Privacy Policy

MyAmal — Your Global Muslim Companion

Package: com.myamal.app
Effective date: 27 May 2026
Last updated: 5 August 2026

Summary: MyAmal collects the name and phone number you provide during in-app registration, together with basic device information and a one-way hashed device identifier, to manage your free trial fairly and prevent abuse. This data is stored in a private database controlled solely by the developer and is never sold or shared with third parties. Most other data is processed on your device. Location is used only to calculate prayer times and Qibla direction. We use Firebase Cloud Messaging for notifications and Google Play Billing for subscriptions. To measure the effectiveness of our advertising, we collect your device's advertising identifier and share it with TikTok as our advertising and analytics partner. You can reset or limit this identifier in your device settings at any time.

1. Who We Are

MyAmal is a mobile application developed and operated by an independent solo developer ("we," "us," or "our") based in Malaysia. The app provides Islamic utilities including prayer times, Qibla direction, Quran reading, supplications (du'a), Hijri calendar, and optional premium features (KenanganKu memorial).

This Privacy Policy explains what data MyAmal collects, how we use it, and your rights regarding that data.

2. Data We Collect

2.1 Location Data

With your permission, MyAmal accesses your device's GPS coordinates to:

Location data is processed on your device and is not transmitted to our servers. If GPS is unavailable or denied, the app may use your IP address as a fallback through the third-party service ipapi.co to estimate your approximate location.

2.2 Device Sensor Data

The app reads your device's magnetometer (compass) to display Qibla direction. This data is processed locally and never leaves your device.

2.3 Push Notification Token

MyAmal uses Firebase Cloud Messaging (FCM) to deliver push notifications such as app updates and prayer reminders. To enable this, Firebase generates a unique device token. This token does not contain personal information but is associated with your device installation.

2.4 Subscription and Payment Data

MyAmal Premium is an optional annual subscription (USD 3/year) processed entirely through Google Play Billing. We do not directly receive, store, or process your payment card details. Google handles all payment processing under its own privacy policy.

The app stores your subscription status (active/trial/expired) and expiry date locally on your device using Android's shared preferences.

2.5 Photo Selection (KenanganKu Premium Feature)

If you use the KenanganKu memorial feature, you may select photos from your device's gallery. These photos are processed entirely on your device using Google ML Kit for face detection. Photos are not uploaded to our servers or shared with any third party.

2.6 Advertising Identifier

MyAmal collects your device's Advertising ID (Google Advertising ID / GAID) — a resettable identifier provided by your device — to measure the effectiveness of our advertising campaigns and to understand how users discover and install the app. This identifier is collected and shared through the TikTok Events SDK. See Section 6 — Advertising and Analytics for full details and your choices.

2.7 App Preferences

The app stores your settings locally on your device, including:

Your app settings and profile may also be included in your device's standard Android backup to your own Google account, so that they are restored if you reinstall the app or move to a new device. This backup is controlled by your device's backup settings, not by us.

2.8 Registration, Trial and Fraud Prevention Data

When you register inside the app, and periodically while you use it, MyAmal collects and sends the following to a private database controlled solely by the developer:

We use this data to manage your 14-day free trial fairly (so it continues correctly if you reinstall the app), to prevent trial abuse and fraud, and to understand how many active users the app has. This data is never sold and never shared with any third party. To request deletion of this data, contact us using the details in Section 14.

2.9 Khairat Membership Data (Malaysia only)

The Khairat feature lets you join the death benefit fund of a participating mosque in Malaysia. It is optional. If you never open it, none of the data below is collected.

When you register for Khairat, the following is stored in a private database and Google Drive folder controlled solely by the developer:

Why the NRIC number is required: when a member or a registered dependant passes away, the family submits a claim to the mosque. The mosque must be able to verify identity before releasing funds. Without the NRIC number, a legitimate claim cannot be confirmed. Your NRIC is displayed in masked form (for example 650412-**-****) everywhere inside the app and on the web page.

Who can see this data: the treasurer and committee of the mosque you join, and the developer. Mosque officials access it through a PIN-protected page and can only see members of their own mosque. This data is never sold, never shared with advertisers, and never used to send you marketing.

Payments: you pay the mosque directly through your own banking app. MyAmal does not process, hold, or handle your money, and never sees your banking credentials or card details.

3. How We Use Data

DataPurposeStored / Sent Where
GPS coordinatesPrayer time & Qibla calculationDevice only
IP address (fallback)Approximate location if GPS deniedSent to ipapi.co, not stored by us
FCM tokenPush notificationsFirebase (Google)
Advertising IDAdvertising measurement & analyticsShared with TikTok
Subscription statePremium feature access controlDevice only
Name & phone numberTrial management & fraud preventionDeveloper's private database (Google)
Device info & hashed device IDTrial management & fraud preventionDeveloper's private database (Google)
Language & settingsApp personalizationDevice only
Selected photosKenanganKu memorial displayDevice only

4. Data We Do NOT Collect

MyAmal does not collect:

The name and phone number collected at registration are used only as described in Section 2.8 — trial management and fraud prevention — and are never sold or shared.

5. Third-Party Services

MyAmal uses the following third-party services. Each operates under its own privacy policy:

Google Drive and Google Sheets — used as the storage for Khairat membership records and receipt images. These are private folders owned by the developer, not public storage. Receipt images are stored with link access so that mosque officials can open them for audit purposes.

6. Advertising and Analytics

MyAmal uses the TikTok Events SDK to measure the effectiveness of our advertising campaigns and to understand how users discover and install our app. For this purpose, the app collects and shares your device's Advertising ID (a resettable identifier) with TikTok, acting as our advertising and analytics partner.

This information is used to:

Your choices: You can reset or limit your Advertising ID at any time through your device settings (Settings → Google → Ads). From the same screen, you may also opt out of personalized advertising by enabling "Delete advertising ID" or "Opt out of Ads Personalization."

For more information on how TikTok processes this data, please refer to the TikTok Privacy Policy.

7. Data Sharing

We do not sell or rent your personal data. We share data with third parties only in the following limited circumstances:

8. Data Retention

Data stored on your device persists until you uninstall the app or clear the app's data through Android Settings. The FCM token is managed by Firebase and is invalidated when you uninstall the app. Data shared with TikTok is retained and processed under TikTok's own data retention practices.

Registration, trial, and fraud-prevention data (Section 2.8) is retained in the developer's private database for as long as needed to manage trials and prevent abuse. You may request its deletion at any time via the contact details in Section 14.

Khairat membership data (Section 2.9) is retained for as long as your membership is active, and afterwards for as long as the mosque is required to keep financial records for audit and for claims that may still arise. Cancelled records are marked as cancelled rather than deleted, so that the mosque's accounts remain auditable. You may request deletion at any time; where a record must be retained for audit, we will tell you plainly instead of deleting it silently.

9. Your Rights

10. Children's Privacy

MyAmal is intended for general audiences and is suitable for users of all ages. We do not knowingly collect personal data from children under 13. If you believe a child has provided personal information during registration, contact us and we will delete it.

11. Security

We take reasonable measures to protect data processed by the app, and all data transmitted off your device is sent over secure, encrypted connections. Because most data is stored locally on your device, its security depends primarily on your device's own security (screen lock, encryption, OS updates). We recommend keeping your device secure and updated.

12. International Users

MyAmal is available globally. Data processed by third-party services (Firebase, Google Play, TikTok, ipapi.co) may be transferred to and processed in countries other than your own, subject to those services' own data protection practices.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Significant changes will be announced through an in-app notification. The "Last updated" date at the top of this document indicates when the policy was last revised. Continued use of the app after changes constitutes acceptance of the revised policy.

14. Contact

If you have questions about this Privacy Policy or your data, please contact us: