your safe place
Effective Date: March 3, 2026 | Last Updated: September 29, 2026
Hush ("we", "us", "our") is a spiritual wellness application designed to support your daily Islamic practice through daily worship rituals, prayer times, dhikr, Quran reading, du'a, an AI companion, sleep content, and widgets.
This policy covers the iOS version of Hush, distributed on the Apple App Store. For the Android version, see our Android privacy policy.
Your privacy matters deeply to us. This Privacy Policy explains what data we collect, why we collect it, how we use it, and your rights regarding that data. We are committed to transparency and to protecting the personal information you entrust to us.
By using Hush, you agree to the practices described in this policy. If you do not agree, please discontinue use of the app.
Hush does not require you to create an account. There is no sign-up, no password, and no email address. We collect data in the following categories:
When you first open Hush, we automatically collect:
This data is used to deliver the correct content in your language, manage your subscription status, and ensure app compatibility.
Hush requests approximate or precise location permission for two features:
To obtain prayer times and to convert your coordinates into a readable city name, your approximate coordinates are sent to a prayer-time and geocoding service over an encrypted connection. They are used for that request only. We do not store a history of your locations, we do not track your movement, and we never sell location data.
Location permission is optional. If you decline it, the rest of the app continues to work; prayer times and the Qibla compass simply will not be personalised to your position.
Some screens invite you to enter a first name or a birth date so the app can address you warmly and show you a personalised verse. Providing this is optional, and it is stored locally on your device. We do not require, verify, or transmit your legal identity.
Hush includes an AI companion you can talk to. Everything in this feature is initiated by you. When you use it:
These conversations can be personal. Please read section 5.5 for how our AI provider handles them, and note that you can clear your conversation history in the app at any time.
If you use the Voice Notes feature, your audio recordings are:
You can delete any voice note at any time from within the app. We do not listen to or manually review your recordings.
Daily journal entries you write are stored locally on your device only. They are not uploaded to our servers.
Your daily worship completions, prayer tracking, dhikr counts, streaks and spiritual progress are stored locally on your device using the operating system's built-in storage. This data may be synced to our backend in the future to enable cross-device features; if that happens, this policy will be updated first.
We measure how the app is used so we can improve it. This includes:
Analytics events are associated with your anonymous device ID — not your name, email, or any directly identifying information. The content of your journal entries and Confidant conversations is never sent to our analytics providers.
If you grant notification permission, we store your push notification token so we can deliver daily inspiration messages, prayer reminders and important updates. You can disable notifications at any time in your device settings or within the app.
Subscription purchases are processed entirely by Apple (App Store) and are managed through RevenueCat. We do not collect or store your payment information, card details, or billing address. We only receive confirmation of your subscription status (active, expired, cancelled, and similar).
We measure whether our advertising reaches people who find Hush useful. Before accessing Apple's Identifier for Advertisers (IDFA) we ask for permission through the App Tracking Transparency (ATT) prompt. If you decline, no advertising identifier is shared and the app works normally.
We will never sell your advertising identifier or use it to build a profile about you.
Hush is designed with a privacy-first approach. We do not collect:
We also do not sell personal information, and we do not share your Confidant conversations, journal entries, or voice notes with advertisers.
| Purpose | Data Used |
|---|---|
| Deliver content in your language | Locale, timezone |
| Show prayer times and your city | Approximate location |
| Qibla direction (calculated on device) | Device location |
| Generate AI companion replies | Messages, attached images, live voice while a call is active |
| Transcribe and summarise voice notes | Voice recordings |
| Manage your subscription | Device ID, subscription status |
| Improve the app experience | Usage analytics tied to an anonymous ID |
| Send reminders and daily inspiration | Push notification token |
| Measure advertising performance | Advertising identifier, only with your ATT permission |
| Prevent fraud and ensure security | Device ID, app version |
We use the following trusted third-party services to operate Hush:
Our backend infrastructure. Stores device registration data, push tokens, daily content, and voice note audio files. Supabase provides secure, encrypted cloud hosting.
Manages in-app subscriptions and purchase verification on the App Store. Receives your anonymous device ID and subscription events. Does not receive personal information.
We use Mixpanel to understand how users interact with the app and to improve features. All data is sent to Mixpanel's EU data center for GDPR compliance. Events are tied to anonymous device IDs only.
We use Meta's SDK to measure the effectiveness of our advertising campaigns. We send only two signals to Meta: onboarding completion and paywall views. Automatic event logging is disabled. Revenue events are sent server-side through RevenueCat, not from your device.
If you grant ATT permission, your IDFA may be shared with Meta for attribution purposes. If you decline, no advertising identifier is shared.
Your Confidant messages, any image you attach, live voice audio during an AI call, and your voice note transcriptions are processed by OpenAI to generate responses, summaries and insights. Requests are sent through our backend over encrypted connections.
Per OpenAI's API data usage policy, data submitted through the API is not used to train their models.
OpenAI Privacy Policy · API Data Usage Policy
We use AppsFlyer to measure which advertising campaigns bring people to Hush. AppsFlyer receives your anonymous device ID, install and subscription events, and — where permitted — an advertising identifier. It does not receive your name, your conversations, or your journal entries.
Apple processes all payments and may collect anonymised ad attribution data through SKAdNetwork. This is managed entirely by Apple and does not identify you personally.
We use Google Firebase Analytics to understand feature usage, and Google Ads to measure advertising performance. Conversion events such as starting a subscription may be shared with Google to measure ad effectiveness, in line with Apple's ATT and SKAdNetwork frameworks. If you decline ATT, no advertising identifier is shared.
Every permission below is optional and is requested only when you use the feature that needs it. Declining a permission disables that feature, not the app.
| Permission | Why |
|---|---|
| Location | Prayer times for your area and the Qibla direction |
| Notifications | Prayer reminders, the Fajr alarm and daily inspiration |
| Microphone | Voice conversations with the AI companion; voice notes on iOS |
| Camera & photo selection | Only to attach an image you choose to a Confidant message |
| Screen Time | Focus uses Apple's Screen Time framework. Apple keeps this data on your device; we never see which apps you use. |
Most of your data — journal entries, daily progress, streaks, prayer tracking, favourites, preferences and the name you entered — is stored locally using the operating system's secure storage. It is protected by the iOS file-system encryption, is accessible only to Hush, and is removed when you uninstall the app.
Device registration data, push tokens and voice note audio files are stored on our Supabase servers. Confidant messages pass through our backend to our AI provider in order to produce a reply. All data is transmitted over encrypted HTTPS connections and stored with industry-standard encryption at rest.
We retain your data only as long as necessary to provide our services:
Depending on your jurisdiction, you may have the following rights:
Our analytics data is processed on EU servers (Mixpanel EU endpoint) to support GDPR compliance.
Under Law No. 6698 on the Protection of Personal Data you may learn whether your personal data is processed, request information about the processing, ask for correction or deletion, and object to results produced solely by automated analysis. Requests can be sent to the contact address below.
To exercise any of these rights, contact us at hush.app.official@gmail.com. We will respond within 30 days.
Hush is not directed at children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with data, please contact us and we will promptly delete it.
Your data may be processed in countries other than your own. Our analytics data is processed in the EU (Mixpanel EU data center). Backend services (Supabase) and AI processing (OpenAI) may process data in the US or EU depending on server configuration.
Where data is transferred internationally, we ensure appropriate safeguards are in place, including standard contractual clauses and encryption in transit.
Hush is a mobile application and does not use browser cookies. We use standard mobile SDKs (Mixpanel, Firebase, AppsFlyer, Meta, RevenueCat) that may use device-level identifiers as described in this policy. These are not cookies and cannot track you across other apps or websites unless you have granted ATT permission for ad attribution.
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. When we make significant changes, we will notify you through the app or by updating the "Last Updated" date at the top of this page.
We encourage you to review this policy periodically. Your continued use of Hush after changes are posted constitutes acceptance of the updated policy.
If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us:
Hush is operated by Hush App. We are committed to resolving any privacy concerns promptly and transparently.