Login

Sign Up

After creating an account, you'll be able to track your payment status, track the confirmation.
Username*
Password*
Confirm Password*
First Name*
Last Name*
Email*
Phone*
Contact Address
Country*
* Creating an account means you're okay with our Terms of Service and Privacy Statement.
Please agree to all the terms and conditions before proceeding to the next step

Already a member?

Login

Hadi – Privacy Policy

Hadi – Your Islamic Companion

Last updated: 24/09/2026

Introduction

Hadi is run by Medorius Ltd (“we”, “our”, “us”), which is the data controller for your personal data. Hadi is developed in partnership with The Middle Community, a registered charity.

This policy explains what information Hadi collects, how we use it, how long we keep it and what rights you have. Most of Hadi works without an account, and in that case almost everything stays on your device.

Information we collect

1. Location

We use your location to give you accurate prayer times, find nearby mosques and show the Qiblah direction. You can give Hadi your location in two ways.

Automatic location (GPS). If you allow it, Hadi reads your device’s position only while you are using the app. It is used on your device and sent to the services listed under Third-party services, which need it to return place names, time zones, solar times and nearby mosques. The last location found is kept on your device so the app opens quickly and works offline. It is never saved to our servers.

Manual location. You can search for a town or city instead. Your search text is sent to OpenStreetMap Nominatim, which returns matching places and their coordinates. The coordinates Hadi saves are the ones Nominatim gives for the place you chose, usually the centre of that town or city, not your device’s position. If you turn off location services while Hadi is using GPS, it switches to manual mode using the last location your device reported.

Where your location is stored. Your location is stored on your device. If you have a Hadi account and have agreed to sync (see section 3), your manual location, if you have set one, is also saved to your account so your devices stay in sync. Your GPS location is never saved to your account.

You can turn off location services at any time in your device settings or set your location manually. Some features, such as nearby mosques, may be less accurate without it.

2. Account information (optional)

You do not need an account to use Hadi. If you create one, we store:

  • Your email address and name, from you or from Google or Apple Sign-In, to identify your account and contact you about it.
  • An account ID and a device ID, so your devices can sync without overwriting each other.
  • A record of your consent to sync (when you agreed, and which version of the wording you agreed to).
  • Your synced settings and content, only after you have agreed to sync. This is listed in section 3.

3. Religious practice data

Much of what a Hadi account syncs can reveal your religious beliefs or practice. Under UK and EU data protection law this is “special category” data. With your consent, your account stores:

  • Prayer settings: madhab, calculation method, prayer time adjustments, Hijri date adjustment and your manual location
  • Missed (qadha) prayer records
  • Zakat and khums calculator figures
  • Qur’an bookmarks, verse notes and reading settings
  • Dhikr counts
  • Favourite du’as and Names of Allah
  • Islamic calendar events you add
  • App preferences: language, theme, display, notification and audio settings

We only store this in your account with your explicit consent, which we ask for when you sign in or finish setup. Nothing is synced until you agree. We use it only to sync your settings and content between your devices, and we never share it with anyone for their own purposes.

You can withdraw consent at any time in Settings → Account → Withdraw permission. This deletes your data from Hadi Cloud and signs you out. Everything stays on your device.

4. Device information

Hadi reads your device model, operating system version, battery settings and time zone on your device to calculate prayer times and schedule notifications reliably. This is not sent to us, except when you choose to send a bug report.

5. Age check

Before you create an account, we ask your date of birth to check you meet the minimum age (see Children’s privacy). Your date of birth is not stored or sent anywhere. We keep only the result (passed or not), the date of the check, and the age and country that applied, on your device. This is cleared when you sign out, unless the check was not passed.

6. Bug reports

If you send a bug report, it is stored in Google Firebase and includes what you write, your app version, your platform, basic device details and the place name the app is showing (or coordinates if no place name was found). If you are signed in, it also includes your account email and ID. If you are not signed in, it includes the email address you enter so we can reply. If you choose to email us instead, we receive whatever your email contains.

7. Audio

Hadi plays the Adhan and notification sounds from files bundled with the app or downloaded recitations. It never records audio and does not have access to your microphone.

How we use your information

We use your information to:

  • Calculate accurate prayer times for your location
  • Show nearby mosques and the Qiblah direction
  • Schedule prayer notifications and reminders
  • Sync your settings and content across your devices, if you have an account and have agreed to sync
  • Diagnose and fix problems you report
  • Contact account holders about their account or important service changes

We do not use your information for advertising or profiling, and we do not use any analytics or crash-reporting service.

Our legal basis

  • Your account (email address, name, account and device IDs): performance of our agreement with you (Article 6(1)(b)).
  • Synced settings and content, including religious practice data: your explicit consent (Articles 6(1)(a) and 9(2)(a)).
  • Location and notifications: the permissions you grant on your device, which you can withdraw in your device settings.
  • Bug reports: our legitimate interest in fixing problems you tell us about (Article 6(1)(f)).
  • Limited security data, such as Firebase App Check: our legitimate interest in protecting the service from abuse (Article 6(1)(f)).

You have the right to object to processing based on legitimate interests (see Your rights).

Storage and security

  • If you use Hadi without an account, your data is stored only on your device. You can clear it through your device settings or by uninstalling the app.
  • Account data is stored in Google Firebase, encrypted in transit and at rest.
  • All data sent between the app and our servers is encrypted using HTTPS/TLS.
  • Printed Qur’an files are checked against a fixed fingerprint after download, so a tampered file is rejected.

How long we keep your data

  • Account data (email, name, account ID): until you delete your account, then removed from our servers within 30 days.
  • Synced settings and content, device IDs and your consent record: until you withdraw consent or delete your account. Withdrawing deletes them from Hadi Cloud straight away.
  • Manual location: with your synced data, until you change it, switch to automatic location, withdraw consent or delete your account.
  • GPS location: never stored on our servers.
  • Bug reports: until the issue is resolved or the report is no longer useful.
  • Age check result: on your device only, until you sign out (if passed) or uninstall the app.

Third-party services

Hadi uses the services below. Every request to them includes your device’s IP address, as with any internet connection. Each has its own privacy policy.

  • Google Firebase (Authentication, Firestore, Remote Config, App Check), including our sign-in domain auth.medorius.com: stores your account, synced data and bug reports, and delivers app configuration. It receives your account and synced data if you have an account. Synced data and bug reports are stored in London (Google Cloud europe-west2). Sign-in details are handled by Google LLC and may be processed in the United States.
  • Google Sign-In and Apple Sign-In: used only if you choose to sign in with Google or Apple.
  • Google Maps and Google Places: find nearby mosques. They receive your coordinates.
  • OpenStreetMap Nominatim and GeoNames: turn coordinates into place names and search for places. They receive your coordinates or search text.
  • TimezoneDB and sunrise-sunset.org: find your time zone and solar times. They receive your coordinates.
  • londonprayertimes.com: official London prayer times. It receives a request for timetables if you use that calculation method.
  • Google Calendar (public OpenFajr feed): more accurate Fajr times for the Birmingham, England region. It receives a request for the public timetable if enabled in settings.
  • alquran.cloud, cdn.islamic.network, quran-tafseer.com, web.archive.org and hadithapi.com: Qur’an text, translations, tafsir, recitation audio and hadith. They receive a request for content, not your identity or location.
  • pengemosque.org and middlecommunity.org: printed Qur’an downloads. They receive a request for the file.
  • gold-api.com and open.er-api.com: metal and currency prices for the zakat and khums calculators. They receive no personal data.
  • Apple App Store: checks whether a newer version of Hadi is available. It receives a request for the app’s version.

If you tap to get directions to a mosque, Hadi opens Google Maps, which then handles your request under their own policies.

We do not use any advertising, analytics, crash-reporting or session-recording service, and Hadi does not track you across other apps or websites. All fonts are bundled inside the app, so Hadi makes no font requests to Google or any other host.

Data sharing

We do not sell your personal information or share it for cross-context behavioural advertising, and we have not done so in the past 12 months. We share data only with the services listed above, to run the app.

Children’s privacy

You can use Hadi at any age without an account. To create an account you must be at least 13, or at least 16 in the European Economic Area unless your country sets a lower age. The app checks this before an account is created (see Age check). We do not knowingly collect personal information from children below these ages. If you believe a child has given us personal information, contact us at outreach@middlecommunity.org and we will delete it.

Your rights

Depending on where you live, you have the right to:

  • Access your data. Download a copy of all your data at any time in Settings → Account → Download my data, or ask us for it.
  • Correct your data. Update your email address and preferences in the app, or ask us to.
  • Delete your data. Delete your account and its data in Settings → Account → Delete account, or at [Hadi – Delete Account] if you no longer have the app. Without an account, clear the app’s data or uninstall it.
  • Withdraw consent. Withdraw consent to storing your data in Hadi Cloud at any time in Settings → Account → Withdraw permission. This deletes the cloud copy and signs you out. It does not affect anything we did before you withdrew.
  • Data portability. The download in Settings → Account is a machine-readable JSON file.
  • Object or restrict. Object to processing based on our legitimate interests, or ask us to restrict how we use your data.
  • Control permissions. Turn off location or notifications in your device settings at any time.
  • Complain. Contact the UK Information Commissioner’s Office at ico.org.uk, or your local supervisory authority if you are in the EEA.

To use any of these rights, contact us using the details below. We will respond within one month.

International data transfers

We are based in the United Kingdom. Your synced data and bug reports are stored in the UK, in Google Cloud’s London region. Some Firebase services, including Authentication (which holds your email address and name), are run globally by Google LLC and may process data in the United States. Where data leaves the UK or EEA, we rely on the safeguards in our providers’ data processing terms, including the UK International Data Transfer Addendum and the European Commission’s Standard Contractual Clauses.

Your California privacy rights

In the past 12 months we have collected these categories of personal information:

  • Identifiers: email address, name, account ID, device ID
  • Internet or other electronic network activity: your app settings and use of app features
  • Geolocation data: precise location
  • Sensitive personal information: precise geolocation, and religious beliefs revealed by your prayer settings, missed prayer records, zakat and khums figures and Qur’an notes

We collect each of these to provide the app’s features, as described above. We do not sell your personal information or share it for cross-context behavioural advertising, including that of consumers under 16. We use sensitive personal information only to provide the service you asked for, and not to infer characteristics about you, so you do not need to ask us to limit its use.

You have the right to know what personal information we collect, to get a copy, to correct it, to delete it, and not to be treated differently for using these rights. You can get a copy or delete your data directly in the app in Settings → Account, request deletion at Hadi – Delete Account, or email outreach@middlecommunity.org. An authorised agent can make a request for you if they give us written permission we can verify.

Changes to this policy

We may update this policy when our practices or the law change. We will post the new version in the app and on our website and change the “Last updated” date. If a change affects what you have consented to, we will ask for your consent again.

Contact us

Hadi is operated by Medorius Ltd, registered in England and Wales (company number 11287159). Registered office: Suite Ra01, 195-197 Wood Street, London, England, E17 3NU.

For any privacy question or request, contact outreach@middlecommunity.org.

To delete your account and data, see Hadi – Delete Account.