salah:clock
Legal

Privacy policy

Last updated · August 25, 2026

SalahClock (“we”, “us”, “our”) is operated by MD. Mezbibur Rahman Khan, a sole proprietor based in Bangladesh. We operate the website at salahclock.app and provide prayer-time display software for mosques, schools, offices, and homes. This policy explains what data we collect, why, and what choices you have.

1. What we collect

1.1 Account data

When you sign in we store your email address and authentication identifiers (handled by our authentication provider, Supabase). We do not store passwords directly.

1.2 Clock configuration

For each mosque clock you create we store its name, location coordinates, selected theme, calculation method, Iqamah offsets, and any custom labels or announcements you set. This information is needed to render your clock.

1.3 Location

Latitude and longitude are required to calculate prayer times. You provide these yourself via a map picker or search — we do not read your device GPS without your action.

1.4 Connected AI assistants

If you connect an AI assistant such as Claude or ChatGPT, we store which app you connected, which of your clocks you allowed it to reach, whether you granted permission to make changes, and when it last used that access. We store this so you can review and revoke it from Dashboard → Account → Connected AI assistants. We do not receive or store your conversations with the assistant.

1.5 Usage data

We collect basic, aggregated analytics (page views, performance, error reports) to keep the service running. We do not build user profiles or cross-site tracking.

2. What we do not collect

  • We never run advertising trackers, social pixels, or behavioural profiling scripts.
  • We do not sell, rent, or share personal data with third parties for marketing.
  • We do not record what you type or view inside the dashboard.

3. How we use data

  • To render your prayer-time clock accurately.
  • To authenticate you and protect your account.
  • To send essential service email (security alerts, billing).
  • To improve the product based on aggregated usage signals.

4. Connected AI assistants

You can connect an AI assistant to your SalahClock account. When you do, you decide which clocks it may reach and whether it may only read or also make changes. Nothing is shared until you complete that authorization, and you can end it at any time from Dashboard → Account → Connected AI assistants, which takes effect immediately.

4.1 What the assistant can reach

While connected, it can read the clocks you granted it: their settings, their calculated prayer times, which screens are online, and your plan limits. If you granted permission to make changes, it can also edit those clocks’ settings — the same settings you can edit in the dashboard.

4.2 What it can never reach

Regardless of what you authorize, a connected assistant cannot delete a clock, access billing or payment information, reach your account settings, export or delete your account, read or change a display passcode, or use administrative tools.

4.3 What leaves SalahClock

Data the assistant requests is sent to the provider of the assistant you connected — for example Anthropic for Claude, or OpenAI for ChatGPT — and is handled under that provider’s own privacy policy once it arrives. We send only what a request needs. We never send your password, your display passcodes, your billing details, or data belonging to clocks you did not grant access to.

4.4 Notification

We email you whenever an app is connected to your account, naming what it can do and which server its access is sent to, so that access granted without your knowledge is visible to you straight away.

5. Third-party services

  • Supabase— authentication and database hosting.
  • Cloudflare— hosting and content delivery.
  • OpenStreetMap— map tiles for the location picker.
  • Anthropic (Claude) and OpenAI (ChatGPT)— only if you choose to connect one of their assistants to your account. They receive the clock data that assistant requests, under their own privacy policies. See section 4.
  • Our payment provider and Merchant of Record— which processes payments, billing, and tax. We share only the information necessary to process payments with our payment processing partners and Merchant of Record, who receive the data needed to complete your purchase under their own privacy policy.

These providers process data on our behalf under their own privacy terms.

6. Cookies

We use a small number of strictly necessary cookies: a session cookie to keep you signed in, and (if you opt in) a theme preference cookie. No advertising or tracking cookies are set.

7. Data retention

We keep your account and clock data for as long as your account is active. You can delete a clock or your entire account from the dashboard at any time. Backups are retained for up to 30 days.

8. Your rights

Depending on your jurisdiction (e.g. GDPR, UK GDPR, CCPA) you may have the right to access, correct, export, or delete your personal data, and to object to certain processing. Email hello@salahclock.appto exercise these rights — we’ll respond within 30 days.

9. Children

SalahClock is not directed at children under 13. If you believe a child has provided us personal data, contact us and we will delete it.

10. Changes to this policy

We’ll update the “last updated” date at the top of this page when we make material changes, and notify account holders by email when changes affect their rights.

11. Contact

For privacy questions or data requests, email hello@salahclock.app.