Sukoon — Privacy Policy

Last Updated: August 28, 2026

1) Scope

This Privacy Policy applies to the Sukoon iOS app and related in-app services, which we refer to as the “Service.” It explains what we collect, how we use it, how we share it, and the choices you have. The Service is provided by NUNE LLC, a Wyoming limited liability company.

2) The Short Version of How Sukoon Is Built

Sukoon is designed so that the sensitive parts of your life with your phone stay on your phone. Three points are worth stating up front because they drive everything else in this Policy:

• We do not run a server that holds your content. Sukoon has no account system and no database of users. Your journey progress, trail notes, prayer records, Qur'an bookmarks, reading history, and settings are stored locally on your device (including in a shared app group used by Sukoon's Screen Time extensions).
• Family sharing runs on your iCloud, not ours. When a parent and a child pair their devices, Sukoon uses Apple CloudKit private-database zones and zone shares inside the account holder's own iCloud storage. NUNE LLC is not a participant in those shares and has no ability to read, copy, or recover that data.
• We cannot see which apps you lock, or how you use them. Apple's Screen Time and Family Controls frameworks hand Sukoon opaque, non-reversible tokens for the apps and categories you select. Those tokens are meaningless outside your device, they are never transmitted, and Sukoon receives no app-usage statistics, browsing history, or app names from them.

3) Data That Stays On Your Device

The following is created and stored locally by Sukoon. It is not transmitted to NUNE LLC:

• Your prayer-time setup: Sukoon does not ask for your location and does not use location services at all. Instead it reads your device's time zone and looks that identifier up in a table bundled inside the app to get a reference coordinate, a calculation method, and an Asr rule. That lookup happens entirely on your device against local data — no network request, no permission prompt, and no coordinate of yours is ever measured, stored, or transmitted.
• Your app selections for Screen Time: The apps and categories you choose to rest during prayer, as opaque Apple tokens described in Section 2.
• Your journey and habit data: Day-by-day trail progress, completed prayer steps, prayer-pause records, and daily task state.
• Your written notes: Anything you type into trail notes.
• Your Qur'an activity: Bookmarks, last-read position, and reading-session timing (when a session started and how many seconds of active reading it contained). The Qur'an text and fonts are bundled inside the app; reading the Qur'an in Sukoon makes no network request and reveals nothing about what you read.
• Your preferences: Reminder and haptic settings, calculation method, language, onboarding answers about your goals, and similar in-app choices.
• Small identity values in the iOS Keychain: Sukoon stores its own identifiers — such as whether this device is set up as a parent, a child, or an individual, and its pairing identifier — in the Keychain so the app's role survives a delete and reinstall. These are randomly generated values, not personal details.

4) Family Pairing and What Flows Through Your iCloud

Sukoon's family features let a parent and a child follow each other's prayer and reading progress and let a child ask for a temporary unlock. This is built entirely on Apple CloudKit inside the participants' own iCloud accounts.

How pairing works. The parent's device creates a private CloudKit zone and a read-only zone share, and displays the resulting share link as a QR code. The child scans it with the camera — the camera is used only to read pairing QR codes and for nothing else — and the child's device then creates its own progress zone and share, which the parent scans in return. The share link itself acts as the credential and is exchanged in person, which is why Sukoon asks you to pair while you are together. Each child has separate zones and links, so nothing is visible across siblings.

What the paired devices exchange. Depending on the direction of the share:

• From parent to child: the policy you set — which prayers lock, how many minutes before the adhan, lock duration, any daily budget, whether app removal is blocked, whether Qur'an reading is required and for how long — plus the child's display name as you entered it, one-off commands (such as a lock or an unlock grant), unlock grants with an expiry, family roster entries, and your family subscription's expiry date.
• From child to parent: prayer completions (which prayer, on which day, at what time), Qur'an reading sessions (start time and number of seconds), reading confirmations, unlock requests including the free-text reason the child writes, acknowledgements that a command was applied, and a device-status record that reports how many apps were chosen to rest — never which ones.
• Roster information for the family circle: each member's display name, role, chosen avatar symbol and colour, and whether they share progress.

Who can see it. Only the paired devices. This data lives in the account holder's private CloudKit database and is shared read-only with the other device. NUNE LLC operates no server in this path and holds no key, no copy, and no access. Apple's handling of iCloud data is governed by the Apple Privacy Policy.

Names. The names in Sukoon are whatever a parent or member types — a first name or a nickname is enough, and we encourage families to use one. Sukoon never asks for a full legal name, a date of birth, an email address, or a phone number.

5) Data We and Our Providers Do Process

A small amount of information does leave your device, to three parties:

• Subscription data (RevenueCat and Apple): An anonymous, randomly generated app-user identifier, your subscription and entitlement status, product identifiers, and purchase and renewal events. This is what lets Sukoon know whether a family's subscription is active. Apple processes the payment itself; we never see your payment card, billing address, or Apple Account credentials.
• Analytics and crash reports (PostHog): Anonymous product-analytics events — screen views, app lifecycle events such as launches, and a property recording which mode the app is in (parent, child, individual, or onboarding) — together with technical information such as device model, operating system version, app version, and crash and error reports including stack traces. PostHog also observes the IP address of the request, which can indicate an approximate city-level region.
• Notification delivery (Apple): To keep paired devices current, Sukoon registers for Apple Push Notification service and receives silent pushes from CloudKit. Notification content itself is generated on your device by the app; we do not operate a push server and do not see notification text.
• Support communications: If you email us, we process your email address and your message so that we can reply.

What our analytics never receives: your trail notes, unlock-request text, the names of family members, your Qur'an bookmarks or the passages you read, and the identity of the apps you lock. Sukoon does not send that information off the device.

6) How We Use Data

We use data to:

• calculate prayer times for your location and run prayer-time app shielding on your device;
• synchronise policies, requests, and progress between the devices in a paired family;
• process subscriptions and confirm entitlement to paid features through Apple and RevenueCat;
• operate, secure, debug, and improve the Service;
• detect crashes, errors, and performance problems;
• understand, in aggregate, which parts of the app are used so we can improve them;
• respond to support requests; and
• comply with law and enforce our Terms.

We do not use your data for advertising, for profiling, or for automated decisions that produce legal or similarly significant effects.

7) Service Providers and Data Sharing

We share data only as needed to provide and support the Service:

• Apple Inc.: Provides iCloud and CloudKit (which carry family-pairing data inside your own account), the App Store and in-app purchase billing, Screen Time and Family Controls, and push notification delivery. See the Apple Privacy Policy.
• RevenueCat, Inc.: Processes anonymous app identifiers, subscription status, entitlements, and purchase events to manage subscriptions. See the RevenueCat Privacy Policy.
• PostHog, Inc.: Processes app usage events, lifecycle events, crash and error reports, and associated technical information for product analytics and error monitoring. See the PostHog Privacy Policy.

We select and require service providers that maintain privacy and security protections that are the same as or equivalent to the protections described in this Policy and required by applicable law. Providers may use subprocessors under their applicable terms. We do not sell or rent personal data, and we do not disclose personal data for cross-context behavioural advertising.

8) Analytics, Advertising, and Tracking

Sukoon contains no advertising and no advertising SDKs. It does not use any marketing-attribution or ad-network service, does not build advertising profiles, and does not track you across apps or websites owned by other companies. Because Sukoon does not carry out that kind of tracking, it does not present Apple's App Tracking Transparency prompt.

9) Children and Families

Sukoon is a family app, and one of its two roles is meant to be used by a child on the child's own device. We have designed that role to gather as little as possible.

• A parent sets it up. The child role is intended to be configured by a parent or legal guardian, in person, through the pairing flow. Setting up a child device also requires Apple's own Screen Time child authorisation, which Apple gates behind the family organiser.
• What a child provides. A display name (a first name or nickname), an avatar symbol and colour, and — if they choose to ask for extra time — the reason text they type. Prayer completions and Qur'an reading time are recorded as part of the feature the family opted into.
• Where it goes. To the paired parent device, through the family's own iCloud, as described in Section 4. It does not come to us.
• No advertising or profiling. We do not serve ads to children, do not build profiles of children, and do not sell or share children's personal information.
• Purchases. Subscriptions are purchased by the adult who owns the paying Apple Account; the app does not ask a child to buy anything.

Sukoon is not directed to children for independent download and use, and we do not knowingly collect personal information from a child other than through a parent-configured pairing as described above. A parent or guardian may review what their family's setup contains, stop the sharing at any time by unpairing, and contact us at contact@nunellc.com with any question or request about a child's information. If we learn that we have received a child's personal information without the required parental involvement, we will delete it.

10) Retention and Deletion

• On-device data: Kept until you delete it in the app or delete the app. Deleting Sukoon removes its local data, including your journey progress, notes, bookmarks, and Screen Time selections. A small number of Keychain identity values may persist after deletion by design so that a reinstalled app remembers its role; you can clear these by contacting us or by removing the app's Keychain items through iOS.
• Family data in iCloud: Kept in the participants' iCloud accounts until removed. Unpairing removes the shared zones and the data in them. You can also manage app data through Settings → your name → iCloud on your device.
• Subscription records: RevenueCat and Apple retain purchase and entitlement records under their own terms and for as long as needed to service purchases, prevent duplicate or fraudulent charges, and meet tax and accounting obligations.
• Analytics and crash data: Retained by PostHog according to its terms and our configured retention period, and used in aggregate.

You may contact us at contact@nunellc.com to request access to, correction of, or deletion of personal data we can reasonably identify. Because Sukoon uses anonymous identifiers rather than named accounts, we may need additional information to locate the relevant records, and for data held only on your device or in your iCloud we can tell you how to remove it but cannot reach it ourselves.

11) Security and International Processing

We use reasonable administrative, technical, and organizational safeguards designed to protect personal data, including encrypted network connections, Apple's CloudKit access controls, the iOS Keychain for identity values, and read-only scoping of family shares. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Our providers may process data in the United States and other countries where they or their subprocessors operate. Those countries may have privacy laws different from those in your location. Where required, providers rely on recognized transfer mechanisms and contractual protections.

12) Your Privacy Rights

Depending on your location, you may have rights to request access, deletion, correction, portability, restriction, objection, or withdrawal of consent, and the right not to be discriminated against for exercising them. To exercise rights, contact us at contact@nunellc.com. You can also withdraw specific permissions at any time in iOS Settings — camera, notifications, and Screen Time — and Sukoon will continue to work with the affected features turned off.

13) Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If changes are material, we will notify you by reasonable means, such as through the app or by updating the “Last Updated” date.

Contact Sukoon

Email: contact@nunellc.com

© 2026 Sukoon. All rights reserved.