Privacy

What is stored

Your email address, because sign-in is by emailed link and there is no password to hold instead.

Your saved conversations — the questions you ask and the answers returned — unless the conversation was in incognito, which is described below.

Whatever you record in the modules: prayers marked as prayed, missed prayers in the qada ledger, Qur'an bookmarks and reading position, fasts, and zakat calculations you choose to save.

Your settings: locale, city or coordinates for prayer times, calculation method, and madhhab.

Page views are counted, so that it is possible to know whether anything here is being used. That counting sets no cookie, assigns you no identifier, and follows you nowhere else; it records that a page was requested, not who requested it, and it can see nothing about your account or your worship records.

Beyond that: no advertising identifiers, no tracking pixels, no profile built for marketing, and nothing sold. The only cookies set are the ones that keep you signed in.

Who else sees it

Sahn cannot answer without sending your message somewhere. Naming those places is the point of this section.

Anthropic receives the text of a message you send to the assistant, in order to classify it and to write the answer. Voyage AI receives the text of messages with an Islamic dimension, and of verse searches, in order to convert them into the numerical form retrieval needs. Supabase stores the database and runs authentication. Vercel hosts the site, processes the requests, and counts page views as described above. Resend delivers the sign-in email. Quran.com supplies verse text and translations, and a market data provider supplies gold and silver prices for zakat.

They are given what they need to perform that function and nothing further. Your data is not sold, and it is not shared with anyone for advertising.

Incognito

A conversation marked incognito creates no thread and stores no messages. It is not a display setting: the server discards the thread reference rather than trusting the browser not to send one, so there is nothing for a later change of mind to expose.

The message is still sent to Anthropic to be answered — it has to be — but nothing about it is written to the database, and it will not appear in your history on any device.

Who can read your records

Every table holding personal data is protected at the database level by row-level security, and the policies deny by default: a query for a row that is not yours returns nothing, regardless of what the application asks for. This is enforced by the database rather than by the code, so a mistake in the application cannot open it.

The Qur'an text, the hadith collection and the du'a library are public reference material and are readable by anyone. Your worship records, settings and conversations are not.

How long it is kept

Until you remove it. Individual conversations can be deleted from the sidebar. Deleting your account removes everything at once: the account itself and every record attached to it, by cascade in the database rather than by a script that might miss a table.

Deletion is immediate and cannot be undone. Export first if you want a copy — the account page produces a complete JSON file of everything held about you.

Your rights

Under UK and EU data protection law you may ask for a copy of your data, ask for it to be corrected, ask for it to be erased, and object to how it is handled. The first and third are built into the account page so you do not have to ask anyone.

For anything else, or to complain, write to privacy@sahn-ai.com. If you are in the UK and are not satisfied with the response, you may complain to the Information Commissioner's Office.