App policies

Behesht — Privacy Policy

The Privacy Policy for Behesht, an app developed and operated by KurdiCode.

Last updated: 26 October 2026 · Publisher: KurdiCode · Contact: support@kurdicode.com

https://kurdicode.com/legal/praypath

Behesht is a prayer-times, Qibla, Quran and daily-worship app. It works fully without an account, has no advertising, and does not sell or share personal data. An account is optional and only exists to back up your data and carry it to another phone. This page lists exactly what the app touches and why.

Data that stays on your phone

Everything you record in the app is stored on your device, in the app's private storage: prayer and fasting logs, Khatam progress, memorisation progress, bookmarks, notes, settings and reading position. Prayer times and the Qibla direction are calculated on the device from your location. If you do not create an account, none of it leaves the phone — apart from what you choose to send to Ask Behesht (below) — and uninstalling the app deletes all of it.

Optional account and sync

If you create an account (Explore › Settings & Support › Profile & Account), we store:

  • your name, email address and password — the password is stored only as a one-way hash by our authentication provider and is never visible to us;
  • a copy of the data you choose to sync — you pick the groups: settings, Quran (bookmarks, Khatam, reading history, highlights, memorisation), prayers and worship (prayer, qada and fasting logs, dhikr, Ramadan, saved duas), notes, hadith, and Learn to Read progress. Groups you switch off stay on the phone only;
  • the phones signed in to the account — a model name such as "Samsung A54", the platform, the app version and when each last synced.

Your email is used to sign you in and to send a code when you reset your password, nothing else. Your GPS fix and the place name the app looked up for it are never synced; a place you choose yourself in the location picker is part of your settings, so it syncs if the settings group is on. The account is hosted with Supabase (supabase.co); every row is readable only by the signed-in account that owns it. You can sign out at any time (your data stays on the phone), and Delete account removes the account and every synced copy immediately and permanently. If you no longer have the app, see how to delete your account.

Location

Behesht asks for location while the app is in use to calculate prayer times and the Qibla. This calculation happens on the device.

Your coordinates are sent off the device in two features only. Mosque Finder sends them to OpenStreetMap services to list nearby mosques — the Overpass API (overpass-api.de, with maps.mail.ru, overpass.kumi.systems and overpass.private.coffee as fallbacks when it is busy) and, when the tag search finds little, komoot's Photon geocoder (photon.komoot.io) — and, only if you tap a mosque or Search in Maps, opens your maps app with the destination or the search. Nothing is stored server-side by us. Qibla › Map draws a live map around you: the map tiles for that area are fetched from OpenFreeMap (tiles.openfreemap.org), so the tile server can tell roughly which area you are looking at, and the map library itself is loaded from unpkg.com. Your coordinates are not sent as such, and the Simple and Detailed Qibla views use no network at all. Every other part of the app works with location denied by choosing your city manually; Mosque Finder and the Qibla map then use that city instead.

Ask Behesht (the AI assistant)

Ask Behesht answers questions about the Quran, hadith, duas, prayer and the app. It is optional and off until you agree to the notice the app shows the first time you open it; you can turn it off again from the assistant's info button. To answer, it has to send your question off the phone:

  • What is sent: the questions you type, the earlier messages of the same conversation, and the app content the assistant looks up to answer (for example the ayahs, tafsir passages, hadith and duas it found). When you ask about something that needs your own data, the answer to that one question also carries it: your prayer times and the name of your city or saved place (not your coordinates) when you ask about prayer times, or your reading and prayer progress when you ask how you are doing. If you attach a photo (one you pick, or one you take with the camera), that photo goes with the question, shrunk to at most 1280 pixels; the assistant uses it to find the ayah, hadith or text it shows. A random number made by the app on this phone (not linked to you, your account or your device) is sent so the daily question limit can be counted.
  • Who receives it: our server on Cloudflare (workers.dev), which checks the daily limit and adds nothing about you, and Anthropic, which runs the Claude model that writes the answer. Anthropic processes it for us as a service provider under its commercial terms: it is not used to train Anthropic's models, sold, or used for advertising, and Anthropic keeps it only for a limited period for safety and abuse monitoring. Photos are handled the same way as text: our server passes them on and keeps no copy.
  • Scholars' answers: when the app's own sources have nothing, the assistant can search the published fatwas bundled in the app (from IslamHouse, on your phone) and, as a last resort, run up to two web searches limited to six scholarly sites (IslamQA, IslamWeb, binbaz.org.sa, Dar al-Ifta, alifta.gov.sa and IslamHouse). Those searches are made by Anthropic on our behalf, using search words drawn from your question; nothing that identifies you is added.
  • Voice typing: the microphone button types your question by voice using your phone's own speech recognition (Google's on Android, Apple's on iOS), which may process the audio on their servers under their own privacy terms. Behesht receives only the text, puts it in the box for you to check, and never records or stores audio. The microphone is used only while the Listening chip is showing.
  • Settings on request: if you ask the assistant to change a setting (your city, the calculation method, the theme, text size and similar), it changes it on your phone. A city you name is looked up by name on komoot's Photon geocoder (photon.komoot.io); no permission dialog and no GPS are involved.
  • What is kept: our server stores only the count of questions each random number asked recently; the counts expire within about a month. It never stores your messages. Your conversations are saved on your phone only; you can delete one, or all of them, in the assistant's history, and they are never synced to your account.
  • Reporting an answer: Report under an answer opens your own email app with the question and the answer filled in, addressed to support@kurdicode.com. Nothing is sent unless you send that email yourself.
  • The assistant can make mistakes. Every ayah, hadith and dua in an answer is shown from the app's own verified sources with its reference, so you can check it. It does not issue fatwas of its own; when it quotes one, it is a published answer shown word for word with the scholar and source named.

Ask Behesht is not available in Kids mode.

Content the app downloads

To show Quran text, translations, tafsir and recitations the app requests public, non-personal content from: api.alquran.cloud, api.quran.com, cdn.islamic.network, audio.qurancdn.com, mp3quran.net, qurango.net, our own recitation server on Cloudflare (behesht-audio.kurdicode.workers.dev, for reciters we host ourselves), hisnmuslim.com (adhkar recordings), islamhouse.com (Islamic Library books and fatwa PDFs), archive.org, and our own content feed at kurdicode.com. The live Makkah and Madinah streams play YouTube's own player (youtube.com), so YouTube's privacy policy applies while you watch. These requests carry no account or identifier; like any web request they expose your IP address to the host. Downloaded content is cached on the device so it works offline.

App updates and ratings

When the app starts it checks whether a newer version is available: it reads the lowest supported version from our Supabase project (supabase.co) and, on iOS, the version on sale from the App Store (itunes.apple.com); on Android, Google Play's in-app update service answers. These checks send no account or identifier. Rate app opens the store's own review sheet; your rating goes to Google or Apple, and Behesht never sees it.

Notifications

Prayer-time and reminder notifications are scheduled locally on the device. No push service and no server is involved.

Photos, camera and microphone

If you save a card image, the app asks for permission to add it to your photo library. If you choose one of your own photos as a card background, the system photo picker opens and the app uses only the photo you pick, to draw the card on your phone. It is never uploaded. The only photo that ever leaves the phone is one you attach to an Ask Behesht question (above). The camera opens only when you tap Take a photo there, and the microphone only for voice typing; Behesht asks for each the first time and works fully without them.

Diagnostics

Crash reports may be collected to fix bugs. They contain the error, the app version and device model — not your location, your logs or your content.

Children

The app has no ads and no messaging. The optional account and Ask Behesht are hidden in Kids mode, and without an account the app collects nothing that would identify a child.

Changes

We will update this page and the date above when anything here changes.

Back to all legal documents