App Privacy Notice

This notice applies to the mymirah app on Android and iOS. The website has a separate website privacy notice.

Provider

Sigfried Payam Ewert
Maienweg 105
22297 Hamburg
Germany

Further details are in the legal notice.

We decide which functions the app has, which information it stores on the device, and when it offers an encrypted backup. We are responsible for support messages and for our handling of order information. There is no mymirah account and no server of ours that receives your entries. The fact that we cannot read these entries remotely does not, from the outset, remove our responsibility for the processing.

Local storage

The app stores your entries in an encrypted database on the device. There is no ongoing synchronization. You do not have to sign in. Storage on the device does not mean that every copy exists only there, and it does not mean that the data are anonymous.

Signing in with Google, or using iCloud, serves only to place an encrypted backup in your own drive. It is not a mymirah account.

Data leave the device when you create a backup, make a purchase, send us an email, share an article, open an external link, or start a place search or a location lookup for the prayer location. System backups of the device can include further files.

Which data

Depending on what you use, the app stores on the device:

Cycle and bleeding: start, lengths, regularity, flow, spotting, colour, and unexpected bleeding. Purpose: calendar, estimates, and religious classification.
Fertility: an estimated fertile window, an ovulation estimate, and earlier forecasts. The window is a calendar heuristic and is not for contraception.
Journal: symptoms, mood, sleep, discharge, ovulation tests, and pregnancy tests.
Sex life: protected sex, unprotected sex, coitus interruptus, and “no intimacy”, where you enter or import that.
Notes: free text for a day. It is shown, can be included in a backup, and is not used for forecasts.
Pregnancy: pregnancy on or off, estimated due date, dating from the last period, birth, optionally a child’s name, a miscarriage with an optional week of pregnancy, and the end of the postnatal period.
Body: height, weight, basal temperature, and further measurements if you enter or import them.
Import: a Flo export file that you have saved can be turned into entries on the device, including values the interface does not show. The app does not connect to a Flo account.
Profile: your name, required during setup, and optionally your date of birth. The app can calculate an age for the profile card from it. It does not check an age limit.
Religious beliefs: the chosen school of law (Hanafi, Shafi’i, Maliki, or Hanbali), Ramadan, missed prayers, fasts to make up, and local customary values. The classification is produced on the device. There is no fatwa service.
Prayer location: after you confirm it, coordinates, place name, country, time zone, and calculation method. The app does not permanently store unconfirmed search queries or temporary location data.
Reminders and their texts, including texts you write.
Home-circle photo: an image from your gallery. The app does not encrypt it. It is an ordinary image file outside the encrypted database and outside the encrypted backup file.
Premium: the purchase status reported by the store, and a local note when the app grants Premium without a store charge.
Purpose of use: period, trying to conceive, or pregnancy, if you select that.

Health data, information about your sex life, and information about religious beliefs are each special categories under Art. 9 GDPR. We do not obtain explicit consent to this processing.

Protection on the device

The database key is kept in the operating system’s key store. The app does not encrypt the home-circle photo. Some settings, including display options, note templates, and, on older installations, further earlier information, are kept in the app’s ordinary settings store.

The app stores an optional PIN only as a check value. The operating system handles fingerprint or face recognition. The app does not receive that biometric data.

Encryption of the database and of the backup file is not anonymization and is not end-to-end encryption between two people. For a cloud backup, Google or Apple receive the encrypted container and the usual account and file information. The photo is not included in it.

Optional backups

A cloud backup stays off until you turn it on. The app can then create automatic backups when you return to it. These are snapshots, not synchronization.

The backup file can contain entries, profile, settings, body measurements, reminders, reward progress, forecast history, and the notes about setup and free Premium. Not included: the photo, the app lock, the database key, and sign-in tokens. Before the file leaves the device, the app encrypts it with your password (Argon2id and AES-256-GCM). We do not receive the file or the password, and we cannot restore a forgotten password.

Google Drive (Android): access only to files the app itself creates or opens. The folder is “MyMirah/Backups”. When connecting, the app reads the Google account ID and email address. It does not store either in the database.
iCloud Drive (iOS): storage in the app’s iCloud container in your account.
File: the same password-encrypted file, with the extension .mymirahbackup, through the device’s save dialog, in a place you choose.

You can keep 5, 10, 20, or unlimited automatic backups. Without a choice, the app keeps 10. Manual backups, backups you mark as “keep”, and backups made before a restore are not subject to that limit.

Google and Apple operate the storage in your account under their own terms. We do not receive the file. Encryption does not make it anonymous and does not settle duties that apply when data are transferred to another country.

System backups

Independently of the app’s backups, Android and iOS can back up files or move them to a new device. The app excludes the encrypted database from the iOS backup described for this. On Android, the photo folder and the ordinary settings store are not excluded. The app does not delete an existing system backup when you delete the local data.

Prayer location

The app calculates prayer times on the device. It uses the saved coordinates, time zone, and calculation settings. Opening Home, Calendar, Prayer Times, or reminders does not itself trigger these location-service requests. No external service calculates the prayer times.

For a search, you enter a place name and submit it yourself. The app sends the search query directly from the device to Open-Meteo Geocoding. No location permission is required for this. Open-Meteo can see the IP address of the connection. MyMirah does not permanently store the search query. Only a place you confirm is saved.

You can start a location lookup yourself, and only if you want to. The app explains it in the app beforehand. Where necessary, it asks for the foreground location permission and obtains one position of the device. Latitude and longitude are sent to Nominatim to resolve an address. After the address has been resolved, latitude and longitude are sent to Open-Meteo to resolve the IANA time zone. Both services can see the IP address of the connection. There is no ongoing tracking in the background. The requests are sent before you finally confirm the place. Cancelling afterwards does not undo a request that has already been sent.

The app does not attach a mymirah account identifier to these requests. There is no search for mosques or for a place in which to pray. These notices do not state how long Open-Meteo or Nominatim keep a request, or where it is processed.

Confirmed places are stored in the encrypted local event database. They can be included in an encrypted backup. MyMirah does not permanently store unconfirmed search queries or temporary location data. There is no database of search history. Older event records can remain on the device until you delete all local data on this device.

Purchases

Premium is a subscription through the Apple App Store or Google Play. The app passes the selected product to the store and receives purchase and access information. Cycle, journal, and profile entries are not included. We do not receive payment-card data through the app.

We look at individual orders when needed to handle support requests, clarify purchase problems, or process refunds. There is no routine export of these orders and no separate customer database for that purpose. Deleting our support messages does not delete the order data held by Apple or Google. Apple and Google process purchase and payment data under their own notices.

Feedback

From the app you can open a draft in your email app to support@mymirah.app, with category, summary, your message, an optional contact address, and technical details of the app and operating system. The app does not attach entries automatically. You decide whether to send it.

Please do not send health information, information about your sex life, information about religious beliefs, journal entries, or screenshots of such content. Sending is not consent. If it nevertheless arrives, we limit ourselves to recognizing it as far as necessary. We remove or redact that information. If we still need the request, we ask for a version without it.

The mailbox is at IONOS. IONOS is our processor for it. We keep the message for as long as that is required to handle the request, and we delete it after the request is finished unless a statutory retention duty or a specific legal claim stands in the way. The mail server does not delete it by itself. Details are in the website privacy notice.

You choose the home-circle photo from the gallery. The app does not use the camera. System backups can include the photo. A Flo import is processed only from a file on the device. When you share an article, the article text goes to the app you choose, without personal entries. The device schedules reminders. They are not sent through a server of ours. Prayer notifications name the prayer and the minutes, not your cycle data. One template reads “Zeit, deine Tablette einzunehmen.” Texts you write can appear on the lock screen. That is not a medical instruction. Source links open in the browser.

Permissions

Place search without a location permission. Location only if you choose it, after an explanation in the app, once in the foreground, and without ongoing tracking. Notifications for local reminders. On Android, exact alarms for prayer times. After the device restarts, the app receives a system signal in order to restore scheduled reminders. The app does not restart the device. Biometrics only for the optional app lock. The device time zone is used for reminders. Prayer times use the time zone of the saved place.

Analytics

The app contains no analytics, advertising, or crash-reporting SDKs of its own. We do not currently evaluate crash or diagnostic reports in App Store Connect or the Google Play Console. Apple and Google may still process diagnostic data in the operating system and the stores under their own notices.

Legal bases

Support that concerns a contract or steps before a contract: Art. 6(1)(b) GDPR. Other requests: Art. 6(1)(f) GDPR. Statutory retention: Art. 6(1)(c) GDPR. A specific legal dispute: Art. 6(1)(f) GDPR.

Order information we need in order to clarify Premium access or to handle a refund we owe: Art. 6(1)(b) GDPR. Other purchase-related requests: Art. 6(1)(f) GDPR. This applies to our handling, not to independent processing by Apple or Google, and not to Art. 9 GDPR.

The app stores and evaluates health data, information about your sex life, and information about religious beliefs on the device. An optional backup stays off until you turn it on, and it is encrypted before upload. The bases for support and orders do not apply to these entries. Art. 6(1)(b) or (f) GDPR alone does not support processing under Art. 9. We do not obtain explicit consent to this processing.

Children and young people

The app sets no minimum age of its own. The date of birth is optional.

Deletion

Deleting or correcting a single entry usually appends another event to the local history. The earlier event can remain until you delete all local data on this device. Older backups keep the state they had.

“Delete all local data” removes, on this device, the database and its key, entries, profile, settings, reminders, reward progress, the app lock, the photo, and the stored backup password. It does not cancel a store subscription. Files in Google Drive, iCloud, backup files you saved yourself, and system backups remain until you delete them there. You revoke the app’s Google permission in the Google account.

We cannot remotely delete local entries or backups in storage that you control.

Your rights

Subject to the statutory conditions, you have the right of access, rectification, erasure, restriction, and data portability (Arts. 15 to 18 and 20 GDPR) and the right to object under Art. 21 GDPR where we rely on Art. 6(1)(f) GDPR. Where processing is based on consent, you may withdraw it for the future.

You view, change, and delete entries in the app. There is no plain-text export. The encrypted backup file does not by itself fulfil every access or portability request. For data we hold, an email to support@mymirah.app is enough.

You may lodge a complaint with a supervisory authority, including outside Hamburg. For the provider, this is in particular the Hamburg Commissioner for Data Protection and Freedom of Information, Ludwig-Erhard-Str. 22, 20459 Hamburg, mailbox@datenschutz.hamburg.de. That office is not our data protection officer.

Automated guidance

The app calculates forecasts, the fertile window, and religious guidance on the device. They are estimates or orientation, not a diagnosis and not a binding religious ruling. We do not use them to decide a contract or Premium.

Changes

The version published here applies.

Last updated: 29 September 2026