Sobah Privacy Policy

Effective: August 29, 2026

Sobah is a wake aid for Fajr. This policy explains what the app stores, what our service providers receive, and the choices available to you.

Data kept on your iPhone

Sobah stores alarm settings, onboarding answers, your analytics preference, wake and mission progress, prayer check-in answers, and a random analytics identifier on your device. Approximate location is used on-device to calculate Fajr. Motion readings are processed on-device to count squat-like movement during the optional Squats mission.

During a Squats mission, the app keeps only the latest 30 seconds of motion readings in memory. If detection fails, it may temporarily save that diagnostic trace on your iPhone so you can review whether to share it. The trace leaves your device only if you explicitly choose to share it through the system share sheet. It is deleted when you decline or dismiss sharing and expires after 24 hours. Location and motion readings are not sent to Clerk or PostHog. Deleting your account in the app deletes the account and the app data held on your iPhone. Deleting the app also removes its local data.

Optional account data

You do not need an account to schedule or use alarms. If you choose to create an account, Clerk processes the identity information required for the sign-in method you select, such as your email address, identity-provider account identifier, and provider profile name when the provider supplies one. Sobah requests only email access from Sign in with Apple. Sobah does not attach your Clerk identity, email address, or name to product analytics. You can delete your account inside the app. Account data is retained until you delete the account, subject to Clerk’s legal obligations as a service provider.

App product analytics

After you select an adult age range during onboarding, product analytics starts automatically. Analytics remains off for users who select under 18. Analytics is not required to use any alarm feature, and an adult can turn it off at any time in Settings using Share product usage data.

When enabled, PostHog receives a random installation identifier and a manually allowlisted set of product events. These include the onboarding answers you select—missed-Fajr frequency, usual wake-up failure mode, age range, and gender response—as well as onboarding cohort start, first alarm scheduling, observed alarm firing, mission completion, prayer check-in presentation and answer, day-seven alarm activity, and coarse Squats preview, completion, fallback, and disable outcomes. Other properties are limited to app build, random wake identifiers, and elapsed-time, attempt-count, or configured-repetition buckets.

The random installation identifier supports a pseudonymous PostHog person profile so events from one app installation can be analyzed together. It is never replaced with or connected to your Clerk identity, email address, or name. PostHog does not receive coordinates, motion readings, diagnostic traces, exact Fajr or alarm times, prayer text, free text, audio, or session recordings. Automatic app event capture, automatic lifecycle or screen capture, feature flags, and session replay are disabled for this release.

Turning analytics off stops future collection, removes queued events, and removes the random identifier from the app. Events already received by PostHog are retained for up to 12 months and then expire. Because the analytics identifier is deliberately not linked to your account or contact details, we cannot locate an individual’s existing analytics events from an email request.

Website analytics

On sobah.app, PostHog loads automatically and uses first-party storage with a separate random website identifier. It collects page views, page-leave events, automatically captured interactions, and a cta_clicked event containing the button location and surface: web. These events may be grouped in a pseudonymous website person profile. The website does not connect this identifier to the app identifier, Clerk identity, email address, or name. Session replay, exception autocapture, surveys, campaign attribution, referrer capture, and feature flags are disabled.

Website analytics honors a browser Do Not Track signal. You can also select Disable website analytics below. That choice is stored in your browser, stops future collection, and resets the website identifier. Website analytics is retained for up to 12 months.

We use Clerk only to provide optional authentication and PostHog only to understand onboarding, website interest, and whether the alarm journey works. We do not sell personal data, use it for third-party advertising, or track activity across other companies’ apps or websites.

Support and privacy requests

For privacy questions, email [email protected]. For general support, email [email protected].