Peshsaf Privacy Policy
Last updated: October 19, 2026
Peshsaf is a Quran, prayer, Qibla, hadith, dua, and library application. An account is optional. Google or Apple sign-in may provide an email address, display name, and provider identifier; Peshsaf does not ask for a phone number or postal address.
Peshsaf is an independent product and is not an official Quran Foundation application. It uses Quran Foundation APIs and content associated with the Quran.com ecosystem to provide read-along audio timing. Peshsaf does not access QuranReflect user content.
Data stored on your device
Downloads, precise location, and local prayer-notification choices remain on the device. When you choose to sign in, bookmarks, reading progress, and portable preferences may be synchronized with Peshsaf's server. A random installation identifier, platform, app version, locale, and last-seen time are used for reliability metrics without an advertising identifier.
Location
Precise location access is optional and is used only to calculate prayer times and the Qibla direction. For official Tajikistan cities the app sends the selected city identifier, not precise coordinates. In geolocation mode, coordinates may be sent over an encrypted connection to Peshsaf's API or the Ummah API to perform a calculation. Peshsaf does not keep a location history and does not use location for advertising. If permission is denied, you may select a city manually.
Online services
Peshsaf connects to third-party services to provide app functionality:
- MP3Quran for Quran recitations;
- QuranEnc for translations;
- Ummah API and HadeethEnc for hadith, prayer times, and Qibla;
- Shuroiulamo as the attributed source for official Tajikistan prayer schedules cached by Peshsaf;
- Peshsaf's Cloudflare-hosted proxy and Quran Foundation for read-along audio timing;
- Google Firebase Analytics and Crashlytics for limited usage analytics and crash diagnostics.
These services and Peshsaf's infrastructure provider, Cloudflare, receive the IP address and other standard network information required to establish a connection, protect the service from abuse, and operate their services. Quran.Foundation credentials remain on Peshsaf's server-side proxy and are never sent to the app.
Peshsaf account sign-in is independent of Quran Foundation. Peshsaf does not request Quran Foundation user OAuth scopes or receive Quran Foundation account data. Apple authorization refresh tokens are encrypted at rest and revoked when the Peshsaf account is deleted.
Analytics and diagnostics
Firebase Analytics and Firebase Crashlytics may process an installation or device identifier, app launches and feature interactions, app version, device model, operating-system version, logs, and crash stack traces. Peshsaf uses this information only to diagnose faults, measure reliability, and improve app features.
Peshsaf displays no advertising, does not request an advertising identifier, does not sell personal data, and does not create advertising profiles. Advertising personalization signals are disabled in the app configuration.
Children
Peshsaf is intended for a general audience and does not knowingly request children's names, contact details, or account data. Limited technical information is handled in the same way for every user solely for application functionality and reliability.
Security and retention
Network requests use HTTPS. Peshsaf's server stores optional account records, provider identifiers, active sessions, synchronized bookmarks, reading progress, portable preferences, installation heartbeats, and device push tokens when those features are used. Provider refresh credentials are encrypted at rest. Precise-location history and local prayer-notification choices are not stored in the account sync payload.
Diagnostic and analytics information is retained according to the configured Firebase settings. Online providers may process data outside your country under their respective safeguards, terms, and applicable law.
Your choices
You may deny location or notification permission in system settings. Core Quran reading, bundled translations, duas, and previously downloaded content remain available without location access. You can remove local data by uninstalling the app or clearing its application storage. A signed-in account and its synchronized data can be deleted in Peshsaf under Settings → Account → Delete account, or by following the account-deletion instructions.
Changes
When this policy changes, the updated version and date will be published on this page and included in the app.
Contact
For privacy questions or requests, contact mr.akbar.sharipov@gmail.com. We aim to respond to privacy inquiries within 30 days.