Privacy Policy
Privacy that matches how Hilal actually works
Hilal is local-first. Your habits, intentions, progress, rewards, settings, and encrypted backup files are primarily handled in your browser, not in an account database.
Last updated: July 4, 2026
This Privacy Policy explains what information Hilal handles, where it goes, and what control you have. Hilal does not require an account to use the dashboard.
This page describes the current app behavior in plain language.
Quick read
- No account is required to track habits.
- Progress data is stored in your browser by default.
- Location detection is optional and only starts when you ask for it.
- Feedback is optional and is only sent when you submit it.
- Analytics may be used to understand broad app usage, but it does not need your habit history.
Information that stays on your device
Hilal stores your display name, habit list, completed days, intentions, rewards, preferences, completed tours, and related app state in browser storage on your device.
Hilal uses browser-based encryption for the main app data and for exported backup files when supported. This is designed to reduce casual access to local data, but it is not a replacement for securing your device, browser profile, or operating-system account.
Some browser storage can still be cleared by you, your browser, private browsing settings, device cleanup tools, or another person with access to the same device profile.
Information that can leave your device
Prayer times: when you use a city and country, Hilal uses that city, country, and date to request timing data from Aladhan.
Optional location detection: if you choose to detect your location, your browser asks for permission. Coordinates are used to request an approximate city and country from OpenStreetMap Nominatim, then the city and country are saved locally for future prayer-time requests.
Quran and hadith content: Hilal may request public verse or hadith content. These requests are for content delivery and do not require your habit history.
Feedback: if you submit feedback, Hilal sends your message, feedback type, optional name, optional email, language, page context, basic browser context, and timestamp so the maintainer can understand and respond to the report.
Analytics
Hilal may use privacy-conscious analytics to understand broad usage patterns such as page views, device/browser type, approximate region, and feature usage.
You can limit analytics through browser privacy controls, tracking protection, ad blockers, or by not consenting where a consent control is provided by the hosting environment.
Sharing and public pages
Achievement sharing creates a tokenized link from inside the app. The token may include the achievement id, an optional display name, and a timestamp so the share page can personalize the message.
Bare achievement URLs are not listed in the sitemap and are marked noindex because they are not complete public pages without the token.
Data retention and deletion
Local app data stays in your browser until you reset it in the app, clear site data in your browser, uninstall the PWA/browser profile, or replace it by importing a backup.
Exported backup files are files you choose to download and store. Hilal does not receive those backup files unless you intentionally send them somewhere else.
Feedback emails may be retained as needed to understand, debug, and improve the app. You can ask for feedback messages tied to your email address to be removed by contacting the maintainer.
Third-party services
Hilal may use Aladhan for prayer times, OpenStreetMap Nominatim for optional reverse geocoding, analytics tooling for broad usage insights, an email delivery provider for feedback messages, and the hosting provider for serving the app.
Those services process requests under their own policies. Hilal avoids sending your full local habit history to those services.
Children
Hilal is not directed to children under 13 and does not knowingly collect personal information from children under 13. If you believe a child sent personal information through feedback, contact the maintainer so it can be removed.
Your controls
You can reset local app data from settings, clear site data in your browser, export an encrypted backup, import a backup, deny browser location permission, and avoid submitting optional feedback fields.
Because most app data is local-first, the maintainer generally cannot see, restore, or delete your habit history from a server.
Changes and contact
This policy may change when Hilal changes how it stores data, uses service providers, or offers new features. The updated date at the top will change when the policy is revised.
For privacy questions, use the in-app feedback form or the creator website linked in the app footer.