Khutwa records where your home is, where your mosque is, and the route you walk between them. That is about as sensitive as phone data gets, so this page states what happens to it in terms you can check against the app rather than in assurances you have to take on faith.

Effective 3 September 2026 · StacknScope Inc.

The whole thing, in eight lines

There is no Khutwa account, and StacknScope Inc. operates no server that receives anything Khutwa records.
No analytics, no telemetry, no crash-reporting SDK, no advertising, no tracking. There is no code in the app that could send us your activity.
Your places, your Fridays, your walks, your routes and your step counts stay in Khutwa's own storage on your phone.
The app makes four kinds of network request of its own, and only when you ask for them — three on a tap, one as you type: find mosques near me asks Google Places what mosques are near a point, find on the map asks Google Places for suggestions as you type an address (and once more for the location of the one you pick), look up khutbah times asks Mawaqit which mosques near the pin publish a Jumu'ah timetable, and check for updates asks Expo whether newer text for the app has been published. Nothing else, and nothing on its own.
The map you see is drawn by your phone's own map service — Apple Maps on iOS, Google Maps on Android — which necessarily learns which area you are looking at.
Reminders are scheduled locally by your phone. Nothing about them reaches us.
Export gives you a JSON file you send wherever you choose. Erase removes everything, including the search cache and any reminders already scheduled.
Khutwa is free. There are no purchases, no subscriptions, and no licence to check.

What Khutwa stores on your phone

All of it lives in the app's own database and preferences on the device. None of it is transmitted to StacknScope Inc., because there is nowhere for it to go.

What	Detail
Places	For each home, workplace or mosque you add: the label you gave it, its latitude and longitude, an arrival radius, and for a mosque the khutbah time you entered.
Fridays	The date, whether it was walked, excused, missed or still pending, the reason if you marked it excused, and which conditions you ticked on the checklist.
Walks	Direction, which place you started from, the destination's coordinates and name, when you started and arrived, your device's UTC offset at the time, the step count and where that count came from, the distance, and the walked route stored as an encoded polyline.
Settings	Language, theme, reminder preferences, and whether the honorific is spelled out.
Two small keys	A flag recording that you have seen first-run notices, and the mosque-search cache described below.

Khutwa does not collect your name, email address, phone number, contacts, photos, advertising identifier, or any hardware identifier. It never asks for them, and it has no field to put them in.

The requests Khutwa makes, and only when you ask

Mosque search. When you tap find mosques near me while adding a mosque, Khutwa sends one query to Google Places at places.googleapis.com, run by Google LLC. The request contains:

the latitude and longitude of the point being searched,
a search radius of 12 km, the place type mosque, a request for the nearest twenty first, and the app's language,
the app's Google API key and the headers Google uses to check that the key is being used by Khutwa and not by someone who copied it — the app's package or bundle identifier and, on Android, the fingerprint of its signing certificate.

That is the entire request. It carries no account, no device identifier, and nothing about who you are.

Be aware of what the coordinate is. If you searched from the map after moving the pin, it is the pin. If you used use my location, it is your device's actual position at that moment, sent at full precision. We say this plainly because "Khutwa sends nothing about you" would not be true of that one tap, and Google is a third party with its own privacy policy and its own server logs, which will include your IP address like any web request.

The results are cached on your phone for 24 hours so that nudging the map does not re-query. The cache key is the coordinate rounded to two decimal places — roughly a 1.1 km square, not your doorstep. Erasing your data deletes it.

Find on the map. While placing a home, workplace or mosque, you can type an address or a place name and pick from suggestions. This is the one request Khutwa makes as you type rather than on a tap, and we say so plainly: once there are at least three characters in the box and you pause for a moment, what you have typed so far goes to Google Places at places.googleapis.com, together with the map's current centre so nearby places come first, and the app's language. Up to five suggestions come back — names and addresses, no coordinates. Tapping one sends a second, smaller request asking Google for that single place's location, and the pin moves there; tapping Search does the same with the first match. Each pause sends one request, and a newer keystroke cancels the older one. A random session identifier ties the keystrokes of one search to the pick that ends it, so that Google bills the search as one session; it is new for every search and is never stored.

The request carries the typed text, that centre point, the language, the session identifier, the app's API key with the same key-check headers as the mosque search, and your IP address as with any web request. Nothing else. Khutwa keeps no record of what you typed or of what came back; the only thing it stores is the pin position you then confirm and save — your pin, not Google's record. Type nothing into the box and nothing is sent. If Google cannot be reached the box simply offers nothing and the map still works.

Khutbah times. While adding a mosque, you can tap look up khutbah times to see whether a mosque near the pin publishes its own Jumu'ah timetable. Khutwa sends one request to Mawaqit at mawaqit.net, the timetable service that mosques maintain themselves, carrying the pin's coordinate rounded to three decimal places — about 110 metres — and your IP address as with any web request. Nothing else: no key, no identifier, no text. Mosques within three kilometres that publish a Jumu'ah time come back with their names and times; you pick the one you attend and it fills the khutbah field, which stays yours to change. Nothing is cached, and Khutwa keeps no record of the answer beyond the time you chose to save. Mawaqit is a public service run by its own organisation, with its own privacy policy and server logs; if it cannot be reached the sheet says so and the typed field remains.

Check for updates. Settings › App updates has a button that asks Expo's update service at u.expo.dev — run by Expo (650 Industries, Inc.) — whether a newer version of Khutwa's own code and text has been published for the app version you have. It exists so that a mistranslated line can be corrected without waiting for a store release. Khutwa is built never to make this request on its own: its configuration sets checkAutomatically to NEVER, the request happens only when you tap, and the button says what it sends before you do.

The request carries the app version and platform, the update channel, the identifier of the update currently running, and a random install identifier — a UUID that expo-updates generates once and keeps on the phone. It is not your advertising identifier, not a hardware identifier, and it is tied to nothing else Khutwa stores. Expo's server sees it, together with your IP address as with any web request, and can therefore tell that the same installation has checked before. It cannot tell who you are, and nothing about your places, walks or Fridays is included.

If an update is found it is downloaded and the app tells you; applying it is a second tap. An update can change what the app says and does within the permissions it already has, and cannot grant it a permission it does not have. Erase all data does not clear the install identifier, because it lives in expo-updates' own storage rather than Khutwa's; deleting the app does.

If you never use any of the four, Khutwa makes no network request of its own at all.

The map

Khutwa shows a map when you place a home or mosque pin and when you look at your accumulated routes. It uses your phone's built-in map component, which means Apple Maps on iOS and Google Maps on Android. Drawing a map requires requesting tiles for the area shown, so Apple or Google receives the region you are looking at — which, in this app, is generally the area around your home or your mosque. This happens under Apple's or Google's own privacy policy, not ours, and it is the same exchange as any app or website that shows you a map.

Your route lines are drawn on top of those tiles by the app, on your phone. The route itself is not sent to Apple or Google.

Permissions, and what each one is for

Khutwa asks for these. You can refuse or revoke any of them in your phone's settings; the app degrades rather than breaks.

Location — while using the app, never always. Khutwa asks for the when-in-use permission and does not request the always-on one, so there is no permission under which it could follow you around. Location is read for exactly two purposes: drawing the route of a walk you started, and noticing that you have arrived. It is never transmitted, never used for advertising, and never used to build a profile.
During a walk, updates keep arriving with the phone locked and in your pocket. On iOS that is the background-location mode, which lights the blue indicator in your status bar for as long as it runs; on Android it is a foreground service with a notification you can see the whole time. Both are deliberately visible: while Khutwa has your location, your phone is telling you so. When no walk is running, it is receiving nothing.
Motion & Fitness (iOS) / Physical activity (Android). The step count for the walk. On iOS, Khutwa also reads the pedometer's own recent history — the phone keeps roughly seven days — so that a walk you forgot to start can still be counted.
Health Connect (Android, optional). Read access to step data only. Khutwa never writes to Health Connect and reads nothing else from it.
Notifications. Reminders — the Thursday nudge, the time to leave for Jumu'ah — are scheduled on the device by the operating system and delivered by it. There is no push server, no device token, and nothing for us to see.

What leaves your phone, and only because you did it

Export. Settings gives you your data as a JSON file through your phone's share sheet. Where it goes is your choice. Khutwa hands the file to the app you pick and takes no further part.
Share. Sharing a hadith opens the share sheet with text and a link to khutwa.io. It contains no data about you or your walks.
Translation feedback. The help improve this translation row opens your own mail app with a message addressed to support@stacknscope.com, with the language code in the subject. Nothing is sent unless you press send, and what we then receive is whatever you wrote, from your own address.

Erasing your data

Erase all data in Settings removes the places, Fridays and walks from the database, clears your settings, clears the first-run flag and the mosque-search cache, and cancels reminders already scheduled with the operating system. Deleting the app removes everything it stored.

There is nothing held elsewhere for us to delete, and no request to make of us: we hold nothing to begin with.

Third parties

Short list, because there is little to list.

Apple and Google distribute the app and may record downloads and, if you opt in with them, crash and usage statistics under their own policies. Khutwa contains no analytics or crash SDK of its own, and receives none of this.
Apple Maps / Google Maps draw the map, as described above.
Google (Places API) answers find on the map as you type and find mosques near me, as described above. Suggestions shown on the Apple Maps screen carry the Powered by Google line Google's terms require.
Mawaqit answers look up khutbah times, as described above.
Expo (EAS Update) answers check for updates, as described above, and only then.

There is no advertising network, no data broker, no attribution SDK, and no A/B testing service. We do not sell personal information, and there is no personal information reaching us that could be sold.

Children

Khutwa is not directed to children under 13 and does not knowingly collect personal information from children. It has no account system and no way to submit personal information to us.

Changes to this policy

If Khutwa's behaviour changes, this page changes with it, and the effective date at the top moves. A change that adds a new outbound request will say so in plain terms rather than widening a general clause.

3 September 2026 — added look up khutbah times: a new outbound request, on a tap, carrying a coarse map coordinate to Mawaqit and returning the Jumu'ah times mosques there have published. The section above says exactly what it carries.
3 September 2026 — the mosque search and find on the map now go to Google Places rather than to OpenStreetMap services (Overpass and Photon). Nothing new is sent, but it is sent to a different company: a real mosque turned out to be absent from OpenStreetMap, and Google's place data is much more complete outside the Muslim world. The two sections above now describe exactly what each request carries, including the key-check headers. The OpenStreetMap User-Agent line is gone with those services.
2 September 2026 — added find on the map: a new outbound request, and the first that goes out as you type rather than on a tap, carrying what you have typed and the map's centre to Photon (komoot). The section above says exactly what it carries and when.
2 September 2026 — added check for updates. This is a new outbound request, so here it is in plain terms: it happens only when you tap the button in Settings, and the section above lists exactly what it carries.
29 August 2026 — first published.

Contact

Privacy questions and requests: support@stacknscope.com, or StacknScope Inc. at stacknscope.com.

This website

The same standard applies to the page you are reading.

No cookies. This site sets none, and no third party is loaded that could set one. Fonts, images, styles and scripts are all served from this domain.
Two preferences, kept in your browser. If you choose a colour theme or a language with the switches in the header, that choice is stored in your browser's local storage, on your device, under the names khutwa-theme and khutwa-lang. It is read only by this site, only to honour what you chose, and it never leaves your browser. This is the kind of strictly necessary storage that needs no consent banner, which is why you did not see one.
Hosting. The site is served by Cloudflare Workers. Like any web host, Cloudflare handles the requests your browser makes, including your IP address, for the purpose of delivering the page and defending against abuse, under Cloudflare's privacy policy. We do not receive request logs that identify you.
Measurement, if any, without tracking. If we ever want to know how many people visit, we will use Cloudflare Web Analytics, which counts page views without cookies, without local storage, without fingerprinting and without a profile of you, and we will say so here. It is not switched on today.
Links elsewhere. The App Store and Google Play buttons take you to Apple and Google, whose own policies apply from there.