At Emrooz, we are committed to protecting your privacy. This policy explains what information we collect, how we use it, and your rights regarding your personal data.
Summary: We collect only what is necessary to provide our service. Core calendar features work fully offline. We never sell your personal data to third parties.
We collect different types of information depending on how you use Emrooz. We follow the principle of data minimization — only collecting what is necessary to provide our services.
We use the information we collect to:
We process your data based on the following legal grounds under GDPR: performance of a contract (providing the service you signed up for), legitimate interests (improving service quality), and consent (for optional features like marketing communications).
Lifecycle marketing covers non-essential push notifications that re-engage you with the app — for example, Persian and Islamic holiday countdowns, reminders for unredeemed family invites, and heads-ups before a subscription renews. These are distinct from essential alerts like prayer times, security notifications, and event reminders you create yourself, which are always delivered.
If you sign up from the EU, EEA, or the UK, lifecycle marketing is off by default and we ask for your explicit consent during onboarding (GDPR Art. 6(1)(a) / UK-GDPR). Outside those regions, lifecycle marketing is on by default but you can disable it at any time.
You can change your choice at any time in Settings → Notifications → Seasonal nudges and reminders, or by contacting [email protected]. Withdrawing consent does not affect any lifecycle messages already sent before you withdrew.
Your data is stored on secure servers. We implement industry-standard security measures including:
Offline-first architecture: Core calendar features, prayer times, and date calculations work entirely on your device. This data never leaves your device unless you explicitly enable cloud sync.
Data retention: We retain your account data for as long as you maintain an active account. When you delete your account, we permanently delete your personal data within 30 days, except where we are required by law to retain it longer.
We use carefully selected third-party services to operate Emrooz. Each has their own privacy policy:
Google Sign-In and Sign in with Apple are used for account authentication. We receive only the basic profile information (name, email) that you authorize. See Google Privacy Policy and Apple Privacy Policy.
If you choose the Emrooz Telegram service, Telegram transports your bot and Mini App interactions. Emrooz receives the Telegram user/chat identifier, language, link status, and optional chat metadata needed to operate the service. Pending message content is encrypted and minimized: successful inbound payloads are redacted immediately, failed payloads within 7 days, and terminal outbound content within 24 hours. Operational metadata is retained for 30 days. Personal calendar data is sent only to your linked private chat or authenticated Mini App. AI voice notes are processed only when you invoke the feature, shared with Google Gemini for interpretation, and not retained by Emrooz. Unlinking stops future personal delivery; Telegram may retain its own copies.
We use Google Maps/Places for place search and reverse geocoding, and Apple WeatherKit through Emrooz servers for weather data. These services process coordinates and the technical information needed to return your request. Weather coordinates are rounded to two decimal places and may be cached or stored by Emrooz with the forecast date, locale, and time zone.
Native subscription billing is processed by Apple App Store or Google Play; cryptocurrency voucher payments are processed by NowPayments. We receive verified transaction and entitlement status, but store payment credentials never touch our servers. Provider transaction references are retained as required for fraud prevention, accounting, refunds, and legal compliance.
When you use AI-powered features (event parsing, date questions, or the Calendar Assistant), your text or optional voice message is sent to our backend, which proxies the AI input to <strong>Google Gemini</strong>. Voice messages are sent only after you tap Send and are not retained by Emrooz. We apply usage quotas to prevent abuse. See the AI Services section below for full details.
Google Mobile Ads may serve ads to eligible Free users only. Google may process device identifiers, approximate location derived from IP, consent signals, and ad interaction data to deliver, limit, prevent fraud, and measure ads. Premium users do not receive ad requests. Emrooz never sends calendar entries, prayer settings, precise location, family or booking data, or AI input to the advertising service.
We do not sell, trade, or rent your personal information. Where consent is required, advertising choices are collected before any ad request and can be changed from Ad privacy choices in the app.
Emrooz uses artificial intelligence for event parsing, date questions, and the private Calendar Assistant. This section describes how AI data is handled.
All AI requests are proxied through Emrooz servers. Your data is never sent directly from your device to any AI provider.
Google (Gemini models)
Purpose: Natural-language interpretation of event descriptions, date questions, calendar requests, and optional Calendar Assistant voice messages.
Data sent to AI: The text or optional voice message you submit and limited settings needed to interpret it, such as language, current time, time zone, country, city, and calendar preference. Emrooz does not send your private calendar, family, or booking records to the AI model, and does not attach your name, email, or account ID.
Emrooz does not persist raw Calendar Assistant voice recordings or a transcript. Google processes AI inputs as our service provider under the applicable Gemini API terms and data-handling commitments.
AI requests pass through Emrooz servers so access controls, quotas, confirmations, and private calendar queries remain under Emrooz control.
You can request deletion of your AI interaction data at any time via account settings or by contacting [email protected].
AI interactions are logged for quality assurance and abuse prevention purposes.
You can request immediate deletion of all your AI interaction logs by deleting your account or contacting [email protected].
Depending on your location, you may have the following rights regarding your personal data:
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. You can also delete your account directly from within the Emrooz app.
Emrooz is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal data from a child under 13, we will delete it promptly. If you believe we have collected such information, please contact us at [email protected].
Emrooz operates globally. If you are accessing our services from outside the region where our servers are located, your data may be transferred internationally. We ensure that such transfers are conducted in compliance with applicable data protection laws and with appropriate safeguards in place.
We may update this Privacy Policy from time to time. When we make significant changes, we will notify you through the app or by email. The date at the top of this policy indicates when it was last revised. We encourage you to review this policy periodically.
If you have questions, concerns, or requests related to this Privacy Policy, please contact our privacy team:
