Happy Islam ("we", "us", "our") operates happyislam.life, the Happy Islam web application, and its mobile app wrappers (together, the "Service"). This Privacy Policy explains what we collect, how we use it, who we share it with, and the choices you have. Happy Islam is a platform operated by AITW Authentica.

1. Information We Collect

Account information: when you sign in (email/password, Google, or Apple), we receive your email address and, where the provider supplies it, your display name.
Content you create: bookmarks, journal entries, saved radio items, tasbih counts, reading log, tafsir ratings, translation preferences, and family/invite records.
Device preferences: language, accessibility (kids mode, font size), prayer location & method, and other settings stored on your device or synced to your account.
Location (approximate and precise): only if you enable prayer times, Qibla, or "nearby mosques". Where your device supports it, we request high-accuracy GPS to give a correct Qibla bearing and accurate mosque distances; otherwise we fall back to an approximate (city-level) location. Location is resolved on your device and used to compute results — it is not stored on our servers unless you explicitly save a location.
Anonymous usage analytics (opt-out): page views, feature events, a random per-session identifier generated on your device (stored in sessionStorage), referrer, browser/OS User-Agent, and coarse path. This session identifier and User-Agent are what Google Play's Data Safety form calls "Device or other IDs" — we do not collect advertising IDs, Android IDs, IMEI, MAC addresses, or other hardware identifiers. No name, email, or account id is attached. You can turn this off in Settings → Data & privacy; the toggle applies immediately across devices.
Error diagnostics: error messages, stack traces, and technical context for reliability. Before storage, our system automatically strips emails, JWTs, bearer tokens, and other secret-shaped values.
Push notifications (mobile only): a device push token if you allow notifications for adhan reminders.

2. How We Use Information

To provide the Service (Quran, live radio, prayer times, journal, family accounts, reminders).
To authenticate you and keep your account secure.
To fix bugs, prevent abuse, and improve features.
To send transactional emails you request (password reset, sign-in confirmation).

We do not run behavioural advertising, do not sell personal information, and do not use your content to train third-party AI models.

3. Subprocessors & Third-Party Services

We rely on the following providers to operate the Service. Each processes data only as needed to deliver its function and under appropriate confidentiality obligations.

Lovable Cloud (Supabase) — hosting, authentication, database, storage (EU/US regions).
Google — Sign in with Google (email + basic profile only). We do not access Gmail, Drive, Calendar, or other Google services.
Apple — Sign in with Apple (email + name only, private-relay email supported).
ElevenLabs — text-to-speech generation for verse narration (server-to-server; no end-user PII sent).
Khaya AI / GhanaNLP — Twi and other African-language voice generation (server-to-server; no end-user PII sent).
Despia — mobile app wrapper and push-notification delivery for iOS/Android builds.
Cloudflare — CDN, DDoS protection, edge compute for assets and API endpoints.

4. Google & Apple User Data

When you sign in with Google or Apple, we only request basic identity scopes (email and, where available, name). We use this solely to create and secure your Happy Islam account. Revoke access any time from your Google or Apple account settings.

5. International Data Transfers

If you are located in the European Economic Area, the United Kingdom, or Switzerland, your data may be processed by our subprocessors in the United States or other regions. We rely on the European Commission's Standard Contractual Clauses (or equivalent UK/Swiss transfer mechanisms) with subprocessors located outside your region.

6. Retention

Account & content — kept until you delete your account.
Anonymous analytics events — 90 days, then automatically pruned.
Error diagnostics — 30 days, then automatically pruned.
Email send logs — kept for deliverability audit; PII-free.

7. Your Rights & Choices

Access & export: download JSON copies of your bookmarks and journal from Settings → Data & privacy.
Delete your account: Settings → Account → Delete account. Deletion is permanent and removes your account, bookmarks, journal, reading log, tafsir ratings, saved radio items, preferences, and invites.
Opt out of analytics: Settings → Data & privacy → toggle "Anonymous usage analytics".
Turn off notifications: disable at the OS level (iOS/Android) or from the notifications toggle in the app.
EU/UK/CA/CH residents: you also have the rights of access, rectification, restriction, portability, objection, and the right to lodge a complaint with your supervisory authority.

8. Security

Data in transit is encrypted with TLS. Database access is protected by row-level security policies scoped to your account. Server-side error diagnostics are automatically scrubbed of emails, JWTs, and bearer tokens before storage. No system is 100% secure; if you suspect a security issue, please contact us.

9. Children

The Service is not directed to children under 13. "Kids mode" is a UI simplification intended for family use under a parent's account — it does not create a separate child account. We do not knowingly collect personal information from children under 13.

10. Changes

We may update this policy. Material changes will be posted on this page with a new "Last updated" date; where required by law, we will notify you in-app or by email.

11. Contact

Data controller: AITW Authentica, operator of Happy Islam.
Email: request@aitwauthentica.com.