1. Introduction
Salati Kids ("we," "us," or "our") provides a parental control app that encourages children to pray on time.
We take your family's privacy seriously, especially the privacy of children.
This Privacy Policy explains what data we collect, why we collect it, how we protect it, and your rights as a user.
Salati Kids is available on iOS and Android and is designed for Muslim families with children ages 7 to 18.
A parent or guardian must create an account and provide consent before any child data is collected.
By using Salati Kids, you agree to this Privacy Policy. If you do not agree, please do not use the app.
2. Data We Collect
We only collect data that is necessary for the app to function. Here is a complete breakdown:
| Data |
Collected From |
Purpose |
Stored Where |
| Email address |
Parent only |
Account creation and login |
Firebase Auth |
| Name |
Parent + Child |
Profile display within the app |
Firebase Firestore |
| Child's age and gender |
Parent enters on behalf of child |
App personalization, prayer figure display |
Firebase Firestore |
| Prayer completion logs |
Generated by app |
Track prayer progress, streaks, parent dashboard |
Firebase Firestore + local device (Hive) |
| Approximate location (city-level) |
Device GPS (coarse) |
Calculate accurate prayer times |
Used in real-time only, not stored on servers |
| Device information |
Automatic |
App functionality, crash diagnostics |
Firebase Crashlytics |
| Subscription status |
RevenueCat |
Manage premium features |
RevenueCat servers |
3. Data We Do NOT Collect
We believe in data minimization. The following types of data are never collected by Salati Kids:
- Camera images or video (processed entirely on-device, never stored or transmitted)
- Precise or fine GPS location (we only use coarse, city-level location)
- Contacts, messages, or call logs
- Browsing history or app usage data beyond prayer verification
- Advertising identifiers or tracking IDs
- Biometric data (pose detection tracks body position, not identity)
4. Camera Usage and On-Device AI
Your Camera Data Never Leaves the Device
Salati Kids uses the device camera to verify that a child has performed their prayer.
This is powered by Google ML Kit's pose detection, which runs 100% on the device.
Here is exactly what happens:
- The camera activates only during prayer verification, when the child taps "Verify Prayer."
- Google ML Kit analyzes the camera feed in real-time to detect body positions (standing, bowing, prostrating).
- The app receives only numerical coordinates of body joints (shoulder, hip, knee positions). It never receives or processes actual images.
- Once verification is complete, the camera turns off. No images or video frames are saved, even temporarily.
Important Clarifications
- No images or video are ever stored on the device, on our servers, or anywhere else.
- No images or video are ever transmitted over the internet.
- Pose detection is not biometric identification. It tracks general body position (e.g., "person is bowing") and cannot identify who the person is.
- No facial recognition is used at any point.
- Parental consent is required before camera-based verification is enabled for a child.
5. Children's Privacy
Protecting children's privacy is at the core of how we built Salati Kids.
Our app is designed for families with children ages 7 to 18, and we take special precautions
to comply with children's privacy laws worldwide.
COPPA Compliance (United States)
The Children's Online Privacy Protection Act (COPPA) applies to children under 13 in the United States.
Salati Kids fully complies with COPPA:
- Verifiable Parental Consent: A parent or guardian must create an account and explicitly add their child before any child data is collected. Children cannot create their own accounts.
- Minimal data collection: We only collect the child's name, age, and gender, all entered by the parent. The child's device generates prayer completion logs.
- No behavioral advertising: We do not serve ads of any kind. We do not track children for advertising or marketing purposes.
- No third-party tracking: We do not use analytics SDKs, advertising networks, or tracking pixels.
- Parental control: Parents can review all data collected about their child, request deletion, or revoke consent at any time through the app or by contacting us.
GDPR-K and Age Appropriate Design Code (EU/UK)
For users in the European Union and United Kingdom, we also comply with GDPR provisions for children
and the UK's Age Appropriate Design Code (Children's Code):
- Data processing for children is based on parental consent.
- Privacy settings are set to the highest level by default.
- No profiling, nudging, or behavioral techniques are used.
- Data collection is limited to what is strictly necessary for the app's core function (prayer tracking).
- Privacy information is presented in clear, age-appropriate language.
How Parental Consent Works
- The parent downloads Salati Kids and creates an account using their email address and a password.
- The parent adds their child's profile by entering the child's name, age, and gender.
- The parent generates a 6-digit linking code and enters it on the child's device.
- The child's device connects via anonymous authentication. No personal data is collected from the child's device directly.
- The parent must explicitly consent to camera usage for prayer verification before it is enabled.
Data Collected from Children
The only data associated with a child's profile is:
- Name (entered by the parent)
- Age and gender (entered by the parent)
- Prayer completion records (generated by the app: timestamps, completion status, streak counts)
Children do not provide any personal information directly. They do not have email addresses, passwords, or accounts in our system.
Deleting Child Data
Parents can delete their child's data at any time by removing the child's profile from within the app.
This permanently deletes all associated data from our servers.
Parents can also contact us at support@salatikids.com to request deletion.
6. How We Use Your Data
We use collected data only for the following purposes:
- Providing the service: Calculating prayer times, tracking prayer completion, displaying progress to parents and children.
- Account management: Creating and authenticating parent accounts, linking child devices.
- App improvement: Crash diagnostics via Firebase Crashlytics help us identify and fix bugs.
- Subscription management: Processing and managing premium subscriptions through RevenueCat.
We do not use your data for advertising, marketing to children, profiling, or any purpose beyond what is described here.
7. Third-Party Services
Salati Kids uses a limited number of trusted third-party services. We do not use any advertising networks, analytics tracking tools, or data brokers.
Firebase (by Google)
- Firebase Authentication: Manages parent login (email + password) and child device linking (anonymous auth).
- Cloud Firestore: Stores user profiles, prayer logs, and family data.
- Firebase Crashlytics: Collects crash reports and device information to help us fix bugs.
Firebase Privacy Policy
RevenueCat
- Manages subscription purchases and entitlements across iOS and Android.
- Processes subscription status and purchase receipts.
RevenueCat Privacy Policy
Google ML Kit (On-Device Only)
- Provides pose detection for prayer verification.
- Runs entirely on the device. No data is sent to Google servers.
Google ML Kit Terms
That is the complete list. We do not use any other third-party services, SDKs, or integrations.
8. Data Security
We implement industry-standard security measures to protect your data:
- Encryption in transit: All data transmitted between the app and our servers is encrypted using TLS/SSL.
- Encryption at rest: Data stored in Firebase is encrypted at rest by default.
- Firebase Security Rules: Database access is restricted through server-side security rules. Users can only access their own family's data.
- Authentication required: All data access requires valid authentication.
- No local storage of sensitive data: Passwords are never stored on the device. Authentication tokens are managed securely by Firebase.
- Minimal data collection: We reduce risk by only collecting what we need.
While no system is 100% secure, we are committed to protecting your data and will notify affected users promptly in the unlikely event of a data breach.
9. Data Retention and Deletion
How Long We Keep Data
- Account data: Retained for as long as your account is active.
- Prayer logs: Retained for as long as the associated child profile exists.
- Crash reports: Retained by Firebase Crashlytics for up to 90 days.
- Subscription data: Retained by RevenueCat in accordance with their retention policy.
Account Deletion
You can delete your account directly within the app through the Settings menu.
When you delete your account:
- Your parent profile and all associated data are permanently removed from Firebase Firestore.
- All child profiles linked to your account are permanently deleted.
- All prayer logs and progress data are permanently deleted.
- Your Firebase Authentication record is deleted.
- Local data on the device (Hive storage) can be cleared by uninstalling the app.
You can also request account deletion by emailing
support@salatikids.com.
We will process deletion requests within 30 days.
10. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Right to Access: Request a copy of the personal data we hold about you and your children.
- Right to Correction: Request that we correct inaccurate or incomplete data.
- Right to Deletion: Request that we delete your data (also available in-app).
- Right to Restrict Processing: Request that we limit how we use your data.
- Right to Data Portability: Request your data in a structured, machine-readable format.
- Right to Withdraw Consent: Withdraw your consent at any time. For children's data, the parent can revoke consent at any time.
- Right to Complain: Lodge a complaint with your local data protection authority.
To exercise any of these rights, contact us at
support@salatikids.com.
We will respond within 30 days.
11. International Data Transfers
Salati Kids uses Firebase (Google Cloud) for data storage. Your data may be stored and processed on
Google Cloud servers, which are located in various countries worldwide.
For users in the European Economic Area (EEA) or United Kingdom, data transfers outside these regions
are protected by Google's Standard Contractual Clauses and other safeguards in accordance with GDPR requirements.
Location data (city-level GPS) is processed on-device in real-time to calculate prayer times and is not transferred to any server.
12. Regional Privacy Laws
In addition to COPPA (US) and GDPR (EU/UK) detailed above, we are mindful of privacy regulations in the regions our users live:
Saudi Arabia (PDPL)
The Saudi Personal Data Protection Law requires a lawful basis for processing personal data.
We process data based on user consent and the necessity of providing our service.
Users in Saudi Arabia have the right to access, correct, and delete their personal data.
United Arab Emirates
We comply with the UAE's data protection framework, including provisions related to child digital safety.
Parental consent is obtained before any child data is collected, and parents maintain full control
over their children's data at all times.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements.
When we make changes:
- We will update the "Effective Date" at the top of this page.
- For significant changes, we will notify you via email or through an in-app notification.
- For changes affecting children's data, we will seek renewed parental consent where required by law.
We encourage you to review this policy periodically.