- Through third-party authentication services (Google, Apple)
- Via push notification service (Expo Push Notifications)
5. How We Use Your Data
- Calculate and display prayer times, Qibla direction, and nearby mosques
- Provide AI-powered answers to religious questions
- Offer halal product analysis via barcode scanner
- Create and manage your user account
- Send adhan and worship notifications
- Monitor app performance and fix bugs
- Improve user experience and develop new features
- Comply with legal obligations
6. Third-Party Service Providers
| Service | Provider | Purpose |
|---|
| Infrastructure | Railway / Coolify | Server hosting |
| Authentication | Google OAuth, Apple Sign-In | Social login |
| Notifications | Expo Push Notifications | Prayer reminders |
| Maps | Google Maps / Overpass API | Nearby mosques & restaurants |
| Payments | RevenueCat (App Store / Google Play) | Premium subscription management |
| AI | OpenAI API | AI assistant responses |
7. Data Retention and Deletion
- Account Data: Permanently deleted within 30 days of account deletion.
- Usage Data: Anonymized and retained for 12 months.
- AI Chat History: Removed upon account deletion.
To delete your account: App โ Profile โ Account โ Delete My Account, or email us.
8. Data Security
- AES-256 encryption for data storage
- SSL/TLS 1.3 secure connections
- Regular security audits and updates
- Password hashing with bcrypt algorithm
- JWT-based secure session management
- Role-based access control (admin/user)
9. Children's Privacy
Kafi does not knowingly collect personal data from children under 13. If you become aware that a child has provided us with personal data, please contact us and we will promptly delete such data.
10. Your Rights (GDPR / CCPA)
- Right to access your personal data
- Right to rectification of inaccurate data
- Right to erasure ("right to be forgotten")
- Right to restriction of processing
- Right to data portability
- Right to object to automated decision-making
- Right to withdraw consent
To exercise your rights, email adminators@gmail.com. We will respond within 30 days.
11. Cookies and Tracking
Kafi mobile app does not use cookies. Our website (kafi.lycpartners.co) may use session cookies for basic functionality only. No third-party tracking tools are used.
12. International Data Transfers
Your data may be processed in countries where our server infrastructure is located (EU and USA). These transfers are governed by GDPR Standard Contractual Clauses.
13. Changes to This Policy
We may update this privacy policy from time to time. We will notify you of significant changes via in-app notification or email. The update date will be shown at the top of this page.
14. Contact Us