Privacy Policy for Sabr
Last updated: October 6, 2026
This Privacy Policy applies to the Sabr mobile app. Sabr is a Quran, Arabic, prayer and focus app. Current Sabr versions require an account before normal app access; local app data stays on the device, while account and sync features transfer only the data required for those features to the Sabr backend.
1. Controller
Ordernova UG (haftungsbeschränkt) Flugplatzstraße 11 55126 Mainz Germany Phone: +49 176 432 59 263
2. Scope
This Privacy Policy describes how Sabr processes data when you use the app on iOS or Android. It does not apply to other Ordernova services.
3. Locally Stored App Data
Sabr stores app data locally on your device. This may include focus times, streaks, app rules, Quran reading settings, memorization marks, vocabulary cards, categories, review history, selected mosque, prayer reminder choices, language settings and downloaded audio files.
4. Permissions
Depending on the platform, Sabr may use notifications, location, Screen Time / Family Controls, Accessibility features, internet access, background audio and exact alarms. On Android, the list of launchable apps is loaded only when you open App Rules; it remains local and is not synced. If you explicitly enable Sabr Gate as an accessibility service, Sabr receives the foreground app identifier and window-change events only during an active morning gate or focus session to detect a distracting app and show the local return-to-Sabr overlay. Sabr does not read screen text, keystrokes, messages, passwords, or form fields and does not prevent you from opening settings, disabling the service, or uninstalling the app.
5. Quran Audio and External Content
When Quran audio, timing data or offline audio packages are used, Sabr may contact external Quran audio or content providers. Technical connection data and the selected surah, ayah or reciter may be visible to the relevant provider.
6. Prayer Times and Location
When you search for mosques, Sabr may contact an external prayer-time provider. Manual searches send the search term; nearby search sends current coordinates to that provider so nearby mosques and prayer times can be found. Qibla calculation uses location locally on your device and does not send it to Sabr servers.
7. Account and Sync
A Sabr account is required for normal app access in current versions. For email/password accounts, Sabr processes email address, username, password authentication data, sessions and email verification status. For Google login and Sign in with Apple, Sabr processes the login identifiers provided by the provider and links them to your Sabr account. Cloud sync starts only after successful email verification or for verified OAuth identities. Synced data may include private vocabulary cards and categories, review history, Quran progress, Hifz marks, focus statistics and platform-neutral settings. Platform-bound blocking configuration such as Android package lists or iOS Family Controls tokens is not transferred as shared sync data.
8. Community and Shared Content
When you use community features, Sabr processes your public username, friend requests and connections, invite identifiers, private deck shares, acceptance of the current Community Rules version, and blocks you create. Reports may include the reported user or content, a reason, optional details, review status, and moderation notes. Reports are treated confidentially and used only for abuse prevention, review, and enforcement of the Community Rules. Blocked users can no longer find or contact you or share content with you; existing connections and shares are removed. Publishing public decks processes deck content and your public username. Online quiz duels process participants, answers and results. Community notifications include events such as friend requests and deck shares.
9. Optional Marketing Emails
If you voluntarily opt in, Sabr may use your email address to send product updates, learning tips or reactivation emails. Sabr stores the consent status, time, source and applicable consent version for this purpose. You can withdraw this consent at any time through the unsubscribe link in a marketing email. No marketing emails are sent without explicit consent; transactional account emails such as verification or password reset remain separate. If you change your account email address, existing marketing consent is reset for the new address.
10. Analytics and Roles
Sabr may process signed-in product and learning events, such as account creation, account deletion, login method, sync success or failure, vocabulary review activity, Quran progress, Hifz activity and completed focus sessions. This data is used to improve stability, sync and future learning features. Admins may view user-level technical and learning events where needed for support, abuse prevention, product analysis or role-based maintenance of public vocabulary data. Email addresses are not shown in public leaderboards or public analytics surfaces. Technical diagnostics may also include a device identifier, platform, app version and build, startup duration and sync status.
11. Retention and Deletion
Locally stored Sabr data remains on your device until you change it in the app, clear app data through the operating system or uninstall the app. Account and private sync data remains stored while your account exists or where legal obligations require longer retention. Raw product and learning analytics data is retained for up to 24 months and then aggregated or anonymized. If you delete your account in the app, Sabr removes private server data, community reports submitted by that account, sessions and personal account data; the deleted username and current email address are no longer reserved by that account afterwards. Account references are removed from analytics events and public edit history. Published decks are removed from public discovery; private copies already created by other users remain with those users.
12. Security
Local data is stored in the app storage provided by the operating system and protected by the app sandbox. Session tokens are stored in the secure storage mechanisms of each platform. Network connections to the Sabr backend and OAuth providers use encryption where technically supported.
13. Contact
For privacy questions, contact us at support@ordernova.de.