← Back to AzanCast

Privacy Policy

Last updated: April 7, 2026

Overview

AzanCast (“we”, “us”, “our”, “the service”) provides automated adhan (Islamic call to prayer) reminders on Amazon Alexa devices and prayer time display management for mosques. This policy explains what data we collect, how we use it, and your rights regarding that data.

Information We Collect

Personal (Alexa) Accounts

  • Email address — used for account creation, login, and service-related communications.
  • Location (latitude/longitude or city) — provided voluntarily, used to calculate accurate prayer times.
  • Prayer time preferences — calculation method, madhab, enabled prayers, adhan and dua selections.
  • Alexa account linking tokens — used solely to send adhan notifications to your Alexa device via the Amazon Smart Home API.

Mosque Accounts

  • Mosque name and address — displayed on your prayer time screen and used to determine your time zone.
  • Admin email address — used for login and account management.
  • Prayer and iqama time settings — calculation method, offsets, iqama schedules, display preferences.

Payment Information

If you subscribe to a paid plan, payment is processed by Stripe. We do not store your credit card number, bank account details, or other sensitive financial information on our servers. Stripe provides us with a customer ID, subscription status, and billing email so we can manage your plan. See Stripe's Privacy Policy for details on how Stripe handles your payment data.

Automatically Collected Information

  • Analytics — we use Google Analytics to understand how visitors interact with our website (pages visited, session duration, approximate location by country). Google Analytics uses cookies. You can opt out via your browser settings or the Google Analytics opt-out extension.
  • Error tracking — we use Sentry to capture application errors and performance data. This may include your browser type, operating system, and the page where an error occurred. It does not include personally identifiable information.

Information We Do Not Collect

  • We do not store your Amazon account credentials or password.
  • We do not access your Alexa voice recordings or history.
  • We do not sell, rent, or share your personal data with third parties for marketing purposes.
  • We do not track your browsing activity outside of AzanCast.

How We Use Your Information

  • To calculate prayer times based on your location and preferences.
  • To send adhan notifications to your linked Alexa device at the correct times.
  • To display accurate prayer and iqama times on mosque displays.
  • To authenticate your account and maintain your session.
  • To process subscription payments via Stripe.
  • To send you important service-related emails (account verification, billing receipts, critical updates). We do not send marketing emails without your consent.
  • To diagnose and fix technical issues via error tracking.

Lawful Basis for Processing (GDPR)

For users in the European Economic Area, United Kingdom, and other jurisdictions with similar data protection laws, we process your personal data on the following lawful bases under Article 6 of the GDPR:

  • Contract (Art. 6(1)(b)) — processing that is necessary to deliver the service you signed up for: authentication, calculating prayer times, sending adhan notifications to your linked Alexa device, displaying prayer times on mosque TVs, processing subscription payments, and managing your account.
  • Legitimate interest (Art. 6(1)(f)) — processing that helps us run and improve AzanCast without materially affecting your privacy: error tracking via Sentry, rate limiting to prevent abuse, security logging, and aggregate (non-identifying) usage statistics. You may object to this processing at any time by contacting us.
  • Consent (Art. 6(1)(a)) — processing that requires your explicit opt-in: analytics cookies (Google Analytics) and any future marketing communications. You can withdraw consent at any time by changing your cookie preferences or unsubscribing from emails.
  • Legal obligation (Art. 6(1)(c)) — processing required by law: tax and financial record-keeping for paid subscriptions and donations, responding to lawful requests from authorities.

Donor data shared with mosques (when a donation is made through the platform) is processed by AzanCast on the basis of legitimate interest in operating the donation feature, and by the receiving mosque on its own lawful basis (typically contract or legitimate interest in managing donor relationships).

Cookies

We use the following types of cookies:

  • Essential cookies — required for authentication and session management. These cannot be disabled.
  • Analytics cookies — used by Google Analytics to understand site usage. You can opt out via browser settings.

We do not use advertising or third-party tracking cookies.

Data Storage & Security

Your data is stored securely using Supabase with row-level security policies, ensuring that each user can only access their own data. All data transmission uses HTTPS/TLS encryption. Alexa tokens are encrypted at rest and used only for sending prayer notifications. Audio files are stored in private storage buckets accessible only via time-limited signed URLs.

While we implement industry-standard security measures, no method of electronic storage is 100% secure. We cannot guarantee absolute security.

Breach notification. If we become aware of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify affected users without undue delay and in any event within 72 hours of becoming aware of the breach, as required by Article 33 of the GDPR. Notification will be sent via email to the address on file and, where appropriate, posted prominently on the AzanCast website. The notification will describe the nature of the breach, the categories and approximate number of data subjects affected, the likely consequences, and the measures we have taken or propose to take in response. Where required, we will also notify the relevant supervisory authority within the same 72-hour window.

Third-Party Services and Subprocessors

AzanCast relies on the following third-party services to operate. Each service is bound by its own privacy policy and acts as a subprocessor for the limited purposes described below.

  • Amazon Web Services / Alexa (USA) — delivering adhan audio to your device via the Alexa Skills Kit and Smart Home API; running serverless Lambda functions for the Alexa skill backend.
  • Supabase (USA) — secure data storage, user authentication, file hosting, and database hosting.
  • Stripe (USA / Ireland) — payment processing, subscription management, and Stripe Connect for mosque donations. Stripe is the data controller for payment method information.
  • Vercel (USA) — web application hosting, edge functions, and CDN.
  • Upstash (USA) — Redis-based rate limiting and abuse prevention. Stores only short-lived request counters keyed by IP or token, not personal data.
  • Resend (USA) — transactional email delivery (account verification, billing receipts, donation receipts, trial reminders).
  • Google Analytics (USA) — website usage analytics. Loaded only with your explicit cookie consent.
  • Sentry (USA) — application error tracking and performance monitoring.
  • Google Maps / Places API (USA) — geocoding mosque addresses and powering mosque search.
  • Nominatim / OpenStreetMap (Germany / EU) — fallback geocoding and address lookup.
  • Aladhan API (third-party) — daily verification of our locally-calculated prayer times against an independent source. We send only mosque coordinates and calculation method, never personal data.
  • My Masjid API (third-party, optional) — if a mosque chooses to sync prayer times from My Masjid, we fetch their published schedule on the mosque's behalf.
  • Internet Archive (archive.org) / cdn.aladhan.com (USA) — hosting of public adhan audio recordings used for playback on Alexa devices.

We do not transfer personal data to subprocessors outside of what is necessary to deliver the service. For users in the European Economic Area, transfers to subprocessors in the United States are made under appropriate safeguards (Standard Contractual Clauses or equivalent). On request, we can provide EU mosque administrators with a Data Processing Agreement (DPA) for processing of donor data through the donation feature. Contact us at azancast@gmail.com to request a DPA.

Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will remove your personal data from our systems within 30 days. Some data may be retained in encrypted backups for up to 90 days. Anonymized analytics data may be retained indefinitely.

Data Deletion

You can request deletion of your account and all associated data at any time by contacting us at azancast@gmail.com. When you disable the AzanCast Alexa skill, all Alexa-related tokens are automatically invalidated. If you cancel a paid subscription, your billing relationship with Stripe is terminated but your account data remains until you request deletion.

Your Rights (EEA/UK/Global)

If you are located in the European Economic Area (EEA), the United Kingdom, or another jurisdiction with applicable data protection laws, you have the following rights:

  • Access — request a copy of the personal data we hold about you.
  • Rectification — request correction of inaccurate data.
  • Erasure — request deletion of your personal data.
  • Portability — request your data in a machine-readable format.
  • Objection — object to processing of your data for certain purposes.
  • Restriction — request restriction of processing while a complaint is resolved.

To exercise any of these rights, contact us at azancast@gmail.com. We will respond within 30 days.

International Data Transfers

Our servers and third-party services may process data in the United States and other countries. By using AzanCast, you consent to the transfer of your data to these locations. We ensure that appropriate safeguards are in place to protect your data in accordance with applicable laws.

Children's Privacy

AzanCast is not directed at children under 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email or a prominent notice on our website. The “Last updated” date at the top of this page reflects the most recent revision. Continued use of the service after changes constitutes acceptance of the updated policy.

Contact

If you have questions about this privacy policy or how we handle your data, contact us at azancast@gmail.com.