Legal

Privacy Policy

Last updated: June 14, 2026

AyahLab was built with privacy as a core principle, not an afterthought. This policy explains what data is (and is not) collected by the AyahLab desktop application (the "App"), the AyahLab Pro subscription ("Pro"), and the ayahlab.com website.

1. The free App: no data collection

The free tier of AyahLab is a fully offline desktop application. There are no accounts, no telemetry, no crash reporting, and no analytics of any kind. Your notes, bookmarks, editor files, and settings are stored entirely on your local device. We have no way to see, access, or collect any of it.

The App makes only two kinds of network requests, both content-only:

  • manuscript images fetched on demand from Corpus Coranicum; and
  • recitation audio, when you explicitly download it.

No personal data is included in these requests.

2. Pro accounts: what we store

Pro requires an account so your AI chat history can sync across your devices. For Pro accounts we store:

  • Account details — your email address and an optional display name and bio, managed through our authentication provider, Supabase.
  • Encrypted AI chat history — your conversations are encrypted on your device before upload, so we cannot read them. This is the only study content that ever leaves your device; notes, bookmarks, and editor files stay local.
  • Subscription status — plan, billing period, and renewal/cancellation state, received from Paddle so we know which features to enable.
  • AI usage records — token counts, timestamps, and model class for each AI request, used solely to enforce the fair-use allowances shown on your account page. These records contain no message content.

3. Payments

Purchases are processed by Paddle, our merchant of record. Your payment details (such as card numbers) are collected and stored by Paddle, never by us. Paddle's handling of your data is described in Paddle's privacy policy.

4. AI processing

When you use a Pro AI feature, the text you submit (your prompt, selection, or study context) is sent securely to a third-party AI model provider to generate the response. That provider is currently OpenAI, and the text is sent only to generate your response. We may change or add AI providers over time — for example to adopt newer or better models, or in response to provider pricing — and any such provider could be OpenAI or another company. Regardless of provider, we do not use your conversations to train AI models, and we do not sell your data to anyone.

5. The website

Analytics

ayahlab.com uses Vercel Analytics, a privacy-friendly, cookie-less service that records anonymized page views. It does not track you across other sites. The App itself contains no analytics whatsoever.

Feedback form

If you submit feedback, the message and any contact details you include are delivered to us as an email via Resend and used only to respond to you.

Newsletter

If you subscribe to updates, your email address is stored with Resend, our email provider, and used only to send you AyahLab news. You can unsubscribe at any time using the link in any email.

Cookies and local storage

The website uses browser local storage only to keep you signed in to your account. There are no advertising or cross-site tracking cookies.

6. Data retention and deletion

  • You can delete individual chats or wipe your entire chat history from inside the App; deletion removes the encrypted records from our backend immediately.
  • AI usage records are kept only as long as needed to enforce rolling usage windows and maintain billing integrity.
  • When you cancel a Pro subscription, you choose between deleting your cloud chat history immediately or keeping it for 3 months. If you do not resubscribe within those 3 months, all of your cloud data — including any remaining usage records — is deleted automatically.
  • To delete your account and all associated data, email support@ayahlab.com from your account email address.

7. What we never do

  • We never sell or rent your personal data.
  • We never show ads or use advertising trackers.
  • We never read your chat history — it is encrypted before it reaches us.
  • We never collect telemetry from the App.

8. Children

The Service is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has created an account, contact us and we will delete it.

9. Changes to this policy

If this policy changes, we will update this page and the "Last updated" date above. Material changes will be announced on the website.

10. Contact

For any privacy question or request — access, correction, or deletion of your data — see our support page or email support@ayahlab.com.