Privacy Policy

IlmAI ("we", "us", or "our") is an Islamic Q&A app that provides AI-powered answers to Islamic questions, a Quran reader, and a Hadith explorer. This Privacy Policy explains what information we collect, how we use it, and your rights.

By using IlmAI, you agree to the terms of this Privacy Policy.

2.1 Account Information

When you create an account, we collect:

• Email address
• Password (hashed securely via Supabase Auth — we never see your raw password)
• Profile information you optionally provide

2.2 Questions & Chat History

Questions you submit to the AI are sent to our backend (Supabase Edge Function) and forwarded to OpenRouter's API to generate a response. Your conversation history is stored on our Supabase database to allow access across devices. Chat data is also cached locally on your device.

2.3 App Settings & Preferences Stored locally only

The following are stored only on your device and are never sent to our servers:

• Selected language and madhab (Islamic school of thought)
• Text size preferences
• Last-read position in Quran and Hadith
• Daily question usage count

2.4 Quran Content

Quran text files (Arabic, English, Bengali) are downloaded from our Supabase Storage on first launch and saved to your device. These files are static Islamic texts and contain no personal data.

2.5 Subscription & Purchase Information

If you subscribe to IlmAI Pro, purchase transactions are processed by RevenueCat and the respective app store (Google Play). We do not store your payment card details.

2.6 Usage Data

We may collect anonymous usage analytics (e.g., feature usage frequency, error reports) to improve the service. This data does not identify you personally.

IlmAI uses the following third-party services, each with their own privacy policies:

Your questions are processed by OpenRouter and may be handled by the underlying AI model providers (e.g., OpenAI). Please review OpenRouter's privacy policy for details.

• Account data: Retained as long as your account is active. You may request deletion at any time.
• Chat history: Stored until you delete conversations or your account.
• Local data: Stored on your device; deleted when you uninstall the app or clear app data.
• Purchase records: Retained by RevenueCat and the app store per their policies.

We take reasonable measures to protect your data:

• All data in transit is encrypted using HTTPS / TLS.
• Supabase enforces Row Level Security (RLS) so users can only access their own data.
• Passwords are hashed and never stored in plaintext.

No method of transmission or storage is 100% secure. We cannot guarantee absolute security.

IlmAI is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your account and all associated data
• Export your data
• Withdraw consent at any time

IlmAI is a mobile app and does not use browser cookies. We do not use cross-app tracking or advertising identifiers.

We may update this Privacy Policy from time to time. When we do, we will update the Effective Date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy.