Who we are
Midhana is operated by Khanvas Ltd Owner of Midhana (“we”), London, IG3, United Kingdom. We are the data controller for the information described here. Contact: hello@midhana.khanvas.co.uk.
Summary
Prayer times are calculated on your phone. The app works without an account. We keep the minimum needed to sync your settings to your own home and, if you subscribe, to play the adhan on your speakers. We do not run analytics or advertising SDKs, and we never sell data.
What we collect and why
| Data | Where it comes from | Why | Legal basis |
|---|---|---|---|
| Install identifier (random ID created on first launch), platform, optional device name | Device registration (POST /devices/register) | Identifies your phone within your household so settings and speakers stay in step | Contract |
| Household link code | Generated by us | Lets a second phone join your home | Contract |
| Settings: chosen location (city name, latitude, longitude), calculation method, madhab, high-latitude rule, per-prayer offsets, adhan and reminder preferences | Entered in the app, synced via PUT /settings | Computes the same prayer times on the server so whole-home speakers fire at the right moment; restores your setup on a new phone | Contract |
| Push notification token | Firebase Cloud Messaging on your device | Lets the server nudge the app to re-sync | Legitimate interest |
| Email address (only if you create an account) | You, via the magic-link sign-in | Account recovery; the sign-in link and the deletion confirmation are emailed to it | Contract |
Apple or Google account identifier (the provider’s stable sub value) and, if shared, the email behind it | Sign in with Apple / Google | Account recovery without a password. Apple’s “Hide My Email” relay addresses are supported | Contract |
| Midhana Speaker hardware ID, firmware version, heartbeat and playback reports | The speaker | Operates and troubleshoots the speaker | Contract |
| Sonos account connection (OAuth tokens, encrypted at rest; player and room names; your adhan zone) | Sonos, with your consent | Plays the adhan on your Sonos rooms | Consent (revocable in-app) |
| Subscription status (RevenueCat app user ID, product, expiry) | RevenueCat webhook after a purchase through the App Store or Google Play | Unlocks Premium on your household. We never see payment details | Contract |
| Mosque submissions (name, address, coordinates, facilities, optional website and notes) | You, if you add a mosque | Improves the public mosque directory after review. Published submissions are anonymised; the link to your device is removed on account deletion | Legitimate interest |
| Delivery history (which prayer fired on which speaker, success or failure) | Our scheduler | The in-app reliability screen | Legitimate interest |
| Email address left on this website | You, via the waitlist, Nida interest or contact form | To write once when the app launches, or to reply to you | Consent (unsubscribe any time) |
| Server logs (IP address, request path, timestamp) | Your requests | Security, abuse prevention, rate limiting | Legitimate interest |
What we do not collect
No location in the background, no contacts, no microphone, no advertising identifier, no analytics events, no payment card data. The Qibla compass and the prayer-time calculation run entirely on the phone. This website sets no cookies.
Third parties that process data for us
- Apple (App Store billing, Sign in with Apple, push delivery via APNs)
- Google (Google Play billing, Google Sign-In, Firebase Cloud Messaging)
- RevenueCat (subscription management; receives the purchase receipt and the anonymous app user ID)
- Sonos (only if you connect a Sonos system)
- Hosting: Miles Web Ltd (United Kingdom)
- Email delivery: Khanvas Ltd (European Union)
- Google Fonts: this website loads its typefaces from
fonts.googleapis.com, which receives your IP address like any website - OpenStreetMap: the mosque map loads tiles directly from
tile.openstreetmap.org, which receives your IP address like any website (see the OSMF privacy policy)
Data is stored in the UK/EU. Where a provider processes data outside the UK, transfers rely on the UK IDTA / EU Standard Contractual Clauses.
Retention
Household data is kept while any device in the household is registered. Deleting your account from the app (Settings → Account & sync → Delete account) removes the account immediately; if it was the household’s last account the whole household is erased: settings, devices, push and session tokens, the Sonos connection and its tokens, Midhana Speaker registrations, schedules and delivery history. Deleting the app removes everything stored on the phone. Email sign-in links expire after 15 minutes. Waitlist emails are deleted after launch or when you unsubscribe. A PII-free deletion record (hashed email fingerprint, timestamp) is kept as evidence of erasure.
Your rights
Under UK GDPR you can access, correct, export, restrict or delete your data, and object to processing based on legitimate interest. Most of this is self-service in the app; for anything else email hello@midhana.khanvas.co.uk. You can complain to the Information Commissioner’s Office (ico.org.uk).
Children
The app is not directed at children under 13 and we do not knowingly collect their data.
Security
All traffic to our servers is HTTPS. Sonos tokens are encrypted at rest. Session tokens are revocable per device from the app.
Changes
We will update this page and the “Last updated” date; material changes are announced in the app.