Zakifi Privacy Policy

Effective date: 10 November 2026

Last updated: 10 November 2026

This policy explains how the Zakifi app (com.zakifi.app) handles your information. Zakifi is published on Google Play by the developer Hoiyo, which is Muhammad Naqash Muhammad Abdullah, an individual trader in the United Arab Emirates (“we”). Questions: support@zakifi.com.

Summary

We do not sell your data.
The app has no ads and no advertising or analytics trackers.
Your location for prayer times stays on your phone.
In Kids Space, a child’s voice is recognised on the phone only. It is never recorded or sent.
You can export your data or delete your account inside the app.

What we store on our servers

Information	Examples	Why
Account	Email, a scrambled (hashed) password, your name if you give it, a sign-in session, and a scrambled password reset code if you ask for one (it stops working after 15 minutes)	To run your account and let you reset a forgotten password
Money records	Transactions, notes, budgets, goals, net worth history, assets and zakat settings, gifts you record, loans you write down	To show your budget and estimates
Names of other people you type	Who you lent money to, who received a gift	To show your own records
Family	Family name, members and the names you give them, including a child’s name if you add one, roles, chores, rewards, allowances, approvals	To run the shared family budget
Religious practice, if you use these features	Madhab, only if you choose one (until then zakat uses Hanafi rules and the app says so), prayer-time method, Hijri adjustment, missed prayers and fasts, fasting log, deeds, dhikr counts, Quran plan, Qurbani plan, results you saved to ask a scholar	To provide the tools you choose. This can reveal your religion, so we treat it as sensitive. It is not shown to family members and is not sent to the AI assistant
Kids Space	See “Children” below	To run Kids Space

We need your email and password to create an account. Everything else depends on what you choose to enter.

What stays on your phone

Location for prayer times and Qibla. It is not sent to our servers.
Reminders, which your phone schedules.
Private details about a child that a parent may add (name, birthday, notes).
App backups through Android or iPhone are turned off for the app’s storage, so these items are lost if you delete the app.

Who receives your data

We use service providers only to run the features below.

Receipt scanning (optional). The photo you choose goes to our AI provider (Anthropic) to read the amount and shop. We do not keep the photo.
AI assistant (off until you turn it on). Your question and summary figures, such as totals by category, budget limits, and zakat and giving totals, go to the AI provider. Descriptions, shop names, notes, family names and worship records are not sent. Do not type private details into your question.
How long the AI provider keeps it. Anthropic keeps what we send (the receipt photo, or the question and figures) for up to 30 days, its standard retention, and then deletes it. Under its commercial terms it does not use this data to train its models.
Hosting. Our servers are run by Hostinger.
Password reset emails. If you ask to reset a forgotten password, we use your email address to send you a 6-digit code. Our email delivery provider, Resend (servers in the EU), receives your address and that message only to deliver it. We send no other email this way.
YouTube (Kids Space videos). When a parent adds a video link, our server asks YouTube for the video’s title and picture. If a parent searches for videos in the app, the search words go to Google’s YouTube Data API, and the parent’s screen shows YouTube’s pictures of the results. On a child’s device, a video plays only after a parent enters the PIN, and then in YouTube’s privacy-enhanced player (youtube-nocookie.com). YouTube’s terms and Google’s privacy policy apply inside that player.
No speech services. Kids Space recognises speech on the phone only and sends it to no one. See “Children”.
Sharing you start. If you use the phone’s share sheet, for example to send a calculation to a scholar, you decide where it goes. We save the summary to your account so you can send it again.
Family members can see the shared family information their role allows.

Where data is processed

We are based in the United Arab Emirates. Our servers and our service providers may process your data in other countries, including the United States, where the law may give different protection. We use providers that commit to protecting it. By using Zakifi and the optional features above, you agree to this transfer, and you can withdraw by turning the feature off or deleting your account.

Why we use your data

We use your data to provide the app you asked for, and on your consent for optional features and for religious practice data. We do not use it for advertising, and we do not sell it. You can withdraw consent at any time; this does not affect what was done before.

We may disclose information if the law requires it. If the business is transferred, we will tell you first.

Children

Zakifi accounts are for adults aged 18 or over. Kids Space is a child mode that a parent or guardian creates and controls from their own account.

A parent or guardian must agree before a Kids Space is created. We record when they agreed and to which wording. Deleting the space withdraws that consent.
A child has no account in Kids Space and never signs in. Kids Space does not ask for a child’s name, age, birthday, photo, email, school or location.

What we store for each Kids Space. All of it belongs to the parent’s account:

The parent’s settings: a private nickname that is the parent’s own label and is not shown on the child’s device, an avatar, a level, the daily time limit, quiet hours, which areas and lesson subjects are on, and the PIN, which we keep only as a scrambled (hashed) copy.
Missions the parent writes, their coins, and which ones were done each day.
Approved video links (the YouTube video or playlist id and the title the parent gives it) and the parent’s “do this, then that” rules, including any phrase the parent asks the child to say.
Simple daily counts: minutes used, minutes of video, lessons, games, phrases said, and prayer stars and Quran reading if the parent turned those on.
Progress in the app: lessons finished, practice progress for each skill, stickers (with any note a parent adds), coins, the pet’s level, family quests and Ramadan journey days.
Paired devices: a random key for each paired phone or tablet, kept only as a scrambled (hashed) copy, and the 6-digit pairing code, also hashed, which expires after 10 minutes. The key is not a hardware or advertising ID.
Voice messages a parent records for the child. Each one is deleted as soon as it has been played once, or after 7 days at most.

Speech. “Say it back” and talk commands listen only after a tap on the button, and only with the phone’s on-device speech recognition. If the phone cannot recognise the language on the device, Kids Space does not listen at all, and a grown-up can confirm with the PIN instead. The audio and the words stay on the phone: Zakifi does not record, keep or send them, and no speech service receives them. Our server learns only that a rule’s phrase was said.

Videos. Videos play only with a grown-up. A parent enters the PIN on the child’s device, and only then does the app load the video, in YouTube’s privacy-enhanced player (youtube-nocookie.com), so the parent can watch with the child. Until then, the child’s screens load nothing from YouTube or Google, not even video pictures. Searching for videos is only on the parent’s screens.

Separately, a parent can add a child to the Family budget as a profile without a login, under a name of the parent’s choosing. That name is stored on our servers. A nickname is fine.

We keep Kids Space information only until the parent deletes the space or their account, and voice messages for the shorter time above. We do not use it for advertising, and we do not share it with third parties except the service providers needed to run Kids Space. Kids Space information is not sent to the AI provider.

Parents can view, export or delete this information through their account, withdraw consent by deleting the space, delete a Kids Space, or contact us at support@zakifi.com. If you think a child has given us personal information without a parent, please contact us and we will delete it.

Security

Information moves between the app and our servers over encrypted connections. Passwords and PINs are stored only as hashes. No system is perfectly secure, and we will notify you of a breach where the law requires it.

How long we keep data

We keep your data until you delete it or delete your account. Voice messages are kept as described above. Deleted data may remain in backups for up to 30 days. Server logs, which may include IP addresses, are kept for up to 30 days for security.

Delete your account and data

In the app: go to More, then My account, and delete your account. You will need your password. Your account and the data stored with it are removed from our servers straight away, apart from backups as described above.

Without the app: email support@zakifi.com from your account email with the subject “Delete my Zakifi account”. We will confirm it is you and delete the account within 30 days.

Shared family records. If you belong to a family, deleting your account removes you from it. Records you added to the shared family budget, such as spending and chores, can stay with the family so its totals remain correct, and your name may still show on them. Ask us at support@zakifi.com if you want your name removed from them.

Your choices and rights

Export a copy of your data in the app.
Correct your information in the app.
Turn the Zakat, Family and Worship modules off in Settings.
Refuse location, microphone or notification permissions. The related features will not work, and the rest of the app will.

Depending on where you live, including under the UAE Personal Data Protection Law and the EU and UK GDPR, you may have rights to access, correct, delete, move or restrict your data, to object to its use, and to complain to a regulator such as the UAE Data Office. Contact support@zakifi.com and we will reply within 30 days.

Religious and financial estimates

Zakifi’s zakat, worship and Islamic calculator tools (including inheritance, kaffarah, ushr and halal screening) are calculators and trackers. They have not been reviewed by a scholar and are not a fatwa or an official ruling. Zakifi does not give financial advice.

Website and analytics

This section covers our website, zakifi.com. The rest of this policy covers the app.

Hosting. The website is hosted and delivered by Cloudflare. To deliver and protect the pages, Cloudflare processes the technical details every browser sends, such as your IP address, browser type and the page you asked for. We do not combine these with your Zakifi account.
No cookies or ads from us. The website does not set its own cookies, show ads or use advertising trackers. It has no sign-in and no forms.
Analytics. We use Cloudflare Web Analytics to count visits and measure how fast pages load. Cloudflare describes it as a service that “does not collect or use your visitors’ personal data”, and it does not use cookies or log the query string in web addresses.
Links. Links to Google Play and other sites take you to services with their own privacy policies.
Email. If you email us, we use your message and address only to reply and keep a record of the request.

Changes

If this policy changes, we will update this page and the date above, and tell you in the app when the change is significant.

Contact

Hoiyo (Muhammad Naqash Muhammad Abdullah), United Arab Emirates. Email: support@zakifi.com