Privacy Policy
1. Who We Are
Hidaya is an AI-assisted Islamic education and daily-practice app. This policy explains the data the service processes, why it is used, and the controls available to you.
Hidaya does not sell personal data, display third-party advertising, or track you across other companies' apps or websites.
2. What We Collect
- Account identifiers — an internal user ID and authentication-provider ID
- Name and email — provided by you or, when authorized, by Apple or Google
- Profile information — school-of-thought preference, optional age range, and optional region. Religious preference is treated as sensitive information
- User content — questions, saved AI responses, and feedback you choose to submit
- AI usage data — question counts, provider and model, token counts, estimated processing cost, response time, success or failure status, and app version/build/platform. These usage records do not contain question or AI response text
- Purchase history — subscription product, entitlement, transaction state, and expiration. Apple processes payment details; Hidaya and RevenueCat receive purchase status, not full card information
- Diagnostics — crash and performance information only when production error reporting is enabled; default PII collection is disabled
Location is requested for prayer times and Qibla direction. Coordinates are processed on the device and are not stored in Hidaya's backend. The operating system's location and reverse-geocoding services may process the location to provide coordinates and a city label. Bookmarks, notification preferences, and the dhikr counter are stored locally on the device.
3. How We Use Your Data
- To authenticate accounts and keep them secure
- To personalize Islamic educational responses using selected profile settings
- To generate AI responses and provide conversation history
- To enforce usage limits, monitor AI reliability, and manage service costs
- To provide, restore, and manage Hidaya Plus subscriptions
- To calculate prayer times and Qibla direction on the device
- To respond to feedback and maintain service reliability
We do not use personal data for advertising or cross-app tracking.
4. Third-Party Services
| Service | Purpose | Privacy Policy |
|---|---|---|
| Supabase | Authentication and database | supabase.com/privacy |
| OpenAI / Anthropic | AI responses (your questions are processed by their APIs) | openai.com/privacy / anthropic.com/privacy |
| Sentry | Crash reporting | sentry.io/privacy |
| Apple / Google Sign-In | Optional authentication | policies.google.com/privacy |
| RevenueCat | Subscription purchase, entitlement, restore, and lifecycle management when Hidaya Plus is offered | revenuecat.com/privacy |
Before the first AI question from each signed-in account, Hidaya asks for explicit permission to send the question, recent conversation context, and profile preferences (school of thought and, if provided, age range and region) to OpenAI or Anthropic. Hidaya does not send a new AI question when permission has not been given or has been withdrawn.
5. Data Retention
Profile data, conversation history, and user-linked AI usage records remain until you delete the account. Clearing conversation history removes the conversation but does not remove content-free AI usage records used for limits, reliability, and cost management. User-linked feedback is deleted with the account. Provider backup copies may remain temporarily under the provider's documented backup retention process.
Use Settings → Delete All My Data to delete the Hidaya account, active database records, conversation history, linked feedback, and AI usage records. Local Hidaya storage is also cleared. For Sign in with Apple accounts, Hidaya revokes the Apple authorization grant.
6. Your Rights
You can at any time:
- Delete all your data from within the app (Settings → Delete All My Data)
- Clear your conversation history (Settings → Clear History)
- Use the app as a guest and decline location or notification permission
- Leave optional age range and region blank
- Decline or withdraw AI-processing permission in Settings → AI question processing. No new questions are sent to OpenAI or Anthropic after withdrawal unless you give permission again. Use Clear History or Delete All My Data to erase existing conversation history
- Contact us to request access to or correction of account data
7. Children
Hidaya is not directed to children under 13. People under 13 may not use the service, and we do not knowingly collect their personal data.
8. Changes to This Policy
We may update this policy. Continued use of the app after changes constitutes acceptance. The "last updated" date at the top will always reflect the most recent version.
9. Contact
Questions? Contact us at: hidayaofficialapp@gmail.com
← Return to Hidaya