Privacy Policy

Last updated: 17 October 2026

UROOJ is a personal Islamic self-improvement and reflection web app. It provides daily task tracking, challenges, a digital tasbeeh, gratitude and evening reflection journals, and optional Google Drive backup. This policy explains what the app stores and what happens when you choose Google sign-in.

Your choice: You can use UROOJ with “Continue without Google.” In that mode, app data is stored in your browser on your device. Google Drive backup only occurs after you choose to connect a Google account and approve the requested permissions.

1. Data stored on your device

UROOJ saves your tasks, check-ins, challenge progress, tasbeeh settings, reflections, meaningful stories, feedback, theme settings, and related app preferences in your browser’s local storage. This local data is not encrypted by UROOJ. Anyone who can use the same unlocked device and browser profile may be able to access it. Avoid entering information you do not want stored on that device.

2. Google account information

If you choose Google sign-in, UROOJ requests basic Google account information (such as your name, email address, and profile image when available) to identify the connected account in the app. The app keeps a small account display cache in browser storage.

3. Google Drive backup

After you authorize Google Drive access, UROOJ uses Google’s Drive API with the drive.file scope to create or update a JSON backup named urooj-data.json in your Google Drive. The backup may contain the app data described above, including journal entries and reflections. UROOJ uses the backup to restore progress on another device and to sync changes when connected.

The app is a static website and has no UROOJ-operated application server or central user database. When you connect Google, API requests are made from your browser to Google services. Google processes your account and Drive data under Google’s own terms and privacy policy. UROOJ does not sell Google user data or use it for advertising, and it does not use that data for purposes unrelated to providing the app’s sign-in and user-requested backup features.

4. Permissions and choice

Google sign-in and Drive backup are optional. You can continue without Google, sign out within UROOJ, or revoke UROOJ’s access in your Google Account’s third-party connections/security settings. Revoking access prevents future Drive operations until you authorize the app again.

5. Retention and deletion

Local data remains in your browser until you remove it or clear the browser’s site data. Signing out does not erase local app data. Drive backups remain in your Google Drive until you delete the backup file there. If local and Drive copies both exist, treat them as separate copies and delete each one you no longer want.

6. Security

UROOJ relies on your device/browser security and Google’s own account security controls. The app does not encrypt local journals or the exported JSON backup itself. Do not use a shared browser profile for private reflections, and protect any backup files you download or share.

7. Children and sensitive information

UROOJ is a general personal reflection tool, not a service designed specifically for children. Avoid recording highly sensitive personal information or other people’s confidential details.

8. Consent records

When you accept the in-app Terms & Conditions, UROOJ saves a consent ID, terms version, and acceptance timestamp in local storage on that device. This static version has no central consent database connected and does not automatically email acceptance records. You can export the local record from Settings; clearing browser/app data may remove it.

9. Changes and contact

This policy may be updated if app features or data practices change. For questions about this policy or UROOJ, contact hamzamadnipersonal@gmail.com.