How AskSakina Protects Your Privacy
- No Accounts or Logins: You never sign in to AskSakina. We do not maintain a user database or ask for your identity.
- Your Location: Your exact coordinates are stored entirely locally on your own device. To calculate prayer times and weather, your location is rounded to an approximate 1.1 km area before reaching our server. AskSakina then requests the times on your behalf, ensuring third-party providers never receive your IP address.
- How We Use AI: When you use the Companion Engine, your text is securely processed by Google's Gemini AI. Google keeps this text for a limited period, solely to detect misuse and meet legal obligations, and does not use it to improve its products or train its AI. We use a paid, enterprise-grade connection, meaning Google's terms explicitly prohibit them from using your private inputs to train their public AI models.
- Rate Limiting: To protect the app from misuse, our API routes record a request counter against your pseudonymised IP address (a daily-rotating salted hash). This is stored securely in Upstash Redis for a 60-second window and is automatically deleted when that time expires.
Website Analytics & Performance
To know, in aggregate, whether the app is used and whether it stays fast, AskSakina uses Vercel's Web Analytics and Speed Insights. What is counted: page views, page-speed measurements, and one "visit" event per device per day that says only whether the device is new or last opened AskSakina within 7 days, within 30 days, or longer ago. That value is computed from one date the app already keeps on your device for the daily greeting; no extra date or identifier is stored for analytics, and Clear All My Data removes it. No cookies are used and nothing follows you across other sites.
Vercel counts daily unique visitors with a temporary, daily-salted hash of the request's IP address and browser details, derives the country, region and device type in transit, and does not store the IP address. This is processed by Vercel Inc. on its global edge network, including in the United States. Legal basis: legitimate interests (UK GDPR Article 6(1)(f)).
No page views, no speed measurements and no visit event are ever sent from /reverts, /curious, /find-support, /comfort, /onboarding or /quran/speak-to-me, in any language, and visiting them does not update the stored last-opened date.
The data controller is Yousef, an individual based in the United Kingdom. Questions go through the contact page.