Privacy Policy
Last updated: 2026-09-14
Scope and data controller
This policy applies to the mynefsapp.com/privacy page accessible without signing in to the NEFS Android app. The service is provided by EKS Digital Labs. Core worship tools can be used without an account. If you choose to create an account, your name, email address, password hash, selected city and optional phone information are processed to manage your account and session.
Google AdMob advertising
Free Android use may include Google Mobile Ads SDK (AdMob) banner ads. According to Google's current SDK disclosure, IP address, app and ad interactions, diagnostic information, and device/account identifiers (including Android advertising ID and app-set ID, where available) may be processed by Google for ad serving, measurement, analytics and fraud prevention. NEFS does not transmit worship history, Qur'an reading position, dhikr counts or precise location to its own servers for ad targeting. Premium users do not see banner ads.
Consent management (Google UMP)
Before requesting ads, the app updates consent information through the Google User Messaging Platform (UMP). Depending on your region and Google's AdMob configuration, a consent form may be shown; ads are only requested when the SDK permits. Your consent preferences are managed through the options in Google's form. You can reset or delete your advertising ID from your Android device and change your Google ad preferences through Google tools. The consent options in the UMP/AdMob configuration depend on Google's regional regulatory messaging.
Premium purchases and verification
Monthly, yearly and lifetime Premium purchases are made through Google Play Billing. NEFS does not access card or other payment method details; these are processed by Google Play under its own terms. When a purchase is completed, the app sends the purchase token and product/plan information to the NEFS server. The server verifies the token through the Google Play Android Publisher API. Upon successful verification, Premium access is granted. NEFS stores an encrypted purchase token, product ID, transaction ID if available, plan and verification status only to manage the entitlement. Deleting a NEFS account removes NEFS-held entitlement mapping and token records; it does not cancel, refund or erase the purchase held by Google Play. Manage or cancel subscriptions through Google Play.
Application data processed by NEFS
The app may process a random visitor ID, session cookie/session token summary, IP address associated with the session and user agent information for basic operation. If you create an account, the account information above is stored; if you enable notifications, the push subscription endpoint, encryption keys, selected city, timezone, calculation method, language and notification settings may be saved. If you use Collective Hatim, your chosen display name and juz assignment information may be processed. This data is not used for ad targeting.
On-device data and location
Precise GPS location used for prayer times, Qibla and core app functions is requested on-device. If you save a location preference, its label and coordinates are stored with your NEFS visitor record to provide prayer-time settings across sessions. Bookmarks, Qur'an reading progress, dhikr counts and similar personal worship data may be stored locally and, when synchronised through the visitor record, on NEFS servers. You can disable location and notification permissions at any time through device settings.
Purposes and legal basis
We use data solely to provide the service, maintain accounts and sessions, send user-requested notifications, verify Premium access, and for security and abuse prevention. Google's advertising and consent technologies may process data for the advertising, measurement, diagnostics and fraud prevention purposes described above, under Google's own privacy terms. NEFS does not sell in-app worship data or use it for ad profiling.
Data retention and deletion
Local data remains on your device until you clear it or uninstall the app. App sessions are created with a 30-day duration. A deletion-verification request contains only hashes of the email, IP address and one-time code; it expires after 30 minutes and stale requests are purged after 24 hours. When deletion is completed, NEFS removes the account, sessions, linked visitor data, device records, analytics linked to that account, push records and NEFS-held purchase-token/entitlement mapping. Shared Collective Hatim history remains but the participant name and account link are anonymised. Google Play keeps its own purchase/subscription record under Google's policy.
Your rights and choices
Subject to applicable law, you may make requests regarding access, correction, deletion, processing restriction, objection and portability. You can delete a registered account without login at mynefsapp.com/delete-account after e-mail verification and password confirmation, or open Settings > Delete Account in the app. For other requests contact support@mynefsapp.com. For ad/consent preferences, use the Google UMP form and your device or Google account ad settings.
Security
HTTPS is used for client-server communication. Session tokens are stored in hashed form on the server, and session cookies are created with secure and httpOnly flags in production. Nevertheless, no absolute security guarantee can be given for any online service.
Children's privacy
NEFS is not directed to children under 13. We do not knowingly collect personal information from children. If a parent or guardian believes that a child's personal data has been processed, they may contact us at support@mynefsapp.com. Age-related settings are transmitted to the Google SDK for ad configuration; parents should also manage device and Google account settings.
Policy changes and contact
We may update this policy as the application or legal requirements change. The date in the new version indicates when the change takes effect. For privacy, data requests or questions about this policy, you may contact EKS Digital Labs at support@mynefsapp.com.