Privacy Policy
1. Who we are
Islam AI is provided by Cognify AI Ltd ("we", "us"), a company in the United Kingdom. We are the controller of the personal data described here. You can reach us at support@islam-app.co.uk.
2. Summary
- You can use most of Islam AI without an account. An account (Sign in with Apple or Google) is needed for PRO and to sync your progress between devices. Email sign-in is only for accounts we create ourselves, such as for app-store reviewers; there is no public email sign-up.
- Your chat history, prayer log, bookmarks and most settings are kept on your phone. To improve the answers, our server keeps a copy of each question and AI answer for up to 90 days, linked to a random app ID rather than your name or account (see section 5).
- To answer your questions, the text you send to AI features is processed by our server and by our AI provider. We do not use it to train AI models, and we do not sell your data or use it for advertising.
- There are no advertising or third-party analytics SDKs in the app.
- You can delete your account at any time from inside the app.
3. What we collect and why
| Information | When | Why |
|---|---|---|
| Account details: your Apple or Google account identifier, email address (for Apple this may be a private relay address), and the display name the provider gives us. For email accounts we create (such as for app reviewers): the email address and a secure one-way hash of the password, never the password itself | Only if you sign in | To create and secure your account, restore PRO across devices and sync your data |
| Session and device label: a sign-in token (we store only a secure hash of it) and a label such as "Pixel 8, Android 14" | When signed in | To keep you signed in and let you recognise your devices |
| Synced app data: lesson and review progress, saved tafsir, your learner profile (level, goals and, if you enter it, age), conversations with the Arabic tutor, and saved "memory" notes | Only when signed in | So your progress follows you to another device. Stored as part of your account |
| Your messages and the AI's replies | When you use an AI feature | To generate the answer (see section 5) |
| Answer records: your latest question and the AI's answer (email addresses and phone numbers are masked before saving), the sources it found and cited, the feature, language, app version and platform, timings, cost and errors, and whether you copied the answer, reported it or opened a source card. Linked to a random app ID and the conversation it belongs to, not to your name or account (if you report an answer while signed in, that report is linked to your account as described below). Helper requests the app makes in the background, such as summarising a long conversation, are recorded without their text. We store a one-way hash of your IP address, not the address itself | When you use chat, Daleel, live translation or tafsir | To check and improve answer quality and the source search, find errors, and understand costs |
| Your age (worked out on your phone from the date of birth you enter in setup — the date itself stays on your phone) | Sent with AI requests | So answers for younger users are kept simple and suitable |
| Video links you ask Daleel to check | When you use Daleel with a link | Our server fetches the audio (up to 2 minutes), transcribes it, then deletes the audio |
| App usage events, linked to a random app ID rather than your name or account: which features are used, app version, and for Daleel checks and failed AI requests, the first 300 characters of the question. We store a one-way hash of your IP address, not the address itself | While you use the app | To find errors and understand which features are useful |
| Technical logs on our server (time, request type, error codes, account ID for signed-in requests) | When the app talks to our server | To run, secure and fix the service and prevent abuse (for example rate limits) |
| Purchase status (whether you have PRO, trial status, renewal date) | If you subscribe | To unlock PRO features |
| Answers you report: the AI answer you flag, the question it answered, the reason you pick, the app language and version, and your account ID if you are signed in (otherwise a one-way hash of your IP address) | Only if you tap Report on an answer | To review and fix wrong or harmful answers |
| Messages you send us | If you email us | To reply and help you |
4. Data that stays on your phone
The following is stored only on your device unless noted, and is removed if you uninstall the app:
- Chat history and conversation titles
- Your date of birth (only the resulting age is sent with AI requests)
- Your location and prayer settings, cached prayer times, prayer log, reflections and focus records
- Qur'an bookmarks, highlights, reading position and downloaded recitation audio
- "Memory" notes — short facts the app remembers to personalise answers, such as your preferred madhhab or a goal you mentioned. They are sent with your chat requests so the AI can use them, and synced to your account if you sign in. You can view, delete or switch off memory in Settings → Memory.
- GazeGuard settings
On Android, the system may include app data in your device backup, depending on your phone's backup settings.
5. AI features
Ask Islam AI, Daleel, the Arabic tutor and lessons, tafsir, prayer insights, live sermon translation and memory are powered by large language models. When you use them, your request — your message, the recent conversation needed for context, the language you use, your age as described above, and your memory notes if memory is on — is sent to our server and then to our AI provider to produce the reply. Our server also looks up Qur'an and hadith text so the answer can cite its sources.
- We send our AI provider only what is needed for the request. It processes it as our service provider and, under its terms, does not use it to train its models. It may keep request data for a limited period for abuse monitoring.
- Our server keeps a record of each answer (the question, the answer, the sources and how it was produced) for up to 90 days so we can check and improve the answers and the source search. After 90 days the question and answer text is deleted and only statistics remain (for example how long it took and which sources were cited), which are deleted after 13 months. These records are linked to a random app ID, not your account.
- Do not include sensitive personal information about yourself or others in your messages unless you are comfortable with it being processed this way.
- AI answers can be wrong or incomplete. They are for learning and reflection and are not a fatwa or a substitute for a qualified scholar. See our Terms.
6. Services we use
| Service | What it receives | Purpose |
|---|---|---|
| AI provider | AI requests as described in section 5; audio from video links for transcription; text for text-to-speech | Answers, transcription, speech |
| Apple / Google sign-in | Your sign-in with them | Account sign-in |
| RevenueCat | Purchase receipts and an app user ID (your account ID if signed in, otherwise an anonymous ID) | Managing subscriptions |
| Apple App Store / Google Play | Payment and subscription details (we never see your card details) | Payments and refunds |
| Al-Adhan prayer times API (aladhan.com) | Your coordinates or the city you choose, and your calculation method | Calculating prayer times |
| Al Quran Cloud API (alquran.cloud) | Requests for Qur'an text | Qur'an text in some learning screens |
| Qur'an audio servers (quran.com, quranicaudio.com and our own server) | Requests for recitation files | Streaming and downloading recitations |
| Your phone's speech recognition (Apple or Google) | Your voice, when you use voice input or live translation | Turning speech into text. Depending on your phone, this may be processed on the device or by Apple or Google under their own privacy policies |
| Google Play Integrity (Android, GazeGuard only) | A device-integrity check | Protecting the GazeGuard model download |
We do not sell or rent your personal data, and we do not share it for advertising.
7. Phone permissions
- Location — to calculate prayer times and the Qibla direction. Your location is sent to the prayer-times service above, not to our server. You can instead enter a city manually.
- Notifications — prayer reminders. These are scheduled on your phone; we do not use push notifications or a push token.
- Exact alarms (Android) — so prayer reminders arrive on time.
- Microphone and speech recognition — voice questions and live sermon translation, only while you are using them.
- Screen capture, display over other apps and accessibility (Android, GazeGuard only) — see section 8.
You can change any permission in your phone's settings at any time.
8. GazeGuard (Android)
GazeGuard blurs images of people on your screen. To do this it uses Android's screen-capture and accessibility features while it is switched on.
- Screen images are analysed entirely on your phone by an on-device model. They are not recorded, stored or sent anywhere.
- The accessibility service is used only to know which app is in front (so GazeGuard can apply your per-app choices), to take snapshots of that app's windows so the blur itself is not mistaken for content, and to draw the blur on top. These snapshots are analysed on your phone in the same way and are never recorded, stored or sent anywhere.
- Before the accessibility setting opens, the app explains what it is used for and asks you to agree. You can switch GazeGuard, its accessibility service or screen capture off at any time.
- To download the detection model, GazeGuard needs you to be signed in and runs a Google Play Integrity check. Our server records the download for fair-use limits.
9. Subscriptions
PRO is sold as an auto-renewing subscription through the App Store or Google Play, which handle payment. We receive your subscription status (active, trial, renewal or expiry), not your payment details. Refunds are handled by Apple or Google under their policies.
10. Legal bases (UK GDPR)
- Contract — to provide the app and the features you choose to use, including accounts, sync, AI answers and PRO.
- Legitimate interests — to keep the service secure and working, prevent abuse, and improve features using the usage events in section 3, and to check and improve answer quality and the source search using the answer records in section 5.
- Consent — for phone permissions such as location and microphone, which you can withdraw at any time in your settings.
- Legal obligation — where the law requires us to keep or disclose information.
Your messages may reveal your religious beliefs. We process them only to provide the features you ask for, at your request.
11. How long we keep data
- Account and synced data — until you delete your account.
- Sign-in sessions — they expire after 90 days without renewal and end when you sign out.
- Answer records — question and answer text up to 90 days, statistics up to 13 months, then deleted. Video audio is deleted straight after transcription.
- Reported answers — kept for up to 12 months for review, then deleted.
- Usage events and technical logs — kept only as long as needed to run and improve the service, then deleted. Usage events are not linked to your account.
- Purchase records — as long as needed for accounting and legal purposes.
12. Your rights and deleting your data
Delete your account in the app: Settings → Account → Delete account. This permanently deletes your account, your sessions and your synced data from our server, and clears your account data from the phone. Deleting your account in the app also deletes the answer records from that phone. Deleting your account does not cancel a subscription — cancel it in your App Store or Google Play settings. Usage events, which are not linked to your account, are not affected.
Data kept only on your phone (such as your prayer log and location) is removed when you uninstall the app.
Under UK and EU data-protection law you have the right to access, correct, delete or receive a copy of your personal data, to object to or restrict certain processing, and to withdraw consent. To use these rights, email support@islam-app.co.uk. You can also complain to the UK Information Commissioner's Office (ico.org.uk) or your local data-protection authority.
13. Children
Islam AI is not directed at children under 13, and children under 13 should use it only with a parent or guardian. During setup we ask for a date of birth so that answers for younger users are kept simple and suitable; the date stays on the phone. If you believe a child under 13 has given us personal data without consent, contact us and we will delete it.
14. Security and international transfers
All connections between the app and our server use encryption (HTTPS/TLS), and we store sign-in tokens only as secure hashes. No system is completely secure, but we work to protect your data.
Some of our providers, including our AI provider and RevenueCat, are based in the United States. Where your data is transferred outside the UK, we rely on appropriate safeguards such as the UK International Data Transfer Addendum or the UK–US data bridge.
15. Changes
We may update this policy as the app changes. We will change the effective date above, and tell you in the app if a change is significant.
16. Contact
Cognify AI Ltd · support@islam-app.co.uk · islam-app.co.uk