Privacy policy
Last updated: 12 August 2026
What we collect
Sutrah stores your account email, location (for prayer times), prayer preferences, calendar connection tokens (encrypted at rest), prayer blocks, qada ledger entries, and optional travel trips. If you join the product update list, we store that email and a source label until you unsubscribe.
Calendar access
When you connect Google or Microsoft, we request calendar scopes needed to create and update prayer blocks and read free/busy. We do not request access to email contents. You can disconnect a provider or delete your account at any time in Settings. Workplace admins reviewing allowlisting can use the IT access guide.
ICS feed tokens
Your webcal / ICS URL contains a secret token. Anyone with the URL can read your prayer schedule. Treat it like a password; regenerate it by contacting support or deleting and recreating settings in a future release.
Emails
Product update emails are sent only if you subscribe on the website. Weekly prayer summaries are sent only when Resend is configured and you leave the weekly email preference on in Settings. Every marketing list message includes an unsubscribe link.
Your rights
You can export your data as JSON and permanently delete your account from Settings. Deletion removes your user record and related data from our database.
Contact
Questions about this policy: privacy@sutrah.app.