Privacy Policy

DRAFT — to be reviewed by a lawyer before launch

Effective date: {{effective date}}. Data controller: {{company legal name}}, {{company address}}.

What we store

For an account: your email address, a scrambled form of your password that we cannot read, when you accepted the terms, and for each linked TV its name, type, the date it was linked and when it was last seen.

For a purchase: the payment provider's customer and payment ids, amount, currency, country, status and dates. For a refund: the reason you chose, if any. Which TVs hold a seat.

A log of security events such as logins, purchases and refunds, with the internet address they came from.

Each time a linked TV checks its license (when it starts, when its Account tab opens, and about once a day), this log records the time, which TV it was and the TV's internet address. These entries are kept for 90 days.

What we do not store

Card numbers, which only the payment provider sees, and your password in readable form.

What your TV stores

Your settings; the date your free trial started; and, when linked, a token, a signed license, your masked email and your TV count. Not your password or full email. Without an account the app sends no name or account or device id.

The TV app has no analytics and no ads. It does not report how you use it, what is on screen or which settings you choose.

Cookies

[Proposed wording: for lawyer review] account.goodwill-media.com uses only strictly necessary cookies: one that keeps you signed in, and one that protects its forms. It sets no analytics or advertising cookies, and the TV app receives no cookies.

Find my location on the TV

Only when you press "Find my location" on the TV, it sends this TV's internet address to our account server, which looks up the likely country, region and city in a database kept on the server. No other company is asked. The address is not stored: only a short-lived counter, made from it with a one-way key, limits how often it can be asked, and it is deleted after an hour. Nothing is sent unless you press the button. The suggestion goes into the location form, where you check and change it before anything is saved.

IP Geolocation by DB-IP (https://db-ip.com), licensed under CC BY 4.0.

Feedback

Only when you send feedback (on this website, or from the TV if a later version offers it) we store what you wrote: the rating, the topic, your message and the date, and only if you give them, your email address, the app version and the TV brand. Feedback is not linked to your account.

Your internet address is not stored with it. A short-lived counter, made from the address with a one-way key, limits how often feedback can be sent, and is deleted within a day.

Who sees your data

The owner of Athan Frame can see everything listed here. Support staff see feedback and account details with email addresses shortened (like a***@example.com). Other staff see only totals, in which any number from 1 to 4 is shown as "under 5".

Staff log in on a separate page with a password and a code from an authenticator app, and what they do is logged. Our own tools can read totals through a private interface, with the same rule for small numbers. It never gives out an email address or anything else that names a person.

Emails we send

We email the account owner when a TV is linked or removed, as well as about purchases, refunds and account security. Other emails only if you asked for them (below).

Updates by email (optional)

Only if you tick "Send me updates about Athan Frame" when you unlock, or turn updates on in your account, we store that you agreed, the date, which version of that wording you saw and where you ticked it. The box is never ticked for you, and buying does not depend on it.

Every update email will have a link to stop them that works without logging in, and your mail app may show an Unsubscribe button that does the same. You can also untick the box in your account at any time. When you stop updates we keep the date you agreed and the date you stopped, as the record of your choice. Deleting your account removes that record.

Updates will be sent only if you opt in, through our email provider (see Third parties). We do not pass your address to anyone else for their own messages. [Pending lawyer review]

Third parties

Payment provider: {{payment provider name}}. Email provider: {{email provider name}}.

Prayer-time and content sources, which your TV contacts directly and which can see its internet address: Aladhan (prayer times, using your city and country), alquran.cloud (Quran), jsDelivr (hadith) and mp3quran.net (reciters and recitations).

Where data is stored

[Proposed wording: for lawyer review] {{country or region where the account server and database are hosted}}

International transfers

[Proposed wording: for lawyer review] Some of the companies named in this policy may be outside your country: the payment provider ({{payment provider name}}), which handles your payment; the email provider ({{email provider name}}), which delivers our emails; and Aladhan, alquran.cloud, jsDelivr and mp3quran.net, which your TV contacts directly and which can see its internet address.

The location database for Find my location comes from DB-IP but is kept on our account server, so nothing is sent to DB-IP.

How long we keep it

Account data: until you delete the account. Accounts never verified: 7 days. Security log, including each license check by a linked TV: 90 days. The account server's web server log (the internet address and time of each request): {{account server web log retention, not decided}}. Feedback: 365 days; an email address sent with it is removed after 90 days. To delete your feedback sooner, write to {{support email}}; deleting your account also deletes feedback sent from its email address. Your choice about updates by email: until you delete the account. Purchase and refund records: {{retention period required for tax and accounting}}. After an account is deleted these records stay with no name or provider customer id, with a scrambled form of the email address that is used only to hold the one-refund-per-household rule.

Export and delete

Your account page has Export my data and Delete my account. Deleting does not refund a purchase and ends the unlock on your TVs.

Children

Accounts are for adults. {{minimum age and any legal wording}}

Your rights and contact

{{rights by region, for example GDPR}}. Contact: {{support email}}.

Changes to this policy

[Proposed wording: for lawyer review] When we change this policy, we put a new effective date at the top of this page. For a material change we also email account holders.

Policy version: 1 (draft). This number is separate from the app's version.