Semaya has no accounts, requires no sign-up and sends no usage data. This policy says exactly what that means and where the one exception lies.
Last updated: 14 August 2026 · applies to the Semaya app on iOS and Android
Can Atilla Toparlak · TopWeb Digital, sole proprietorship · Sieker Landstraße 43d, 22143 Hamburg, Germany · info@topweb-digital.com
Semaya calculates everything on your device. There is no server that knows who you are, which path you follow, where you are, or when you pray. No user accounts, no sign-up, no ad networks, no analytics, no crash reporting, and no third-party components pulling data in the background.
Religious belief is a special category of personal data under Article 9 GDPR. The only genuinely safe way to handle it is not to collect it in the first place. The app is built that way.
The following lives only in the app’s protected storage. It is not transmitted, not backed up by us, and not synchronised across devices:
Delete the app and all of it goes with it. Nothing remains that we could keep.
Prayer times and the direction of prayer cannot be calculated without a location. Semaya therefore requests only the “while using the app” permission, never background access. Your whereabouts are not tracked.
So that the settings read “Hamburg” rather than “53.551, 9.993”, Semaya has the coordinates turned into a place name. This calls the operating system’s location service. These services do not work purely on the device: they may transmit the coordinates to Apple or Google in order to resolve them. This is the only operation in Semaya where data can leave the device.
We learn nothing of it. The request runs between your phone and the maker of your operating system, not through us. What is transmitted are the coordinates, not your path and no other detail from the app. The terms of Apple and Google apply.
If you would rather not have that, revoke the app’s location permission in the system settings. Prayer times and the direction of prayer will then be unavailable; the calendar and holiday reminders keep working.
All reminders are scheduled on the device and triggered by the operating system. There are no push notifications from a server, and therefore no push token and no device identifier held anywhere.
Semaya contains no advertising, no advertising identifiers and no tracking across apps or websites. The tracking prompt therefore never appears. There is nothing to permit.
When downloading and updating, Apple and Google process their own data, such as your store account and device details. We have no influence over this. From the stores we receive only aggregated, non-personal figures.
Under the GDPR you have the rights of access, rectification, erasure, restriction, portability and objection (Articles 15 to 21).
In practice these come to nothing here, in your favour: we hold no data about you. A request for access could only be answered with “we have nothing on file”. Everything Semaya knows about you sits on your phone and is deleted with the app.
You may lodge a complaint with a supervisory authority. The competent one is the Hamburg Commissioner for Data Protection and Freedom of Information.
Where any processing takes place at all, it rests on Article 6(1)(b) GDPR: it is necessary to deliver what you installed the app for. You state your path yourself and voluntarily; it never leaves your device and is at no point processed by us.
If the way the app works changes, this policy is updated beforehand. The date above shows the current version. The German version is the authoritative one; translations serve comprehension.