Privacy Policy

Suqoon guides you through Hajj and Umrah. We process as little personal data as possible – only what is required to support you safely and meaningfully on your journey.

Last updated: 16 September 2026 · Version v2.3

1. Data controller

2. What data we process

This is the data you enter yourself during onboarding or while using the app:

• Email address – for authentication and account recovery.
• Profile information – madhab, language, your name if you give it and how you want to be addressed, whether you are travelling alone, whether you travel with a mahram, and your reading preferences (such as text size, transliteration and how Arabic text is shown).
• Journey details – journey type (Hajj or Umrah), Hajj variant (tamattu, qiran, ifrad), route, place of ihram, your planned departure and arrival dates, and where you are in your preparation.
• Who you are making the journey for – see below.
• Per-step progress – which phases and rituals you have completed, stored locally and optionally synchronised.
• Personal duas – duas you enter yourself to take with you on your journey.
• Notes – what you write down in the app yourself.
• Dua bookmarks – duas from the library that you have saved.

Who you are making the journey for. During onboarding we ask whether you are making the journey for yourself, for someone who cannot go themselves (for example a parent), or for someone who has died. If you are making it for someone else, you can enter one name; you do not have to. We ask nothing more: no reason, and nothing about illness or health. Suqoon uses your answer only to match the text on your home screen to who you are making the journey for. You may skip the question. If you want your answer or the name erased without deleting your account, email privacy@suqoon.nl. If you delete your account, it goes with it (see 4).

In addition, Suqoon receives technical data about errors in the app, and only if you turn them on yourself, usage statistics and error recordings. Section 8 sets out exactly what that is.

3. Purpose of processing

Solely to provide you with personal guidance during your Hajj or Umrah, to record your progress so you can later resume where you left off, and to keep the app working and improve it as section 8 describes. Your data is never used for any secondary purpose – no marketing, no profiling, no sale to third parties.

4. Legal basis

• Art. 6(1)(b) GDPR – performance of the contract between you and Suqoon (your use of the app).
• Art. 9(2)(a) GDPR – explicit consent for the processing of one special category of personal data: your madhab, which reveals your religious belief. We ask for this consent separately during onboarding, and you can withdraw it. We no longer ask for your sex or a health limitation, and no longer store them.
• Art. 6(1)(a) GDPR – your consent to usage statistics and error recordings (see 8). They are off until you turn them on yourself, during onboarding or in Settings.
• Art. 6(1)(f) GDPR – our legitimate interest in protecting your account against abuse. This is the basis for the check at sign-in that confirms you are a person (see 7). It is not consent: you cannot switch it off, because without that check we cannot protect your account against automated guessing.
• Art. 6(1)(f) GDPR – our legitimate interest in seeing and fixing errors in the app. This is the basis for error reports and our server's measurements (see 8). This is not consent either: an error nobody sees cannot be fixed.

Withdrawing consent. Withdrawal can mean three things. We keep them apart, because they genuinely do different things:

• Stop storing. Turn off cloud synchronisation in Settings. From that moment the app writes nothing new to our servers; your progress stays locally on your device. What is already stored remains stored and remains visible in the app.
• Stop statistics and recordings. Turn off Gebruiksstatistieken en foutopnames (usage statistics and error recordings) in Settings, under Gegevens – the Settings screen is in Dutch only. From that moment the app sends no usage statistics and no error recordings in that window; other windows and devices follow as soon as you go back to them (see 8). What was already sent is covered in section 5.
• Erase what is stored. Delete your account in Settings. That removes your profile – including your madhab – together with your progress, checklist, bookmarks, personal duas, notes and journey data, and your answer on who you are making the journey for.

5. Retention period

We retain your data for as long as your account exists. If you delete your account in Settings we carry that out immediately: your profile, progress, checklist, dua progress, bookmarks, personal duas, notes and journey data go with it. If you would rather send the request by email to privacy@suqoon.nl, we handle it within 30 days.

Three things fall outside that deletion. We name them here because you should be able to know where you stand:

• Technical back-ups. Our database provider makes back-ups so the service can be restored after an outage. These fall outside the period above and we do not run a separate erasure pass over them. We restore a back-up only after an outage, never to bring back a deleted account.
• Review of religious content. For every published text we record who reviewed or signed it. That record is the evidentiary basis under the content and remains in place, also after the account concerned has been deleted (Art. 17(3) GDPR). Where a scholar has signed a published text, we do not delete that account automatically – that is a manual procedure with a human decision. This affects accounts with a reviewer or scholar role only; for ordinary users it does not apply.
• Error reports and statistics. What the app has already sent to Sentry or Vercel (see 8) is not deleted when you delete your account. Sentry deletes error reports and error recordings itself after its retention period.

6. Your rights

As a data subject under the GDPR you have the right to:

• Access the data we process about you
• Rectification of inaccurate data
• Erasure ("right to be forgotten")
• Restriction of processing
• Data portability – your data in a machine-readable format
• Object to processing
• Withdraw consent previously given – see section 4 for what withdrawal actually does

Send your request to privacy@suqoon.nl and we will respond within 30 days.

7. External processors

Suqoon works with a small number of processors. All personal data you enter yourself is stored within the EU. For each processor, what it sees is listed below:

• Supabase Inc. – database and authentication. Region: eu-west-1. EU data, EU storage.
• Vercel Inc. – hosting of the web application via EU edge nodes, and only with your consent, usage statistics (Vercel Web Analytics, see 8).
• Functional Software, Inc. (Sentry) – error reports and our server's measurements, and only with your consent, session records, load-time measurements in your browser and error recordings (see 8). The app sends them to Sentry's EU data region.
• Capacitor – local application permissions (iOS/Android). No data is transferred to Capacitor; on-device only.
• Cloudflare, Inc. – abuse protection at sign-in (Turnstile). On each sign-in attempt it sees your IP address, your browser details and how you interact with the form, in order to decide whether you are a person. It never sees your email address, your password or anything from your account. Processed outside the EU, under a data processing agreement with standard contractual clauses.

8. Statistics and error reports

Besides what you enter yourself, technical data goes to two processors, Sentry and Vercel. Error reports are always on; everything else only if you turn it on yourself.

• Error reports – always on. When something goes wrong in the app, your browser sends a report to Sentry: which error, on which page, in which browser and on what kind of device, with the steps just before it – which button you tapped, which page you went to and which requests the app made. When something goes wrong on our server, the server sends a report about that request. Our server also measures, for some requests, how long handling them took, and sends that measurement to Sentry too. The app does not include your name, email address or IP address. Like any server, Sentry does see the IP address a report comes from. A report or measurement may contain a technical number of your account, for example in the address of a request to our database, or with an error while reviewing religious content. Basis: our legitimate interest (see 4).
• Usage statistics – only if you turn them on. Vercel Web Analytics counts which pages are visited, with the kind of device, the browser and the country a visit comes from. No cookies are set for this and nothing is kept in your browser. Sentry then also receives a short session record for each screen you visit (whether the app worked without errors), and for some visits a measurement of how fast the screen loaded, with the addresses of the requests the app made while doing so.
• Error recordings – only if you turn them on. Sentry Session Replay keeps a short recording in your browser of what happens on screen: clicks, screen changes, how the page is built and the addresses of the requests the app makes. All text on screen is made unreadable in that recording, and images and media are not recorded. The request addresses may contain a technical number of your account. Only when an error occurs does the recording go to Sentry, from shortly before the error until the end of your visit. Without an error, nothing is sent. To do this, Replay keeps a session number in your browser's temporary storage.

Turning them on and off. Usage statistics and error recordings are off until you turn them on yourself: during onboarding or in Settings, under Gegevens. Turning them off takes effect at once in the window where you do it: from that moment that window sends no statistics, measurements or recordings, not even the part of a recording that had not been sent yet. Other windows and devices follow as soon as you go back to them. Error reports cannot be turned off.

9. Cookies and browser storage

Suqoon uses only cookies the app needs in order to work: a session cookie for Supabase authentication, a cookie that remembers whether you are in preparation or journey mode, and a Cloudflare Turnstile cookie set on the sign-in page only, to prevent abuse. Usage statistics and error recordings set no cookies. No advertising cookies.

Browser storage after your session. While you are signed in, the app keeps two things in your browser's storage: the email address you signed in with and the phase you last opened. They are kept in your browser itself; the app does not send them to our server for this. If your session expires, they stay, so that when you come back the app has your email address already filled in and takes you back to that phase. They are removed as soon as you sign out or delete your account. You can also remove them yourself by clearing Suqoon's site data in your browser. This clears the data on the device where you do so. If you use the app on multiple devices or browsers, these values remain stored on the other devices until you sign out or delete your account there too, or clear that browser's site data manually. These values have no expiry of their own: even after your session on a device ends after 90 days of inactivity, your email and phase remain stored until you remove them yourself as described above.

10. Changes

We may update this policy. The date and version number of the most recent change are shown at the top of this page. If something material changes, we ask you to read the new version and confirm it again when you open the app, before you continue.

11. Complaints

Have a complaint about how we handle your data? Please email us first at privacy@suqoon.nl so we can resolve it. If we cannot reach a resolution, you may lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

This policy has been drawn up in accordance with GDPR Art. 13 and 14.