Privacy Policy

Who operates AyahLight

AyahLight is developed and operated by Aislan Lander da Silva, based in Brazil. Questions about privacy can be sent to the contact address below.

Information we process

Depending on how you use the app: account identifiers and, if you provide them, your email address and display name; private journal entries you write; community posts you publish; moderation reports you send; purchase and subscription status; reading preferences stored on your device; and the technical information needed to deliver and secure the service.

Accounts and sign-in

Firebase Authentication provides a temporary anonymous account so you can start reading immediately, and optional sign-in with Google, Apple, or email and password. It processes your account identifier and, when you provide them, your email address and display name. Passwords are handled by Firebase Authentication and are never stored in journal documents or in application logs.

Journal entries and cloud data

Firebase Firestore stores private journal entries (including titles, text and mood), account profiles, community activity, moderation reports, blocked-user relationships and service-usage counters. Journal entries are private to your account and reachable through authenticated access to that account. They are not stored only on your device, and they are not end-to-end encrypted.

Community posts and moderation

When you publish in the community, your post, its selected category and your display name are visible to other community users. Posts and reports are processed for moderation, and post text is checked by OpenAI's moderation service before publication.

Please avoid posting confidential information, or information about other people without their permission.

Personalized AI Tadabbur

Personalized reflections are generated through Firebase Cloud Functions together with OpenAI. The generation request sends the selected Quran reference, a predefined theme and your requested language. Your free-text description of your day and your private journal entries are not included in that request.

If you report a generated reflection, its content, reference, language and the reporting account's identifier are stored so it can be reviewed.

Purchases and Premium

RevenueCat processes your account identifier and app-store purchase history for subscription functionality, including confirming Premium access, and for subscription and revenue reporting. Payments are handled by Apple or Google through your store account; AyahLight never receives your payment card numbers.

Quran content

Arabic Quran text can be bundled with the app for offline reading. Online Quran content and translations are requested through the app's Firebase content service, which uses Quran.Foundation.

Device preferences and technical information

Language, appearance and reading preferences are stored on your device. Firebase, RevenueCat and our other providers may process operational diagnostic information needed to deliver, secure, maintain and debug service reliability, such as timestamps, network and device or installation identifiers, error information and usage counters.

Analytics and advertising (version 1.0.0)

Version 1.0.0 of the app does not include a dedicated analytics SDK or crash-reporting product, advertising, advertising-identifier collection or behavioral tracking. RevenueCat's subscription and revenue reporting uses app-store purchase history as described above; this is not used to track your Quran reading or journal content. We do not sell your information or share it with advertisers, and that version has no scheduled reminder notifications.

Optional analytics and crash reports (version 1.1.0 and later)

From version 1.1.0, usage analytics and crash reports are two separate opt-in choices. Both are off until you turn them on, and you can change them at any time in Settings > Help improve AyahLight. Older versions of the app do not include these SDKs.

When usage analytics is enabled, Google Analytics for Firebase processes an app-instance identifier, technical app and device information, coarse country and language, your free or premium category, static screen categories, feature actions, timings and sanitized failure categories. When crash reports are enabled, Firebase Crashlytics processes an installation identifier, technical app and device information, native crash traces and sanitized application errors.

Our custom telemetry never includes your email address or account identifiers, moods, journal or community text, generated reflections, Quran references or passages, your searches, or original application error messages.

When usage analytics is enabled, the Firebase app-instance identifier is provided to RevenueCat for subscription measurement. Because it is linked to your existing billing identity, that measurement data is not anonymous.

We do not use advertising identifiers, personalized advertising, religious-interest audiences or advertising consent.

Turning an option off stops future optional collection, resets the analytics identifier and deletes crash reports that have not yet been sent. Records already collected are handled under the providers' retention and deletion procedures, and you can also contact us with a support request.

Service providers

We rely on Firebase and Google Cloud (accounts, database, cloud functions, content service), RevenueCat (subscription status), OpenAI (moderation and reflection generation), Apple and Google (distribution and payments) and Quran.Foundation (Quran content). Each provider processes information for those purposes under its own privacy policy.

Data retention

Information stored on your device remains until you delete it or uninstall the app. Cloud account data remains until you delete it or ask us to delete it, subject to the security, backup and legal retention practices of our service providers.

Deleting your data

You can delete individual journal entries and your own community posts in the app. Settings also includes account deletion, which requests removal of your Firebase identity, your cloud profile and journal data, your posts, associated reports and usage records, and your RevenueCat customer record.

You can also request deletion by writing to the contact address below, following the instructions on the account-deletion page. We may need to verify that the request comes from the account owner; we will never ask you for your password.

Deleting your account does not cancel an Apple or Google subscription — cancel it in your app-store subscription settings. Store transaction records may remain with Apple or Google under their own policies.

Age requirement

AyahLight is intended for people aged 13 and over. We do not knowingly collect information from children under 13.

International processing

Our service providers may process information on servers outside your country. AyahLight is operated from Brazil; wherever you are, you can contact us to ask about or exercise your privacy rights.

Changes to this policy

If this policy changes, the date shown on this page is updated.

Contact

Questions about this policy can be sent to the contact address below.