Privacy

What we keep

• Your account. On an iPhone you can use Sign in with Apple, and on any phone you can sign in with a code we email to you. With Sign in with Apple: the sign-in code Apple gives us, your name if Apple shares it, and the email Apple shares (your own or Apple's private relay address). With an email code: the email address you type. Either way, the name you give Tamam, which the friends you share with see, and your username if you choose one. We never see your Apple ID password, and Tamam has no password of its own.
• The email code, if you sign in with one. We send a six-digit code to the address you type; each code works once, for 10 minutes. To send it, we give your email address and the code to Resend, the company that delivers our email. To check the code you type, we keep only a scrambled copy of it, for at most 10 minutes. Until the email is sent, it waits encrypted in our server's queue of email to send, usually for a few seconds. If it cannot be sent, the encrypted email and the error, which can name your address, are kept for about a day (at most 25 hours) so we can see what went wrong, then deleted; a copy inside our backups is gone within 60 days. The code is the only email Tamam sends you: no newsletters and no marketing.
• If you start without an account. Everything you record stays on your phone, and none of it is sent to our server. Sharing with friends, Khatm together and du'a asks need an account, and so do Apple Health and Oura numbers reaching your rings. If you sign in later, what is on your phone moves into your account; if you sign in to an account you already had, any entry it already holds is kept and the one on your phone is not added.
• What you record. Your prayer and habit ticks, your Deen level and any acts you add to it in your own words, Self care list, routine and settings, and the days you kept.
• Pauses. When you pause your streaks, the dates and the reason you pick: Ill, Travelling, Excused (period) or Something else. Friends never see the reason.
• Your town and time zone. Your town comes from your location if you allow it, from a search of the towns Tamam carries, which runs on your phone, or by looking up any other town by the name you type. When you tap Use where I am, your location is read once, and that one position is sent to Apple Maps to find the town's name. Looking a town up sends Apple Maps the name you typed, then the place it found, to get the town's proper name. On an Android phone, the place lookup built into Android (its geocoder) does both instead of Apple Maps. We keep the town's name and its position rounded to about a kilometre, so prayer times are right, your phone's time zone, and any minutes you move a prayer to match your mosque. We never track where you go.
• Health numbers, if you allow them. From Apple Health: steps, active calories, workout minutes, how long you slept and your bedtime (when the night's sleep started). They fill your Body ring and tick Gym, Walk and Lights out for you. From Oura, if you connect it: readiness, sleep and its stages, your bedtime and wake time, heart rate variability, lowest and average heart rate, breathing rate, temperature, blood oxygen, stress, resilience, cardiovascular age, VO2 max, activity, workouts and Oura's suggested bedtime. We also keep the Lights out bedtime you set. Your Watch's Move, Exercise and Stand rings, and the protein and calories eaten that other apps saved to Apple Health, are read on your iPhone and never reach our server.
• Your Oura connection, if you connect it. You make an app on Oura's website once and type its client ID and client secret into Tamam. We keep the client ID as you typed it, and the client secret and the keys Oura gives us encrypted, so we can read your Oura numbers. Disconnecting Oura removes the keys Oura gave us; deleting your account removes the client ID and secret too.
• Activity and food you log. The type, minutes, distance and calories of a hike, walk, gym session or calories you add, and for food you log, its grams of protein, the calories eaten and the name you give it. From version 1.2, if you allow it, Tamam also saves what you log to Apple Health.
• Your journal, if you use it. For each day: how your heart is (the feeling you pick, or your own word for it), the theme that feeling belongs to, the card Tamam gave you that day, and for older entries the question it asked; each line you write, with when you wrote and last changed it and your time zone then. Also the affirmation lines you add in your own words, and the small act you keep from a week's look back. If a line you write matches a short list of words about suicide or self-harm, which your phone checks, Tamam shows the Samaritans number instead of a card, and the day can keep a mark of that match so the card stays away all day. Only you see any of it; friends never do.
• Medication, if you use it. The names and doses you add, the doses you mark as taken and, for Ramadan, the doses you move to suhoor or iftar, so reminders come at the right time.
• Your prayer and dhikr records. Which prayers and acts of worship you ticked, and your counter totals. These show your religious practice, so they are kept private to you; a friend you share with sees only what Who sees what lists.
• Make-up prayers and fasts, if you count them. The prayers and fasts you owe, your estimate and your plan for making them up, and the ones you have made up. Only you see them.
• Private goals, if you turn them on. Kept on your iPhone only, never sent to our server. They are only shown to you: never to friends, and never on widgets, the lock screen, notifications or the picture of your week. If you lock them with Face ID, your iPhone checks your face; Tamam never receives it. On an Android phone they stay on the phone in the same way, and the lock uses fingerprint or face unlock: your phone checks it, and Tamam never receives your fingerprint or face.
• Khatm together and du'a asks, if you use them. Which juz of a khatm you claim and read, the days you ask friends for du'a and whom you asked, and your answers to their asks. Nothing is typed in either.
• Your friends in Tamam. The people you share with, each added inside Tamam by an invite link or by a request to their username, the requests you send and receive, and whether you have muted or hidden from each one. Tamam never reads your phone's contacts.
• A notification address, while you are signed in and notifications are allowed. Whenever Tamam opens and you are signed in, if your iPhone allows Tamam's notifications (whatever you first allowed them for: prayer reminders, medication reminders or Sharing), it sends us the address Apple gives it, so your friends' nudges, shared awards, du'a asks and thanks, and khatm news can reach your phone. Switching off From friends in Notifications, signing out on that iPhone, or deleting your account removes it. Prayer and medication reminders are set on your phone itself.
• Prayer times for the Lock Screen, if you turn it on. If you switch on Start it at each prayer's time under Lock Screen in Notifications, your iPhone sends our server its prayer times for the next three days, the address Apple gives Tamam to start the Lock Screen countdown, and the address of each countdown it shows, so the countdown can start by itself when Tamam is closed. Each prayer time is deleted a day after it ends, and all of them when you switch it off, sign out or delete your account.

What we never do

• No adverts, no tracking across apps or websites, and no analytics companies.
• We never sell or rent your information, and never share it with anyone you have not chosen.
• Health numbers are used only to show your own rings and ticks. They are never used for marketing.

Who sees what

Only the friends you accept, and only while you share with them. A friend sees your name, which of the five prayers you ticked today, your Deen ring (just the five prayers unless you switch off Friends see only the five prayers under What friends see in the Sharing tab, or your Ramadan plan chooses more), a daily score of how many shared habits you ticked (the prayers, Gym, Walk and Lights out), how much of the arc you have kept, and the days you prayed all five or closed every shared ring. Your Body and Self rings are not shared until you switch them on under What friends see in the Sharing tab. When one is on, a friend sees only that ring's percentage for today, never the habits, names or numbers behind it. Body's percentage can come partly from Apple Health, but friends never see the numbers behind it, such as steps, sleep or workout minutes. Self's percentage never counts working on yourself or your journal. Friends never see your health numbers, food, activity, medication, the names of your habits, private goals, make-up prayers and fasts, journal, affirmations, notes, town or email.

Someone who types your exact username in Tamam sees your name and username, and can ask to share with you; nothing is shared until you accept. To stop that, switch off Let people add me by username in Settings. In the Sharing tab you can hide your activity from a friend, except during a 7-day competition with them, and remove a friend at any time.

In a 7-day competition, your friend also sees your points each day: one for each percent you closed of your Deen ring, as they see it, and of your Body ring, up to 600 a day. Points never say what you ticked. When you share an award from the Awards sheet, the friends who see you get a notification naming it.

In a khatm you start or join, its members see which juz each person claimed and read. When you ask for du'a, the people you asked see that you asked, and you see how many made du'a for you, never who. If you then say JazakAllahu khayran, each person who made du'a sees your thanks.

Where it lives

On a server we run ourselves in Helsinki, in the European Union, reached only over an encrypted connection. Backups of the server are kept for up to 60 days, then deleted.

App updates come from Expo, the service the app is built with. Each update check sends a random install number, and if the app crashes, the error message, so a broken update can be found. Expo never receives your Tamam data.

Hetzner, which hosts our server, Cloudflare, which carries the encrypted connection to it, and Expo handle data only to run Tamam, and give it the same protection as this page.

Resend, which delivers the sign-in code email, sends it from the European Union (Ireland) and keeps each email it sends for 30 days.

Deleting everything

In the app, tap the round photo at the top right (your initial, or a person icon before you set a name), then Settings, then Delete my account and data. It removes your account, every tick, number, journal line, food and activity entry, and every share, straight away. If you sign in with Apple, it also cancels the Sign in with Apple link to Tamam. It also clears the app's data on that phone, including your private goals. Anything Tamam saved to Apple Health stays in the Health app until you delete it there. A khatm you were part of carries on for the others, without your name. Your username stays taken for 30 days, with nothing else of yours, so nobody else can use it straight away. It cannot be undone. Copies inside backups are gone within 60 days.

Used without an account, nothing is on our server: deleting Tamam from your phone deletes everything it kept, apart from anything it saved to Apple Health. Without the app, send the request from the account deletion page; we check it is yours, then delete the account within 30 days.

Children

Tamam is not meant for children under 13.