Privacy Policy
Last updated: 2026-09-14
Scope and data controller
This policy applies to the mynefsapp.com/privacy page accessible without signing in to the MyNefs android app. The service is provided by EKS Digital Labs. Core worship tools can be used without an account. If you choose to create an account, your name, email address, password hash, selected city and optional phone information are processed to manage your account and session.
Google AdMob advertising
Free Android use may include Google Mobile Ads SDK (AdMob) banner ads. According to Google's current SDK disclosure, IP address, app and ad interactions, diagnostic information, and device/account identifiers (including Android advertising ID and app-set ID, where available) may be processed by Google for ad serving, measurement, analytics and fraud prevention. MyNefs does not transmit worship history, Qur'an reading position, dhikr counts or precise location to its own servers for ad targeting. Premium users do not see banner ads.
Consent management (Google UMP)
Before requesting ads, the app updates consent information through the Google User Messaging Platform (UMP). Depending on your region and Google's AdMob configuration, a consent form may be shown; ads are only requested when the SDK permits. Your consent preferences are managed through the options in Google's form. You can reset or delete your advertising ID from your Android device and change your Google ad preferences through Google tools. The consent options in the UMP/AdMob configuration depend on Google's regional regulatory messaging.
Premium purchases and verification
Monthly, yearly and lifetime Premium purchases are made through Google Play Billing. MyNefs does not access card or other payment method details; these are processed by Google Play under its own terms. Upon a completed purchase, the app sends its purchase token and product/plan information to the NEFS server for Android Publisher API verification. NEFS retains the encrypted token, product/plan, available transaction ID and verification state only to manage access. Account deletion removes NEFS-held token and entitlement mapping; it does not cancel, refund or erase Google's own purchase record. Manage subscriptions through Google Play.
Application data processed by MyNefs
The app may process a random visitor ID, session cookie/session token summary, IP address associated with the session and user agent information for basic operation. If you create an account, the account information above is stored; if you enable notifications, the push subscription endpoint, encryption keys, selected city, timezone, calculation method, language and notification settings may be saved. If you use Collective Hatim, your chosen display name and juz assignment information may be processed. This data is not used for ad targeting.
On-device data and location
Precise GPS location used for prayer times, Qibla and core app functions is requested on-device. If you save a location preference, its label and coordinates are stored with the MyNefs visitor record to provide prayer-time settings across sessions. Bookmarks, Qur'an reading progress, dhikr counts and similar worship data may be stored locally and, when synchronised through the visitor record, on NEFS servers. You can disable location and notification permissions at any time through device settings.
Purposes and legal basis
We use data solely to provide the service, maintain accounts and sessions, send user-requested notifications, verify Premium access, and for security and abuse prevention. Google's advertising and consent technologies may process data for the advertising, measurement, diagnostics and fraud prevention purposes described above, under Google's own privacy terms. MyNefs does not sell in-app worship data or use it for ad profiling.
Data retention and deletion
Local data remains on your device until you clear it or uninstall the app. Sessions last 30 days. A deletion challenge retains only hashes of email, IP address and one-time code; it expires after 30 minutes and stale challenges are purged after 24 hours. Completed deletion removes the account, sessions, linked visitor data, device records, account-linked analytics, push records and MyNefs-held purchase-token/entitlement mapping. Shared Collective Hatim history remains with the participant anonymised. Google Play retains its own purchase record under Google's policy.
Your rights and choices
Subject to applicable law, you may make requests regarding access, correction, deletion, processing restriction, objection and portability. You can delete a registered account without login at mynefsapp.com/delete-account after e-mail verification and password confirmation, or use Settings > Delete account in the app. For other requests email support@mynefsapp.com. For ad/consent preferences, use the Google UMP form and device or Google account ad settings.
Security
HTTPS is used for client-server communication. Session tokens are stored in hashed form on the server, and session cookies are created with secure and httpOnly flags in production. Nevertheless, no absolute security guarantee can be given for any online service.
Children's privacy
MyMyNefs is not directed to children under 13. We do not knowingly collect personal information from children. If a parent or guardian believes that a child's personal data has been processed, they may contact us at support@mynefsapp.com. Age-related settings are transmitted to the Google SDK for ad configuration; parents should also manage device and Google account settings.
Policy changes and contact
We may update this policy as the application or legal requirements change. The date in the new version indicates when the change takes effect. For privacy, data requests or questions about this policy, you may contact EKS Digital Labs at support@mynefsapp.com.