Privacy Policy

At Ketabi Studio, we respect your privacy and are committed to protecting your personal data. This policy explains how we handle your information when you use Ketabi.

Saved reflections are stored in your account so they can sync across your devices. Database access controls restrict each signed-in user to their own journal records.

We collect only the information necessary to provide the Ketabi experience: account information through Supabase Authentication, plus information you choose to save, such as adhkar completions, tasbih counts, check-ins, and journal entries. Supabase does not provide Ketabi with your plaintext password.

We use Supabase to store account data. Supabase projects are encrypted at rest and its HTTP APIs enforce encrypted connections in transit. We also use Row Level Security policies so signed-in users can select, create, update, and delete only their own journal rows.

If you choose to record a voice journal entry, the app requests microphone access and the resulting audio is uploaded to your private, access-controlled storage in Supabase so you can play it back across your devices.

Microphone access is only ever used when you explicitly start a recording. If you never record a voice note, no audio is captured or stored. You can delete a voice entry at any time.

With your permission, Ketabi reads your device coordinates and sends the latitude and longitude to the third-party AlAdhan API. AlAdhan returns prayer times that Ketabi uses for the time-based After-Salah recommendation. Ketabi caches those returned times on your device for the day and does not store your coordinates in its own database.

You can decline location access and continue using the rest of the app. The After-Salah recommendation then falls back to the time of day.

Optional one-time tips are processed through RevenueCat and the Apple App Store or Google Play. When you make or restore a purchase, these providers receive purchase and device identifiers necessary to complete and validate the transaction.

We never receive or store your full payment card details, those are handled entirely by Apple, Google, and their payment processors.

Other Ketabi users cannot access your journal entries. Ketabi does not use journal text for advertising or sell it. Like other cloud services, authorized infrastructure administrators may have technical access when required to operate, secure, or support the service; journal entries are not end-to-end encrypted.

When you delete your account in Settings, we delete your account, journal entries, voice recordings, check-ins and worship activity from Ketabi's active database and storage.

We retain your data for as long as your account is active so it stays available across your devices. Account deletion removes your account data from Ketabi's active database and storage. Limited records may remain in security logs or backups until they expire under the providers' retention schedules. Payment providers may retain transaction records for their legal and operational obligations. Contact ketabistudio@gmail.com for help with a privacy or deletion request.

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can request account deletion at any time from within the app (Settings → Delete Account), subject to the retention limits described above.

To exercise any of these rights, or if you have questions, contact us at ketabistudio@gmail.com. We do not sell personal information and have not done so in the preceding 12 months.

For any questions regarding this policy, data deletion requests, or our privacy practices, please contact us directly at ketabistudio@gmail.com.