Privacy Policy

We respect your privacy and collect as little data as possible. This policy explains what we collect, why, and how you stay in control.

Data we collect

• Account: your email when you create an account, plus a pseudonymous membership number (Hudana#N). We never ask for your real name.
• In-app usage: your preferences and progress (prayer, Quran, memorization) are stored mostly on your device.
• Companion chat (Siraj): your question is sent to AI providers only to generate the answer.
• Name & goals: your name or nickname (optional) and the religious goals you choose (e.g. prayer, Quran, learning about Islam) may be used to personalize companion replies when you use AI features.
• Your in-app text: what you write in notes, reflections, du’a stories, and life situations may be sent to AI providers only if you tap a help or phrasing feature.
• Wellness questions: if you type symptoms or health information into the wellness guide, your question text may be sent to AI providers to generate general educational guidance only. It is not used for diagnosis or treatment.
• Rayhana's memory (personal and health): if you explicitly agree inside the Rayhana screen, she keeps short notes about what matters to you, in two separate categories: personal (your worries, interests and life context) and health (your conditions, symptoms, treatments and mental-health context). They are stored against your account alone, are never stored at all for people who are not signed in, and contain no dose and no medicine name. You can see all of them and delete them from inside the Rayhana screen: the personal category alone, the health category alone, or everything. Deleting removes them from our servers and stops them being used from that moment, but it cannot recall what was already sent to the AI providers. Any note unused for 400 days is deleted automatically.
• Rayhana trips and saved places: your trip card, itinerary, reminders and saved places, including coordinates you choose to save, are stored on your device. Enabling trip sync while signed in stores an account-linked copy on our servers. Place photos stay on the device and are excluded from trip sync. Saving a place records one location; it does not start background tracking.
• Location and travel search: sharing your location requires permission and sends the precise location with your chosen request to our server and AI provider. The trip card and location you share may personalize Rayhana’s answer. Structured search location uses city and time zone. You can describe a place manually instead.
• Medication cabinet: the schedule you enter, its times, time zone, course dates and notes, and separate taken records and snoozes are stored locally. Medication account sync is a separate choice and includes the schedule and taken records; snoozes stay on the device. Sharing the schedule with Rayhana requires its own clear consent: when enabled, active-medication schedule fields, including doses, times, time zone and course dates, are sent with the conversation to the AI provider. Taken records, snoozes and free notes are excluded. This cabinet is separate from Rayhana’s short memory notes.
• Reminders and offline use: reminders, the local assistant and device speech do not require an AI model call. Notifications may display a medicine name and dose, depending on your device notification settings. Offline packages and saved data are stored locally and can be deleted. The local assistant reads saved information and does not perform live searches.
• Audio: In the memorizer, we send your recording to a transcription service to check recitation, and Hudana’s checking service deletes the temporary audio file it creates after processing. Some processing providers may retain recordings for security, abuse prevention or service reliability under their retention policies and settings.
• Barcode ingredient checker: when you use it, we send only the barcode number to an open product-data provider to retrieve ingredients. Hudana does not upload camera images, and camera access is used only after you grant permission inside the feature.
• Community: posts (joy/sadness) and reactions appear under your pseudonymous handle only, are moderated by AI providers, and can be translated on request.
• AI answer reports: if you report an AI answer, the report may include the question, answer, report reason, and your note, sent by email to report@hudana.app so we can review the issue.
• Subscriptions: handled by the Apple App Store / Google Play; we never receive your card details.
• Security & anti-abuse: we read your IP address transiently for rate-limiting and abuse prevention only, and never store it raw (it is SHA-256 hashed in the community feature).

Service providers (data processors)

We use trusted providers only to run features, and we never sell your data:

• Supabase — accounts, membership and data you choose to save with your account.
• Resend — delivering account verification, sign-in and account recovery emails to your email address.
• Anthropic / OpenAI — companion answers, community moderation, and memorizer audio (fallback).
• Groq — fast speech-to-text for the memorizer and translation of community posts.
• ElevenLabs — narrating translated Quran meanings.
• Open Food Facts — retrieving product and ingredient data from a barcode when you use the ingredient checker.
• RevenueCat + app stores — subscription management.

Quran & religious content

The Quran text always stays in Arabic (Hafs); translated meanings come from established sources via QuranEnc.com (King Fahd Complex), and mushaf page images from the King Fahd Glorious Quran Printing Complex.

Deleting your data

You can request account deletion at any time from the “My membership” screen in the app. When the request succeeds, your sign-in account, membership data and account-linked cloud data in our database are deleted, including Rayhana’s personal and health memory. Deletion is permanent and cannot be undone. You can also delete Rayhana’s memory on its own — all of it, or one category — from inside the Rayhana screen, without deleting your account. If you cannot access the app, use the account deletion page or contact us.

Deletion includes community posts and replies linked to your membership. Replies under your posts are removed with those posts. If public content remains from a previously deleted account, contact us with its link or membership number if available.

After account deletion, we automatically request deletion of your RevenueCat profile and retry if the request cannot be delivered; you do not need to request this separately. Deletion in our systems may finish before the provider completes processing. For this purpose, we retain the account identifier and necessary request-tracking metadata until the provider accepts the deletion request, then remove that tracking record. Deleting your Hudana account does not cancel a store subscription; manage renewal through the Apple App Store or Google Play.

We may retain limited records for security, fraud prevention or legal obligations. These include a keyed one-way hash of the device identifier to prevent repeated welcome credit. Its link to your account is removed when the account is deleted. This record is not automatically erased by account deletion. It contains neither the raw device identifier nor conversation text.

You can remove trips or your medication cabinet using their controls and separately request deletion of their cloud copies. Turning sync off alone does not delete the account copy. An offline cloud-erasure request stays pending until connection and authentication to the same account are available; the app shows that status. Resetting the app removes local content while retaining only identifiers needed to complete pending erasure requests. Removing a conversation or device copy cannot recall data already processed by an AI provider.

Children

We do not knowingly collect personal data from children.

Contact

For any privacy question: privacy@hudana.app or support@hudana.app

We may update this policy when features or providers change, and will update the date above when we do.