Last updated: 27 July 2026
Thābit ("the App") is published by DeenTeachings ("we", "us", "our"). This policy explains what data the App collects, why, and what you can do about it.
We want you to feel safe using Thābit. We try to collect as little as possible, store as much as we can on your own device, and never sell your data to anyone.
Two features — the Sakinah chat companion and the Vault "Help me say this" script generator — send your text to Anthropic (the maker of Claude) so an AI model can generate a response. See §5 "Third-party AI services" below for the full detail. Nothing is sent until you have explicitly tapped "I agree" on an in-app consent sheet the first time you use each feature.
| Type | Where | How long |
|---|---|---|
| Account email, name, auth provider | Firebase Authentication (Google Cloud) | Until you delete your account |
| Vault entries | On your device only — encrypted at rest (XChaCha20-Poly1305, device-specific key) | Until you uninstall or use Delete Account |
| Journal entries, mood check-ins | On your device only | Until you uninstall or use Delete Account |
| Sakinah chat history | On your device only (keyed to your signed-in user ID) | Until you clear it or delete your account |
| Sakinah / Vault AI requests (message or entry text) | Transmitted to Anthropic over TLS; retained by Anthropic for up to 30 days for Trust & Safety monitoring, then deleted; not stored on our servers | Up to 30 days at Anthropic |
| Firebase Analytics events | Google Firebase Analytics (anonymized) | Per Firebase retention defaults |
| Crash reports | Sentry | 90 days |
We share data only with these processors, only as needed to operate the App:
We do not sell your data. We do not share it with advertisers. We do not give it to data brokers.
We only share personal data with service providers that process it for the purposes described in this Privacy Policy and that are required to use appropriate technical and organisational safeguards. We require these providers to protect personal data in a manner consistent with this Privacy Policy and applicable law.
On-device encryption. Vault entries are encrypted at rest with XChaCha20-Poly1305 using a random 32-byte device-specific key stored only on this device. The optional journal backup feature, if you enable it, encrypts the backup blob with AES-256-GCM using a key derived from your Firebase user ID via PBKDF2-HMAC-SHA-256.
We use Anthropic (the company behind the Claude family of AI models) as an AI subprocessor for two features in the Thābit iOS app: the Sakinah chat companion, and the Vault "Help me say this" script generator. The specific model used is claude-haiku-4-5, accessed through Anthropic's Messages API.
No transmission happens until you have tapped through the in-app consent sheet — which names Anthropic and the connection type — and tapped "I agree."
When you send a message in Sakinah, the message text — plus the recent conversation history, for context — is transmitted to Anthropic's Messages API over an encrypted TLS connection so Anthropic's model can generate a reply. The reply is then shown to you inside the App.
The Vault is a private notes area for things you want to say to loved ones. "Help me say this" is an optional feature you can turn on from within a Vault entry. When you opt in, the entry text is transmitted to Anthropic in the same way, for that single request, and Anthropic's model returns a conversation opening script.
You can revoke this data-sharing choice at any time by clearing app data or deleting your account. The rest of the App continues to work without either AI feature.
Anthropic has committed to providing equivalent data-handling protection through their standard Commercial Terms of Service and their Privacy Policy, which you're welcome to read directly to verify this yourself.
You can, at any time and within the App:
If you live in the EU, UK, or California, you also have the right to request access to or deletion of your data under GDPR, UK GDPR, and CCPA respectively. The Export and Delete features satisfy these rights. For any further request, email salaam@deenteachings.com.
You control what stays and what goes.
If for any reason the in-app deletion doesn't work, email salaam@deenteachings.com with the email address on your account and we will delete it manually within 30 days.
Thābit is rated 17+ and is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child has created an account, email salaam@deenteachings.com and we will delete it.
We use industry-standard transport encryption (HTTPS) for all communication between the App and our servers, and between the App and Anthropic. Firebase Authentication handles password storage. The encrypted journal backup feature uses AES-GCM with PBKDF2 key derivation (≥600,000 iterations) when enabled. No system is perfectly secure; we will inform users without undue delay if a breach affects their data.
Our processors (Google Cloud including Firebase, Anthropic, Sentry) operate globally. Data may be transferred to the United States or other countries. These processors are contractually required to maintain protections equivalent to GDPR standards.
If we update this policy in a way that affects how we use your data, we will surface the change in the App and update the "Last updated" date above. Continued use of the App after a material change means you accept the new policy. If you disagree, delete your account.
DeenTeachings
Email: salaam@deenteachings.com
Instagram: @deenteachings
This App is an act of ṣadaqah jāriyah for Aisha Yahaya رحمها الله.