Privacy Policy
What data we collect, why, who we share it with, and your rights over it.
Version 2026.10 · Effective: 8 October 2026
Who we are
The Al-Inarah app and website are operated by Maktabah Al Bakri Sdn. Bhd. ("we"). We are the data controller of your personal data under the Personal Data Protection Act 2010.
This policy covers the Al-Inarah app (Android, iOS and Apple Watch), the al-inarah.com website and the in-app bookstore.
Data we collect
- ▸Required to open an account: your name and email address. Without both, an account cannot be opened.
- ▸Optional: phone number, gender, country, nationality and profile picture.
- ▸Google or Apple sign-in: your name, email and account ID from that provider.
- ▸Feature use: Quran reading, bookmarks, eBooks, videos watched, Khatam and Tasbih rooms, prayer, fasting and amalan records, live stream comments, product reviews, questions to asatizah, problem reports and conversations with AI Inarah.
- ▸Physical store: recipient name, phone and delivery address, orders, and reviews with their photos or videos.
- ▸Payments: subscription, purchase, coin top-up and donation records. Card details never reach us.
- ▸Device: device ID, model, system version, app version, IP address, crash reports and security logs.
- ▸Location, camera, microphone and gallery: only after you allow them. They are used for prayer times, qibla, nearby mosques, the AR prayer mat, voice input and pictures. Camera images from the AR prayer mat stay on your device.
Sensitive data
Religious practice and health records, for example reasons for not fasting and haid or nifas periods, are only recorded after you give consent in the app. Only you can see them, and you can delete them at any time.
Where the data comes from
Data comes from you, your device, Google or Apple when you sign in, and the app stores for subscription status.
Purpose
We use your data to:
- ▸provide your account and features, and sync your data across devices
- ▸keep your account secure
- ▸process payments and deliveries
- ▸send notifications and offers
- ▸improve the app
- ▸comply with the law
AI Inarah
Your questions are sent to an AI provider to generate answers. Voice input is turned into text by Apple or Google speech recognition.
Our team may review conversations and feedback to improve the accuracy of answers. AI answers are a reference, not a fatwa. AI Inarah makes no decisions that affect your account or payments.
Sharing
We do not sell your data. It is shared only as far as needed with:
- ▸cloud hosting and storage providers
- ▸analytics, crash reporting and notification services
- ▸app stores and subscription management
- ▸payment gateways
- ▸email and WhatsApp delivery services
- ▸AI providers
- ▸couriers
- ▸maps and location search
- ▸video hosting and live streaming
- ▸internal collaboration tools
We also share data with authorities when the law requires it.
Your name and profile picture are shown to members of the Khatam and Tasbih rooms you join. Your name is also shown on live stream comments and product reviews.
Transfers outside Malaysia
Our main servers are in Singapore. Some providers process data in other countries. All of them are bound by contracts that protect your data.
How long we keep data
- ▸Account data is kept while your account is active.
- ▸When an account is deleted, its name, email, phone, profile picture and social logins are deleted. Prayer, fasting, amalan, tasbih and video-watching records are deleted too.
- ▸AI Inarah conversations, questions to asatizah and contributions in shared spaces are no longer linked to your identity.
- ▸Delivery addresses and order records are kept for up to 7 years as financial and delivery records.
- ▸Security and device logs are kept for as long as account security needs them.
Security and data breaches
Data is sent over encrypted connections and internal access is restricted. If a data breach could cause significant harm, we will notify the Personal Data Protection Commissioner within 72 hours, and affected users within 7 days after that.
Your rights
You have the right to:
- ▸access your data (we reply within 21 days)
- ▸correct your data
- ▸delete your account through Profile › Delete Account, or by email
- ▸withdraw consent
- ▸opt out of promotions
- ▸request a copy of your data in a portable format
Send your request to the email in the Contact us section.
Your choices
You can turn off device permissions at any time in your device settings. We do not track you across other companies’ apps or websites.
Children
Users under 18 need the consent of a parent or guardian. Parents can contact us to delete their child’s account.
Third-party links
Other parties’ privacy policies apply on their own sites.
Changes
We will update the version and date above. For major changes, we will tell you in the app first.
Contact us
For questions or requests about your personal data, contact:
Data Protection Officer, Maktabah Al Bakri Sdn. Bhd.
Email: app@al-inarah.com
If you are not satisfied with our reply, you can complain to the Personal Data Protection Department (pdp.gov.my).
This policy is available in Bahasa Malaysia and English. If they differ, the Bahasa Malaysia version prevails.