Privacy
Privacy, stated plainly.
This policy describes the current Thabit product foundation. We will update it before enabling any feature that materially changes how personal information is handled.
Who this policy covers
Thabit is operated by Small World Marketing. This policy applies to the Thabit mobile and web applications, public website, and related support. It does not cover third-party websites you choose to visit.
We do not sell personal information, run advertising, or use the public site for behavioural tracking. The public site does not currently offer an account form, waitlist, or analytics.
Information we handle
Account and profile
Create and secure your account and keep your preferences consistent across devices.
- Examples: name, email address, authentication identifier, preferred language, account time zone, initially estimated from the sign-in request location.
- Service providers: Clerk, Supabase, Vercel.
- Retention: Kept while your account is active, then deleted through the account-deletion process except where limited records must be retained for security or legal obligations.
Study and practice
Run focus and review workflows, sync progress, and calculate your private routine.
- Examples: study-plan settings, practice-session events, review grades, progress and streak evidence.
- Service providers: Supabase, Vercel.
- Retention: Kept with your account so the service can provide history and scheduling, and removed through account deletion subject to narrow security or legal exceptions.
Device and notification
Register your device and, only when enabled and requested, deliver practice reminders.
- Examples: push token, device platform, reminder choices.
- Service providers: Expo, Apple or Google push services, Supabase.
- Retention: Removed when the device is unregistered, you sign out where supported, or the account-deletion process completes.
Reliability and security
Diagnose failures, prevent abuse, and keep the service reliable without session replay.
- Examples: privacy-scrubbed error details, request identifiers, aggregate service events.
- Service providers: Sentry, Vercel.
- Retention: Kept only as long as reasonably needed for troubleshooting, security, and provider-configured retention, then deleted or aggregated.
Feedback and support
Respond to optional product feedback and investigate content-integrity reports. General feedback sends the message you enter. The structured Quran integrity path does not transmit the displayed Quran text. Neither in-app path accepts recordings, attachments, or device identifiers.
- Examples: feedback category and message, permission to contact you, app platform, version, build, and interface language, Quran issue type, numeric ayah identifier, and content-release identifier.
- Service providers: Supabase, Vercel, Small World Marketing email services when you email us.
- Retention: In-app submissions remain linked to your account and are removed through account deletion. Email correspondence is stored separately from the app account, is not removed automatically by in-app deletion, and may be retained only as needed for support, security, or legal obligations; contact us to request deletion where applicable.
Deletion reconciliation
Confirm completed deletion and safely retry interrupted provider cleanup.
- Examples: one-way pseudonymous principal hash, deletion status, stage timestamps.
- Service providers: Supabase.
- Retention: The record excludes your email and practice history. No automatic expiry is implemented yet; this policy will be updated when an enforceable retention period is added.
Voice and recitation data
Production recitation checking is not active, and the current product does not upload, transcribe, or retain your voice recordings. Modal and OpenAI are not receiving production recitation audio from Thabit.
Before any recitation-processing feature is enabled, Thabit will present an updated notice that identifies what is recorded, the processors and regions involved, the retention period, whether storage is optional, and how recordings and derived transcripts can be deleted. A recording-storage opt-out must work end to end before stored recordings can ship.
Service providers
We use service providers only for defined product functions. Availability depends on the release and configuration in use.
- Clerk: Account authentication and identity. Status: active when configured.
- Supabase: Application database and future private object storage. Status: active when configured.
- Vercel: Web and API hosting. Status: active when configured.
- Sentry: Privacy-scrubbed error reporting; session replay is disabled. Status: optional.
- Expo and platform push services: Optional device registration and reminder delivery. Status: optional.
- Modal and OpenAI: Potential recitation-processing providers; no production voice processing is active. Status: not active.
Personal information may be processed outside Canada where a provider operates. It may then be subject to lawful access rules in that jurisdiction. We limit providers and data fields to what the relevant feature needs.
Your choices and rights
- Update supported profile, language, routine, and notification choices in the app.
- Decline notification permission or disable reminders without losing practice access.
- Request access to or correction of your personal information by email.
- Choose whether we may contact you about optional in-app feedback. General feedback sends the message you enter. The structured Quran integrity report action does not transmit the displayed Quran text.
- Delete your account in app settings or through the public deletion request page.
We may need to verify that a request comes from the account holder. We protect information with access controls, private account scoping, encrypted transport, and data-minimising logs, but no online service can promise absolute security.
Privacy contact
Questions, access requests, corrections, and privacy concerns can be sent to:
Include the email connected to your account and a short description of the request. Do not send passwords, authentication codes, voice recordings, or Quran text by email.