Privacy Policy

Last updated: May 2026

ShAIkhy is a free Islamic research tool built for the ummah. We collect the minimum data needed to operate the service and we do not sell or share your data with advertisers.

1. What we collect

  • Account data (only if you sign in): your email address, display name, and authentication provider (Google or email/password) via Firebase Authentication.
  • Conversation history (only if you sign in): the questions you ask and the answers ShAIkhy generates, stored in Google Firestore so you can revisit past research.
  • Anonymous usage signals: aggregate request counts, error rates, and latency metrics. No content of queries is included.
  • Approximate location(only if you sign in): country and city, derived from your IP address by a third-party lookup service, plus your browser's timezone and language. Your IP address itself is not stored. This tells us which regions to serve better; it is never used to identify you personally.
  • How you found us: the referring site or campaign parameter from your first visit (for example, arriving from a search engine or an AI assistant), and the page you landed on.
  • Your survey answers, if you choose to answer the two optional onboarding questions (how you found ShAIkhy, and how you describe yourself). You may skip them, and skipping changes nothing about the service.
  • Feedback you submit: your rating of an answer and any comment you write, linked to your account so we can follow up on reports of inaccuracy.

2. What we do NOT collect

  • Behavioral profiles for advertising.
  • Sensitive personal identifiers beyond what Firebase Auth requires.
  • Your IP address in any human-readable log line. Rate-limit bucketing uses ephemeral hashes.

3. Where data lives

  • Firebase Authentication and Firestore — Google Cloud (EU region).
  • Search backend — Render (Frankfurt) + Qdrant Cloud (EU region).
  • Error reporting (if enabled) — Sentry, with request bodies redacted.

4. Third-party model providers

Your question text is sent to upstream model providers (currently Google for the answer LLM, OpenRouter for embeddings, and SiliconFlow for reranking) to produce an answer. These providers process your query under their own privacy terms. We pass no account identifiers to them.

5. Your rights

  • Delete your account and conversation history at any time from the app settings. Deletion is permanent within 30 days.
  • Export your conversation history by request to [email protected].
  • EU/UK users: GDPR rights of access, rectification, erasure, and objection apply. Same email.

6. Children

ShAIkhy is intended for users 13 years or older. We do not knowingly collect data from children under 13.

7. Changes

We will update this page when our practices change and post the new effective date at the top. Material changes will be announced in-app.

8. Contact

Questions: [email protected].