Imshi is a social steps app with optional personal modules. This page explains, plainly, what we collect and what we do with it. If anything here is unclear, email imshi@alqefari.app.
What we collect
- Step counts — Imshi's core feature. We read them from Apple Health (iOS) or Health Connect (Android) only after you grant access, and use them to show your daily total alongside your friends'.
- Optional Santé health data — only when you enable Santé in Settings and grant the related Apple Health access, Imshi reads workout sessions and their active energy, including activity type, start and end time, duration, overlapping steps, and source metadata. This keeps Santé's calorie balance accurate. Steps-only users do not send this workout data to Imshi.
- Optional Location sharing — only after you accept a sharing request that names the exact people who can see you, and only until you stop it, Imshi collects your device location and shares it with those people. Details are under Location sharing (optional) below.
- Account info — your name, verified email (when supplied), and profile photo from the sign-in provider you choose. Your provider's stable account identifier secures sign-in; your email is not used as the identity key.
- Username — the handle you pick. Visible to friends and to anyone searching to add you.
- Friend list — the people you add as friends and pending friend requests. Used to build your leaderboard and your conversations.
- Optional module content — only when you enable an optional module in Settings and choose to add content, Imshi stores the information needed to provide it, such as Santé meals, goals and body measurements; Notes content; and reading or library data.
- Diagnostic data — bounded crash, error, performance, sync, update, and device-health reports used to keep Imshi working. Reports may be linked to your account and paired devices so support can diagnose a problem you report. We redact credentials and reading content, restrict access to administrators, and automatically delete operational reports after their retention window.
- Usage analytics — which screens you open, which controls you tap, and events such as logging a meal, sending a nudge or adding a friend, sent to PostHog, our analytics provider in the United States. Analytics are linked to your account (name, email and username) together with summary counts such as your step total, how many notes and friends you have, and which modules you use, so we can see how Imshi is used and fix what doesn't work. They never include text you write, photos, health measurements or sign-in tokens, and are never used for advertising.
What we don't collect
- Your location, unless you use one of two optional features: Location sharing, which sends your location to the people you name, and Prayer, which uses it on your device. Steps and Health never use your location. Both optional features are described below. Files or photographs you choose to upload may contain their own embedded metadata; Imshi does not use it to track you.
- Heart rate, sleep, or Apple Health categories other than step counts and the workout/active-energy data used by Santé when you explicitly enable it.
- Your contact list. Imshi never asks for contacts permission and never reads your address book.
- Advertising identifiers. We do not show ads, and we do not let anyone else use your data for ads.
Location sharing (optional)
Location sharing is off unless you accept it. It starts only after you accept a sharing request in Imshi that shows the exact people who will see your location, and nothing is collected for sharing before then. It is separate from Steps and from Prayer.
- What is collected — iOS asks for "Always" location access so sharing can continue while Imshi is closed. While sharing is on, Imshi uploads your newest position about once a minute at most: latitude, longitude, accuracy and time. Imshi requests balanced accuracy with a 75-metre movement filter. If you turn on "Share activity", Imshi also uses iOS Motion & Fitness to add walking, running, cycling or vehicle travel and speed. If you turn on "Share battery", it adds your battery level and whether you are charging.
- Where it goes — to an Imshi-operated location service on Cloudflare, kept separate from the Convex database that holds your account and steps. Your account identity is used to check who may see you. Only the people you named, and only while they have access, can see your latest position, its age and any activity or battery details you turned on. Your compass heading stays on your phone.
- History — Imshi keeps only your latest position unless you separately turn on "Share 7-day history", which is off by default. It then keeps up to seven days of positions, starting from when you enabled it. People you named see only positions recorded after they accepted. Turning history off, stopping sharing, replacing your phone or deleting your account removes the saved history.
- Places and alerts — a person who can see you may save places of their own. Those saved places are stored for that person by the location service. If they turn on Arrives or Leaves alerts for you, Imshi compares your position with their place and can send them a notification that you arrived or left. The notification names the place but contains no coordinates.
- Maps and Apple services — the Map uses Google's map renderer, so Google can see the map regions your device requests, although Imshi gives it no account identity. Opening the Map also uses your device's position in the foreground to place you on it. A viewer's device can also ask Apple Maps for street imagery and travel-time estimates for a shared position, under Apple's own terms.
- Stopping — turn sharing off from Location sharing in Settings. Imshi stops collection on your phone and asks the location service to revoke your sharing, and a stop that fails to reach the server is retried. Force-quitting the app, restarting your phone, Low Power Mode and iOS pauses can delay or stop updates, so sharing is not guaranteed to be continuous. Deleting your account also tells the location service to remove your sharing records and saved position.
Prayer times and Qibla (iOS)
In iOS versions that include Prayer, prayer times, reminders, the Home Screen widget and the Qibla direction are calculated on your device. Prayer does not require an Imshi account, and the Prayer feature does not send your location to Imshi's servers. iOS grants location permission to Imshi as a whole, so allowing it for one feature makes it available to the other; each feature uses it only as described on this page.
- Location choice — you can choose a city from Imshi's built-in list instead of using your location. Choosing "current location" asks iOS for permission while you use the app to take a one-time fix, which Imshi uses to work out the country and time zone on the device. If location is allowed, the Qibla compass also uses your location and compass heading while that screen is open.
- Optional "Always" location — if you turn on prayer alerts with current location, Imshi may offer to ask for "Always" location access. If you allow it, iOS's significant-change monitoring can wake Imshi when you have moved a significant distance, so reminders can follow you when you travel. Prayer itself does not use continuous background location, record your route or keep a history of places. You can decline or change this in iOS Settings, and prayer times will keep working for your selected city or last saved place.
- Widget — if you use current location, you can also let the Prayer widget request a one-time location from iOS when the system allows it. The widget otherwise shows the saved place.
- What stays on your device — the latest saved coordinates (or the coordinates of the city you chose), place name, country, time zone and Prayer settings are stored in storage shared by the app and widget on your device. They are replaced when you travel or choose another city, and removed when you delete the app.
- Prayer data updates — Imshi may download a public prayer-data file from an Imshi-operated Cloudflare Worker. That request contains no account, location or Prayer settings, but the server can see your IP address and ordinary request information, as with any internet request.
- Nearby masjids — if you tap "Nearby masjids", Imshi opens an Apple Maps link that includes a search for mosques and your saved coordinates (or your chosen city's coordinates). Apple handles that search under Apple's own terms and privacy practices.
Who can see what
Your step count, username, display name, and profile photo are visible to your friends — that's the point of the app. Your email and Santé health data are not shown to friends. Your location is visible only to the people you name when you accept Location sharing, not to friends in general. Optional-module content stays private except where a module explicitly offers friend visibility. In Library, accepted friends may see the non-hidden books and reading activity intended for sharing; private shelf notes, device identifiers, account IDs, and internal sync fields are never included in that friend view. We never sell data, and we never rent data.
How long we keep it
We retain your step entries and content you add while your account is active. Santé workout-energy records are automatically limited to roughly the most recent 120 days. Deleting the app does not delete your account. The in-app deletion control immediately revokes access and scrubs identifying account fields, then starts a resumable background purge of the account's steps, friendships and memberships, optional-module content, uploaded files, credentials, diagnostics, and sync/support data. Safety passes repeat after roughly 24 hours and 30 days to catch work that was already queued, after which the deletion tombstone is removed. All data is encrypted in transit.
Children
Imshi is rated 4+ but is not directed at children under 13, and we do not knowingly collect data from anyone under 13. If you believe a child has signed up, email us and we will delete the account.
Your choices
- Revoke Health access — iOS Settings → Health → Data Access & Devices → Imshi → toggle off. Imshi will continue to work, but your step number and any enabled Santé workout data will stop updating.
- Stop Location sharing — Location sharing in Settings, or iOS Settings → Privacy & Security → Location Services → Imshi. Prayer works with a built-in city when location is off.
- Disable Santé — turn Santé off in Settings to stop new workout and active-energy imports. Existing workout-energy records remain subject to the retention period above or account deletion.
- Delete your account — Settings → Delete account. Immediately revokes access and scrubs identifying account fields, then purges the account's social, Steps, Santé, Notes, Library/Reader, Movies, uploaded-file, diagnostic, notification, sync, and support records in bounded background passes. Irreversible.
- Sign out — Settings → Sign out. Clears your session on this device.
Changes to this policy
If we materially change this policy, we will note it at the top of this page with a new "last updated" date.
Contact
Questions, concerns, or data requests: imshi@alqefari.app.