1. Introduction
Welcome to IslamGPT. This privacy policy explains what personal data we collect when you use the app, why we collect it, who receives it, how long we keep it, and what choices you have. By using the app you accept this policy.
IslamGPT is run by an independent developer, who is the controller of your data. Contact details are in section 13.
2. Information We Collect
• Chat Messages: your Islamic questions and the AI’s answers. They are sent to our server and stored there (see section 7), linked to a random session ID, not to your name or email address
• Usage Counters: how many messages you sent today, the app version, and a random app user ID created by our subscription provider RevenueCat, used to apply the free daily limit
• Subscription Information: purchases are handled by Apple or Google and RevenueCat. We never see your payment card details
• Technical Information: app version, platform, chosen language, and the IP address of your requests, used for security and to prevent abuse
• Notification Settings: if you allow daily-question notifications, your device subscribes to a topic made of religion, language and preferred hour. We do not store your device token
• Feedback (optional): the text you submit, your app user ID and, if you choose to add it, your email address (used only to reply to you) are forwarded to our team through a messaging service
• Voice Input (optional): When you tap the microphone, your device's speech recognition service (Apple on iOS, Google on Android) turns your speech into text and may send the audio to that provider to do so. We never receive or store the audio, only the resulting text, which is sent as your question
• Analytics and Measurement: analytics, crash reports and advertising identifiers, which you can turn off (see section 8)
We do not ask for your name, email address, phone number, contacts or precise location.
3. Sensitive Information: Religious Beliefs
Questions about faith can reveal your religious or philosophical beliefs and practices. Many laws, including the GDPR and Turkey’s KVKK, treat this as sensitive data.
• We process your questions only to write answers for you. By sending a question you give your explicit consent to this
• If you do not agree, please do not use the chat
• You can withdraw your consent at any time with Menu → Privacy & data → Delete my data, and by no longer using the app
• We do not use your questions for advertising and we do not share them with advertisers
4. How We Use Information
• Writing answers to your Islamic questions (to provide the service, and on the basis of your consent for sensitive data)
• Applying the free daily message limit, keeping the service secure and preventing abuse (our legitimate interests)
• Finding weak answers, using the thumbs up or down you give, and fixing technical problems (our legitimate interests)
• Understanding which campaigns bring new users, and measuring crashes and usage, unless you turn it off (our legitimate interests)
• Answering your feedback and requests, and meeting legal obligations
We do not sell your personal data.
5. Who We Share Data With
We use the following service providers, who process data on our behalf or for their own stated purposes:
• Google Gemini API (Google): receives your questions to generate answers and to find relevant sources
• Google Cloud and Supabase: host our servers and database
• Firebase (Google): delivers notifications; provides analytics and crash reports unless you turn them off
• RevenueCat: manages subscriptions and receives advertising identifiers unless you turn measurement off
• Apple and Google: process purchases and, for voice input, speech recognition
• A team messaging service (such as Telegram, Slack or Discord): receives feedback you choose to send
• Advertising platforms (such as Google Ads, Meta and Apple Search Ads): unless you turned measurement off, they may receive advertising identifiers through RevenueCat so we can measure campaigns. They never receive your chats
• Authorities, where the law requires it
These providers have their own privacy policies.
6. Data Security
• Data is transmitted over encrypted connections
• Requests from the app are signed and our secrets are stored securely
• Access to servers and databases is restricted
• Security updates are applied regularly
No system is perfectly secure, so we cannot guarantee absolute security.
7. Data Retention and Deletion
• On your device: chats stay until you delete them or uninstall the app
• On our server: chats are deleted automatically 90 days after the last message in that conversation
• Usage counters: kept for up to 13 months
• Feedback: kept while we handle it, and deleted on request
• Analytics and crash data: kept by Google for a limited period set in Firebase
• Purchase records: kept by Apple, Google and RevenueCat as long as the law requires
You can delete your data at any time: Menu → Privacy & data → Delete my data erases your chats from your device and from our server and resets your analytics ID. You can also email us, and we will respond within 30 days.
8. Analytics, Advertising Identifiers and Tracking
This is on by default. You can turn it off at any time in Menu → Privacy & data.
While it is on, we collect:
• Firebase Analytics: screens viewed and events such as messages sent, with your language, religion and subscription status. Never the text of your messages
• Firebase Crashlytics: crash reports
• Advertising measurement: advertising identifiers (on iOS the IDFA only if you allow it in the system tracking prompt, plus the IDFV; on Android the advertising ID or Android ID where available), your IP address, the Apple Search Ads attribution token and the Google Play install referrer, sent through RevenueCat
If you turn it off, none of this is collected from then on and the app works the same. We do not use cookies in the app, and this website does not use tracking cookies.
9. International Transfers
Our providers may process data in countries other than yours, including the United States. Where the law requires it, we rely on safeguards such as the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.
10. Your Rights
Depending on where you live, you may have the right to:
• Access your data
• Correct your data
• Delete your data
• Restrict or object to processing
• Receive your data in a portable format
• Withdraw your consent at any time
• Complain to your data protection authority (for example your national authority in the EU, the ICO in the UK or the KVKK Board in Turkey)
Residents of California and similar states may also ask what we collect, ask us to delete or correct it, and will not be treated differently for doing so. We do not sell personal information.
Because chats are tied to random IDs and not to your name, we may need the ID from your device to find them. The in-app Delete my data action does this automatically. We respond to requests within 30 days.
11. Children's Privacy
Our app is not directed to children under 13, and where the law sets a higher age of digital consent (up to 16 in some countries) it is not for children below that age without parental consent. If we learn that we have collected information from a child below that age, we will delete it.
12. Policy Changes
We may update this privacy policy from time to time. The date at the top shows the latest version. If a change significantly affects how we use your data, we will tell you in the app and ask for your consent again where the law requires it.
13. Contact
For questions, or to exercise your rights:
• Email: emregecit5@gmail.com