Privacy Policy

1. Controller and contact

The controller for the Ayeta app is (address: ). For any privacy or data protection request, contact . Requests under the EU General Data Protection Regulation (GDPR) and the Turkish Personal Data Protection Law No. 6698 (KVKK) can be sent to this address.

2. What Ayeta is, and what it is not

Ayeta is an app that answers your questions with verses of the Quran and offers tools to read and listen to the Mushaf, memorize, see prayer times, find the qibla, follow the Hijri calendar, count dhikr and complete a khatm. The Arabic text, translations and recitation audio always come from verified sources; the AI never writes verse text or translations. It only selects suitable verses and writes short explanations based on the commentary sources it is given.

Ayeta does not issue fatwas and is not a scholar or a religious authority. For questions that require a ruling, it shows the relevant verses and suggests that you consult your local mufti or a scholar you trust.

3. What data we process

Account data: your name (optional), interface language, chosen translation and reciter, your tradition/school preference (optional; "not sure" is an option), your intentions (for example "understand the Quran"), country and time zone, a random device identifier created by the app; if you link Apple or Google, the user identifier and email address that provider gives us. We do not store passwords.

Your questions and answers: the questions you type or speak, answer summaries and the verses selected, and your feedback. Question and answer texts are stored encrypted with a key unique to your account. If you choose "private question", it is not saved to your history or to memory.

Your personal usage data: bookmarks and folders, your verse notes (encrypted), where you left off, your reading log and streak, your khatm plan, group khatms you join, your prayer and fasting marks, missed-prayer counters, dhikr counts, your memorization list and review schedule.

Memory (premium, optional): life context drawn from your questions (for example "exam stress", "recently married") is stored only if you approve it, is encrypted, and is used only to make the verse of the day and the single personal sentence in an answer fit you. You can view, correct or delete it, or pause memory, on the "What I remember" screen.

Location: prayer times and the qibla are calculated on your device. Your latitude and longitude are never sent to our servers; only the city, country and time zone you choose may be saved (to send notifications at the right local time).

Voice: voice questions and recordings for memorization checks are transcribed; the audio is not stored on our servers. Read-aloud of translations uses a synthetic voice and is labelled as such; Arabic recitations are always real recordings of reciters.

Subscription data: plan, trial, renewal and lifetime purchase status (via the app stores and RevenueCat). We never receive your card details.

Usage and technical data: app version, device type, operating system, content-free events such as which screens are used and for how long, and error logs. No question or note text is written to these logs.

Safety signals: if a question shows signs of a crisis (for example self-harm), you are shown a helpline first; only the date, category and level are recorded, never the content of the question.

4. Why we process your data and on what legal basis

To provide the service (account, questions and answers, reading, khatm, prayer and memorization tools, notifications, subscription): performance of a contract (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)).

Because your questions and preferences may reveal your religious beliefs, we treat them as special category data and process them on the basis of your explicit consent (GDPR Art. 9(2)(a); KVKK Art. 6). You give consent when you first use the app and can withdraw it at any time: pause memory, delete your question history or delete your account. Withdrawing consent does not affect processing that took place before.

Security, abuse prevention, answer quality control and fixing errors: legitimate interests (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)).

Accounting and tax records: legal obligation (GDPR Art. 6(1)(c); KVKK Art. 5(2)(ç)).

Measuring app installs and purchases (to see how our ad campaigns perform): on iOS only if you allow tracking, on Android on the basis of legitimate interests; no question, note or religious preference data is ever part of this measurement.

5. How AI is used

To prepare an answer, your question is sent to our AI providers (Anthropic and OpenAI) together with candidate verses, commentary excerpts and, if you are premium and memory is on, the short context you approved. For voice questions and memorization checks, your recording is sent to OpenAI to be transcribed.

Our agreements with these providers do not allow your data to be used to train their models; data is kept only to process the request and for the provider's limited safety retention period.

Answers prepared for questions with the same meaning may be cached in a normalized form without personal information (a short English summary of the intent); the personal sentence is never cached.

For quality control, answers you mark with "report" and a small random sample (about 2%) may be read by an authorized reviewer; every access is written to an audit log. Private questions are never reviewed.

6. Who we share data with

We do not sell or rent your data and do not share it with anyone for advertising. The app contains no advertising SDK.

Service providers needed to run the service (processors): server hosting (Hetzner, EU), AI (Anthropic, OpenAI), subscription management (RevenueCat, Apple App Store, Google Play), notification delivery (Expo, Apple, Google), error monitoring (Sentry; no content is sent), install measurement (AppsFlyer; no content is sent), Quran audio files (Quran.com and EveryAyah servers; audio streams directly to your device). They process data only on our instructions.

Group khatm: when you join a group, its members can see your name (if you entered one) and which juz you took or finished.

Authorities, only where legally required and only to the extent necessary.

7. International transfers

Our servers are in the European Union. AI and some service providers may process data in the United States. These transfers rely on the EU Standard Contractual Clauses and the safeguards required by KVKK (undertakings or explicit consent).

8. Security

Question, answer, note and memory texts are encrypted with a key unique to your account (AES-256-GCM); your key is protected by a separate master key. Connections are encrypted with TLS. This content is not shown in our admin panel.

When you delete your account, your key is deleted and your encrypted content becomes permanently unreadable.

9. Retention

We keep your data while your account is open. Questions, notes and memory items you delete are removed immediately (for memory, a content-free marker is kept for 180 days so that the same fact is not suggested again).

When you delete your account, your personal data is deleted or anonymized within 30 days. Subscription and payment records are kept, separated from your identity, for the period required by accounting law. Backups rotate within 30 days at the latest.

10. Your rights

You have the right to access, correct and delete your data, to restrict or object to processing, to data portability and to withdraw consent. In the app: Settings → Download my data (all your data as JSON), Settings → Delete account. For anything else: .

You may also complain to your local data protection authority (in Turkey, the Personal Data Protection Authority).

11. Children

Ayeta is not designed for children under 13 and we do not knowingly collect personal data from children under 13. If you are a parent and believe your child has given us data, write to us and we will delete it.

12. Changes

We may update this policy. We will announce important changes in the app; the current text is always on this page.