Last updated: 8 September 2026
Mizan is a prayer and spiritual companion app for iPhone and iPad. This page explains, in plain language, what the app keeps on your device, what it sends anywhere else, and who else touches your information along the way.
The short version:
Mizan is published by Massive Dynamics Canada LTD., a company incorporated in Canada (Corporations Canada #15077729), of 20 Mahogany Mews Southeast, Suite 106, Calgary, AB T3M 2W8.
If you have a question about this policy, or about your information, write to info@massivedynamicscanada.com.
Most of Mizan runs entirely on your phone. None of the following is sent to us or to anyone else.
Your location. With your permission, Mizan reads your location while the app is open, to about one-kilometre accuracy. It is used for three things: working out the prayer times where you are, pointing the Qibla compass, and searching for mosques near you. The latest set of coordinates is saved in the app's own storage on your device so that prayer times still work when you open the app without a signal.
We do not send your coordinates to our servers, and we do not store them in your account. Prayer times are calculated on the device itself, using the open source Adhan library and the calculation method and madhab you pick in Settings — not fetched from a prayer-times web service.
Mizan asks only for "while using the app" location access. It does not track you in the background.
The Qibla compass uses your device's magnetometer (its compass sensor) and your saved coordinates to work out the direction of the Kaaba. That maths happens on the device; no reading is transmitted.
The Quran is built into the app — the full Uthmani Arabic text of all 114 surahs ships inside the download. Reading it, searching it and bookmarking verses involve no network request at all. The 99 Names of Allah and the Daily Wisdom reflections are likewise bundled with the app.
The ambient sounds are generated by your device as they play. There are no audio files and nothing is streamed.
Prayer reminders are scheduled by the app on your device, using iOS's own local notifications and the standard system notification sound. There is no recorded adhan, and the server never sends you a visible push notification — it never delivers reminder content or displays anything on your screen. Around every 12 hours our server sends a silent, invisible signal to your device whose only purpose is to wake the app briefly so it can refresh that on-device schedule from your existing settings; it carries no readable content and you never see it.
Your dhikr counts, Quran bookmarks and reading position, mood history, the name you type during onboarding, and your app settings are stored in the app's own storage on your device. The name you enter at onboarding is only used to greet you on your own screen — it is not uploaded.
A local copy of your recent AI conversation is kept on the device so the transcript is still there when you reopen the app offline.
When you send a message to the Companion, the app sends it to our own server function, which forwards it to DeepSeek — a third-party AI provider based in China — so the model can generate a reply. Your message is read and processed by DeepSeek's service, in China, not just by us.
That is a different legal jurisdiction from where you and Mizan's other service providers are based. Chinese law can require a company operating there to disclose data to Chinese authorities on request, in ways that differ from the protections you would have if your message stayed with a US or EU provider. If you would rather your words never reach a server in China, don't use the AI Companion — every other part of Mizan works without it, and nothing you write there is ever sent anywhere.
What is sent with a message:
What is not sent: your location, your name, your email address, your prayer log, or anything else from the app.
For the conversation to make sense from one message to the next, the server also includes up to the ten most recent messages already in that conversation — both what you wrote and what the AI replied.
A single message can be at most 2,000 characters long.
Every reply carries a notice that it comes from an AI assistant and not from a religious authority. That notice is added on our server, on purpose, so it cannot be removed.
Mood check-ins take the same route. The app sends the mood you picked (one of six words such as "anxious" or "grateful") and asks for a verse and a short reflection. A mood check-in is not treated as part of your conversation and is not added to your chat history.
When you are signed in, Mizan mirrors some of your information to Google Firebase, so that it survives a lost phone and follows you to a new one:
Your prayer settings — calculation method, madhab, which reminders are on, app language, font size — stay on your device.
When you open the mosque list, the app asks Apple's Maps service for places matching "mosque" and "masjid" in the map area around you. That request goes to Apple and is handled under Apple's own privacy policy; Apple's MapKit is designed so that these searches are not tied to your Apple ID. We do not receive, store or log the results, and we do not use Google Places or any other places provider.
Tapping "Directions" opens Apple Maps. Tapping a phone number or website opens your phone app or browser. From that point you are in Apple's app or on someone else's website, and their privacy policies apply.
Mizan uses Firebase Analytics and Firebase Crashlytics, both from Google, to understand how the app is used and to find out when it breaks.
We record six product events, and none of them contain anything you wrote:
| Event | What it records |
|---|---|
prayer_completed | which prayer, and how many you have marked today |
ai_message_sent | how many messages you have sent today, and whether you are a Pro subscriber |
paywall_shown | which screen the upgrade prompt appeared on |
purchase_started | which subscription product |
purchase_completed | which product, and its price |
streak_milestone | how many days your streak reached |
Alongside those, the Firebase SDK automatically collects standard information about the app installation itself: a random identifier for this install of the app, your device model, iOS version, app version, language, and an approximate location that Google derives from your IP address (roughly city level — this is not your GPS location, which the app never uploads).
If Mizan crashes, Crashlytics sends Google a crash report: what the app was doing when it stopped, the device model and iOS version, and that same install identifier. Crash reports do not contain your messages, your prayer log, or your location.
Subscriptions are sold through Apple's App Store. We never see your card details or your Apple ID password — Apple handles payment and only tells us whether a subscription is active.
We use RevenueCat to keep track of subscription status. RevenueCat receives your Mizan account identifier, the App Store transaction information for your purchase, and basic device and app information. It tells our server when a subscription starts, renews, or lapses, so the app knows to unlock Pro features.
We use Superwall to display and test the upgrade screens. Superwall receives information about which upgrade screen was shown and basic device and app information. Mizan does not pass your name, email or account identifier to Superwall.
| Company | What it does for Mizan | What it receives |
|---|---|---|
| Google (Firebase) | Sign-in, the database behind your account, the server function behind the AI Companion, analytics, crash reports | Your account identifier and profile; your prayer log, chat history and mood logs; analytics events; crash reports; the IP address any request comes from; a push notification token used only to wake the app to refresh prayer reminders |
| DeepSeek | Generates the AI Companion's replies | The message you typed, its short conversation context, and the mood / prayer-window / language details listed above |
| Apple | The App Store, Sign in with Apple, Maps search, notifications | Purchase and subscription information; your sign-in, if you use Apple; your mosque search and its map area |
| Google (Sign-In) | Optional sign-in with a Google account | Your sign-in, if you choose it |
| RevenueCat | Tracks subscription status | Your account identifier, App Store transaction information, device and app information |
| Superwall | Shows and tests the upgrade screens | Which upgrade screen was shown, device and app information |
International data transfers. Firebase's servers for this project are located in the United States — the Cloud Functions that power sign-in, account sync and the AI Companion run in Google's us-central1 region. Your Firestore account data lives in the same Firebase project.
DeepSeek, the company that generates the AI Companion's and Daily Wisdom's replies, is based in China, and processes the messages sent to it there — a separate legal jurisdiction from the United States, from Canada, and from the EU/UK. China does not have a data-protection adequacy decision from the EU, the UK or Canada, and we do not currently have Standard Contractual Clauses or another formal GDPR Article 46 transfer safeguard in place with DeepSeek covering this transfer.
In practical terms: a message you send to the AI Companion, or a mood you pick during a check-in, is read and processed by a company based in China, subject to Chinese law rather than the law of your own country. Please do not put anything in a Companion message that identifies you or that you would not want a party outside Canada to see. If this matters to you, you don't have to use the AI Companion or mood check-ins — every other part of Mizan works fully offline, and nothing you write there is ever sent anywhere. You can also delete your account and everything already sent to us, at any time, from Settings → Account → Delete account (see "Deleting your account and your data" below) or by writing to us.
You can sign in three ways:
What a guest account stores. A guest account is still an account: it gets a random identifier with no personal details attached, and while you are signed in as a guest your prayer log, streaks, chat history and mood logs are still saved under that identifier — so your data survives if you close the app, and can be carried over if you later sign in properly with Apple or Google. A guest account has no name, no email address and no profile picture, and there is nothing in it that identifies you as a person.
The free tier — including three AI messages a day — is fully available to guests.
You can delete your account from inside the app, at any time, whichever way you signed in — guest accounts included.
Settings → Account → Delete account, then confirm.
This permanently erases:
It cannot be undone, and we cannot restore it afterwards.
Two things deliberately survive: your app preferences (calculation method, madhab, reminder toggles, language, font size) — which describe the app rather than you — and any active subscription, which belongs to your Apple ID and is managed by Apple. To cancel a subscription, open the App Store app, tap your profile picture, and choose Subscriptions.
Signing out, rather than deleting, leaves your account and its data intact.
You can also ask us to delete your information by writing to info@massivedynamicscanada.com — but the in-app button is faster, and it does the whole job.
Mizan is rated 4+ and is suitable for all ages, but it is not designed for or directed at children, and it has no separate children's mode.
We do not knowingly collect personal information from children. We never ask any user for their age, their school, their address, or their photograph. There is no messaging between users, no user profile that anyone else can see, and no way for one user to contact another.
The parts of Mizan that send anything at all — the AI Companion and account sync — require you to send a message or sign in first. A child can use the prayer times, the Quran, the Qibla compass, the dhikr counter and the ambient sounds without any information leaving the device.
The AI Companion is a general-purpose AI assistant. It is not filtered for children, and, like any AI, it can be wrong. If your child uses Mizan, we suggest that you use it together.
If you believe a child has given us personal information, write to info@massivedynamicscanada.com and we will delete it.
Every permission Mizan asks for is optional, and the app keeps working without it:
You can also simply not use the AI Companion, in which case nothing you write ever leaves your device.
Depending on where you live, you may have the right to see the information we hold about you, to correct it, to have it deleted, to get a copy of it in a portable form, or to object to some uses of it.
For deletion, the fastest route is Settings → Account → Delete account in the app. For anything else, write to info@massivedynamicscanada.com.
If you are in the European Economic Area or the United Kingdom, Massive Dynamics Canada LTD. is the controller of your personal data for the purposes of the GDPR / UK GDPR. We rely on these legal bases: performance of a contract with you, to provide the app and your account; our legitimate interest in operating, securing and improving Mizan, for analytics, crash reporting, and the AI Companion's processing of your message (you can object at any time simply by not using that feature); and your consent, which you can withdraw at any time in iOS Settings, for location and notifications. See "International data transfers" above for what sending a message to the AI Companion means if you are covered by the GDPR. You have the right to lodge a complaint with your local data protection supervisory authority if you believe we have mishandled your information.
If you are in California, this is our CCPA/CPRA notice: we do not sell or share your personal information, and we have not done so in the past 12 months. You have the right to know what we collect, to delete it, and to correct it — the sections above describe each of those, and the in-app deletion flow performs the deletion directly.
Wherever you are, write to info@massivedynamicscanada.com for anything this page doesn't already let you do yourself, and we will respond within the time required by applicable law — for example, within one month under the GDPR (extendable by two further months for a complex request, with notice to you) or within 45 days under the CCPA/CPRA (extendable once by a further 45 days).
If Mizan starts collecting something new, sending something somewhere new, or using a new provider, this page must be updated before that version reaches the App Store — and the "last updated" date at the top changed with it. If a change materially affects you, we will tell you in the app rather than quietly editing this page.
Massive Dynamics Canada LTD. 20 Mahogany Mews Southeast, Suite 106, Calgary, AB T3M 2W8 info@massivedynamicscanada.com
Support: support@massivedynamicscanada.com