Privacy Policy for Musoff

Effective Date: January 29, 2026

Musoff ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application Musoff (the "App"). Please read this policy carefully to understand our views and practices regarding your personal data and how we will treat it.

1. Information We Collect

1.1 Personal Identification Information

We collect the following personal information:

• Email Address: Collected when you sign in using Google Sign-In or Sign in with Apple
• User Identifier: A unique identifier (Firebase UID) is generated and stored to identify your account
• Account Creation Date: Timestamp of when your account was created

1.2 Device Information

We automatically collect certain device information when you use the App:

• Device Model: Your iPhone model (e.g., iPhone 14, iPhone 15)
• Operating System Version: Your iOS version
• App Version: The version of Musoff you are using
• Device Language: Your device's language setting
• Country: Inferred from your App Store location

1.3 Usage Data

We collect information about how you use the App:

• App Opens and Sessions: When you open the App and how long you use it
• Screen Views: Which screens within the App you visit
• Feature Usage: Which features of the App you use
• Session Duration: How long you spend in the App

1.4 App-Specific Data

We collect and store the following data related to your use of the App:

• Diary Entries: Positive achievement entries you create in the App (stored securely on your device and in our database)
• Statistics: Aggregate data including music avoidance count and Quran listening time (in seconds)
• Streak Data: Your current streak count and related dates
• Onboarding Responses: Your responses to the initial onboarding questionnaire, including:
  • Age group (stored in plaintext)
  • Goal (stored in plaintext)
  • Referral source (stored in plaintext)
  • Notification preferences (stored in plaintext)
  • Music listening frequency, reason, and timing (encrypted for privacy)
• Music App Blocking Settings: Your selected music apps to block (stored locally on your device)
• Subscription Status: Information about your premium subscription status and plan

1.5 Payment Information

We do not directly collect or store payment information. All payments are processed through Apple's App Store using StoreKit. RevenueCat, our subscription management service, may process subscription-related information, but payment details are handled exclusively by Apple.

2. How We Collect Information

2.1 Information You Provide Directly

• When you sign in using Google Sign-In or Sign in with Apple, you provide your email address
• When you create diary entries, you provide the content
• When you complete the onboarding questionnaire, you provide your responses
• When you select music apps to block, you make those selections

2.2 Information Collected Automatically

• Analytics: Firebase Analytics (Google Analytics) automatically collects device information, app usage patterns, and screen views
• Authentication: Firebase Authentication collects your email address and creates a unique user identifier
• App Functionality: The App collects usage statistics and streak data as you use its features

2.3 Information from Third Parties

• Google Sign-In: We receive your email address from Google when you sign in
• Sign in with Apple: We receive your email address (or a proxy email) from Apple when you sign in
• RevenueCat: We receive subscription status information from RevenueCat
• Apple App Store: Subscription purchase information is provided through Apple's StoreKit

3. Use of Your Information

We use the information we collect to:

• Provide and Maintain the App: To deliver the core functionality of the App, including blocking music apps, tracking progress, and providing Quran audio content
• Manage Your Account: To create and maintain your user account, authenticate you, and sync your data across devices
• Process Subscriptions: To manage your premium subscription, process payments through Apple, and provide access to premium features
• Improve the App: To understand how users interact with the App, identify issues, and make improvements
• Analytics: To analyze App usage patterns, track feature adoption, and measure user engagement (using Firebase Analytics)
• Personalization: To personalize your experience, such as displaying your streak, statistics, and diary entries
• Notifications: To send you push notifications for reminders and encouragement (only if you opt in)
• Customer Support: To respond to your inquiries and provide customer support
• Compliance: To comply with legal obligations and enforce our terms of service

4. Third-Party Services and Data Sharing

4.1 Third-Party Services We Use

We use the following third-party services that may process your data:

• Firebase (Google):
  • Firebase Authentication: Handles user authentication and stores your email address and user identifier
  • Firebase Analytics (Google Analytics): Collects and analyzes app usage data, device information, and user engagement metrics
  • Privacy Policy: https://firebase.google.com/support/privacy
• Supabase:
  • Purpose: Hosts our database and stores your account data, diary entries, statistics, streaks, and onboarding responses
  • Data Stored: User account information, diary entries, statistics, streak data, and onboarding responses
  • Privacy Policy: https://supabase.com/privacy
• RevenueCat:
  • Purpose: Manages subscription purchases, tracks subscription status, and processes subscription-related data
  • Data Processed: Subscription status, purchase history, and subscription plan information
  • Privacy Policy: https://www.revenuecat.com/privacy
• Apple:
  • Sign in with Apple: Provides authentication services
  • StoreKit: Processes subscription payments (payment information is handled exclusively by Apple and is not shared with us)
  • Privacy Policy: https://www.apple.com/privacy/

4.2 Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

• With Service Providers: We share data with the third-party services listed above (Firebase, Supabase, RevenueCat, Apple) as necessary to provide the App's functionality. These service providers are contractually obligated to protect your data and use it only for the purposes we specify.
• For Legal Reasons: We may disclose your information if required by law, court order, or governmental authority, or if we believe disclosure is necessary to protect our rights, property, or safety, or that of our users or others.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to the same privacy protections.
• With Your Consent: We may share your information for any other purpose with your explicit consent.

4.3 Third-Party Privacy Protection

All third-party service providers with whom we share data provide the same or equal protection of user data as stated in this Privacy Policy. Each service provider has its own privacy policy (linked above) that governs how they handle your data, and we require them to comply with applicable data protection laws.

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information:

• Encryption: Sensitive data (such as certain onboarding responses) is encrypted before being stored in our database
• Secure Storage: Sensitive local data (diary entries, streak data) is stored in the iOS Keychain, which uses hardware-backed encryption
• Authentication: We use industry-standard authentication methods (OAuth) that do not require storing passwords
• Database Security: Our database uses Row-Level Security (RLS) policies to ensure users can only access their own data
• Secure Transmission: All data transmitted between the App and our servers is encrypted using HTTPS/TLS

However, please be aware that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

6. Data Retention and Deletion

6.1 Data Retention

We retain your personal information only for as long as necessary to provide the App's services and fulfill the purposes described in this Privacy Policy:

• Account Data: Retained for as long as your account is active
• Usage Data: Analytics data may be retained for up to 26 months (Firebase Analytics default retention period)
• Subscription Data: Retained as required by law and for accounting purposes

6.2 Data Deletion

You have the right to request deletion of your personal data at any time. To request deletion:

• Account Deletion: You can delete your account by contacting us at the email address provided below. When you delete your account, we will delete your personal data from our systems, including:
  • Your account information
  • Your diary entries
  • Your statistics
  • Your streak data
  • Your onboarding responses
• Analytics Data: Analytics data collected by Firebase Analytics may persist according to Firebase's data retention policies, but personal identifiers are anonymized
• Subscription Data: Some subscription-related data may be retained as required by law or for accounting purposes, even after account deletion

6.3 Revoking Consent

You can revoke consent for certain data processing activities:

• Analytics: You can opt out of analytics data collection by disabling analytics in your iOS device settings (Settings → Privacy & Security → Analytics & Improvements)
• Notifications: You can disable push notifications at any time in your iOS device settings (Settings → Notifications → Musoff)
• Screen Time Access: You can revoke Screen Time (Family Controls) access at any time in your iOS device settings (Settings → Screen Time → Family Controls)

7. Permissions and Access

Musoff requests the following permissions on your iOS device:

• Screen Time (Family Controls): Required to block music apps and display shield screens. You can revoke this permission at any time in Settings → Screen Time → Family Controls.
• Push Notifications: Used to send you daily reminders and encouragement messages. This is optional and you can deny or revoke this permission at any time in Settings → Notifications.
• Background Audio: Required to play Quran audio in the background. This is a standard iOS capability and does not require explicit user permission.

8. Children's Privacy

Musoff is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information promptly.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. By using the App, you consent to the transfer of your information to these countries. We ensure that appropriate safeguards are in place to protect your data in accordance with this Privacy Policy, including through contractual agreements with our service providers.

10. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal data:

• The Right to Access: You have the right to request copies of your personal data
• The Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete
• The Right to Erasure: You have the right to request that we erase your personal data, under certain conditions
• The Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data, under certain conditions
• The Right to Object to Processing: You have the right to object to our processing of your personal data, under certain conditions
• The Right to Data Portability: You have the right to request that we transfer the data we have collected to another organization, or directly to you, under certain conditions

To exercise any of these rights, please contact us using the contact information provided below. We will respond to your request within a reasonable timeframe and in accordance with applicable law.

11. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• The right to know what personal information we collect, use, disclose, and sell
• The right to delete your personal information
• The right to opt-out of the sale of your personal information (we do not sell personal information)
• The right to non-discrimination for exercising your privacy rights

To exercise these rights, please contact us using the contact information provided below.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

• Updating the "Effective Date" at the top of this Privacy Policy
• Posting a notice in the App (for significant changes)
• Sending you an email notification (if we have your email address and the change is material)

Your continued use of the App after the effective date of any changes constitutes your acceptance of the revised Privacy Policy. We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, and protect your information.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Last Updated: January 29, 2026