Privacy, at the roots.

Aroomah (أرومة) brings your prayer times, habits, tasks, and calendar together. Your personal app data is stored on your devices. We do not operate a server that receives your tasks, habits, prayer location, or calendar events.

This policy covers the Aroomah iPhone and iPad app, its widgets, and aroomah.com. Aroomah is provided by Abdullah AlJasser. For privacy questions or requests, contact amj.jasser@gmail.com.

What the app stores

Aroomah stores the tasks and habits you enter, completion history, dashboard settings, prayer settings, reminder preferences, and information needed to identify devices you choose to pair. These records are used to provide the app’s features and are stored locally. There is no Aroomah account to create.

Location, camera, and reminders

With your permission, Aroomah obtains your location to calculate prayer times on your device. It saves the most recent location so the app and widgets can show prayer times without obtaining a new fix each time. Your device’s saved GPS location is not included in device-to-device sync or sent to our website. A place you manually pin is part of your prayer settings and can sync to your paired devices. You can use a pinned place instead of granting location access.

The camera is used only when you choose to scan a pairing QR code. Aroomah does not save or upload camera images. Local Network permission enables direct communication with devices you pair. Notifications are optional and scheduled on your device. Depending on your settings, event or task titles may appear in reminders and widgets, including on your Lock Screen. You can change permissions and notification previews in iOS Settings.

Your Google Calendar connection

Connecting Google Calendar is optional. Google handles sign-in; Aroomah does not receive your Google password. The app requests read-only calendar access (https://www.googleapis.com/auth/calendar.readonly) to list the calendars available to your account and display upcoming events from the calendars you select. It cannot create, edit, or delete events in Google Calendar.

The app accesses calendar names and identifiers, event titles and identifiers, start and end times, and event and attendance status needed to omit cancelled or declined events. Google may include additional event fields in its API responses; Aroomah does not use those fields to build profiles or for advertising.

Selected calendar identifiers are saved in your tile settings. Upcoming event titles, identifiers, and times are cached locally so the app, widgets, and reminders remain useful offline. Access and refresh tokens are stored in the device’s Keychain, accessible to Aroomah and its widget extension. Calendar requests go directly from your device to Google over HTTPS. Google receives the information necessary to serve those requests, including your device’s IP address.

Google credentials and cached event content are not included in Aroomah’s device-to-device sync. Selected calendar identifiers can sync with dashboard settings; connect Google separately on each device. We do not receive or read your Google Calendar data on our servers.

Aroomah uses Google user data only to provide its calendar display, widgets, and reminders. We do not sell it, use it for advertising, transfer it to data brokers, or use it to train AI models. Aroomah’s use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements.

Sync and storage security

When you explicitly pair devices, Aroomah syncs your tasks, habits, dashboard configuration, and related changes directly between those devices over an authenticated, encrypted local-network connection. Aroomah does not use a cloud relay for this sync. Unpairing stops future access but does not remotely erase data already copied to another device.

The app uses Apple’s app sandbox and Keychain, and encrypted connections for Google and paired-device communication. Device security also depends on your passcode, operating system, and who can access your devices. Apple device backups may include app files according to your backup settings; Aroomah does not control those backups.

Retention, disconnection, and deletion

Local app records remain until you remove them or remove the app’s stored data. Deleting a task or habit hides it from the app; deletion markers and past changes can remain in the local sync database. Aroomah does not promise immediate forensic erasure of individual records.

To disconnect Google, open a calendar tile’s settings and choose Disconnect. This removes the saved Google credentials and clears the local event cache on that device. You can also revoke Aroomah’s access in your Google Account connections. Revoking access at Google prevents future requests but does not itself erase previously cached data; disconnect in Aroomah on each device as well. Disconnecting does not delete your Google Calendar events or Google account.

To remove app data from your devices, disconnect Google, unpair devices, and delete the app from each device where you used it. Offloading the app preserves its documents and is not the same as deleting it. Manage backup copies separately through your Apple backup settings. Keychain items can survive app deletion, so disconnect Google before deleting the app. We cannot remotely retrieve or erase your local app database.

Optional Pro purchase

Aroomah Pro is a one-time in-app purchase handled by Apple. Apple processes payment and maintains your purchase history under its own policies. Aroomah does not receive your payment-card details. The app uses Apple’s signed transaction records to check Pro access, restore purchases, and respond to refunds or revocations. A device-only entitlement snapshot is stored in the Keychain for the app’s widgets. Purchase status is not included in Aroomah’s device-to-device sync or sent to an Aroomah server. Removing app data does not remove your purchase from your Apple Account. See Apple’s privacy policy for its handling of purchase information.

This website and support email

The website is hosted by Cloudflare. Delivering and protecting the site involves processing technical request information such as IP address, requested URL, browser information, and request time. Cloudflare may retain security and operational logs under its service policies. We do not add advertising, analytics scripts, tracking pixels, or cookies to this website. See Cloudflare’s privacy policy for its handling of service data.

If you email us, your email address, message, and attachments are processed through Gmail to respond to your request. Do not send calendar contents or other sensitive information unless needed for support. Support correspondence is kept for as long as needed to resolve your request and handle related follow-up, or as required by law. You may request its deletion. Google and Cloudflare may process data in countries other than your own.

Your choices and contact

You can use the app without connecting Google, revoke device permissions, disable reminders, or stop syncing. Depending on where you live, you may have rights to access, correct, delete, or restrict the use of personal information, withdraw consent, or complain to your local data protection authority. For information held in support correspondence, or help exercising these rights, email amj.jasser@gmail.com. Most app data is held only on your devices and is not accessible to us.

If our data practices change, we will update this page and its effective date. Material changes will be communicated through the app or website, and we will seek additional consent where required before using Google data for a new purpose.