AyahInk

Privacy Policy

Effective 27 July 2026

AyahInk is built to be private by design. This policy explains what we do — and mostly don't — do with your information when you use the AyahInk website and the Qur'an Journal web app (the "Service").

The short version: your journal lives on your own device by default and is never uploaded unless you deliberately turn on Cloud Sync, or deliberately connect an AI companion and choose to include your writing in a request. We show no ads, set no advertising trackers, and never sell your data or read your reflections to train anything.

1. Using the Journal without an account

By default, everything you write, highlight, or draw in the Qur'an Journal is stored only in your own browser on your device (using your browser's local storage and IndexedDB). It is not transmitted to us or anyone else. We run no server-side logging of your journaling activity, place no advertising or analytics cookies, and cannot see your entries. You can export a full backup at any time from the ⚙ menu inside the Journal.

2. If you turn on Cloud Sync (optional)

Cloud Sync is strictly opt-in. If you create an account and enable it, we process:

  • Your email address — used to identify your account, sign you in, and (when enabled) send account emails such as verification and password reset.
  • Your journal content — the reflections, notes, highlights, bookmarks, and (when drawing sync is enabled) handwriting/drawings you choose to sync, so they can appear across your devices.
  • Voice reflections you record — if you record a spoken reflection on an ayah, the audio file is stored with that journal entry. It is a recording of your own voice, so we treat it with the same care as the rest of your journal: it is uploaded only if Cloud Sync is on, only to your own account, and it is never listened to, transcribed, analysed, shared, or used to train anything. Recordings you make without an account, or with sync off, never leave your device at all. You can play back, download, or delete any recording yourself at any time, and deleting it removes it from our storage too.
  • Basic technical data — such as your IP address at the moment of a request, used transiently for security and rate-limiting. We do not build advertising profiles.

3. How your data is protected

  • Encrypted in transit — all traffic uses HTTPS/TLS.
  • Encrypted at rest — synced data is stored on Cloudflare's infrastructure, which encrypts stored data at rest.
  • Passwords are never stored in plain text — they are salted and hashed (PBKDF2-HMAC-SHA256). Session tokens are stored only as hashes.

4. Who we share data with

We do not sell your data or share it for advertising. We use a small number of service providers strictly to operate the Service:

  • Cloudflare — website hosting, application runtime, and encrypted database/file storage.
  • Resend — delivery of account emails (only if email features are enabled).
  • Stripe — payment processing (only if and when paid plans are enabled; we never receive your full card details).

5. If you connect an AI companion (optional)

The Journal can generate extra reflection questions to sit alongside the ones written for each ayah. This is entirely optional, off until you switch it on, and requires you to bring your own account with an AI provider — AyahInk does not provide the AI and does not pay for it.

  • Your API key stays on your device. It is stored in your browser. We never write it to our database and never log it. When you generate a prompt, the key is passed through our server for that single request and then discarded.
  • What is sent by default: only the translation of the verse you are reading, its surah and ayah number, and the existing authored question (so the AI does not repeat it). Nothing you have written is sent.
  • Your own writing is only sent if you tick the box on that particular generation. It is never sent automatically and the box is unticked every time.
  • Your AI provider's terms apply to whatever is sent, not ours. This matters: free AI plans commonly use what you send them to train their models, and staff may review it. Please read your provider's policy before including anything personal.
  • We do not store the content of your AI requests. The generated questions are saved into your own journal, and sync with it if you have Cloud Sync on.

6. Your choices and rights

  • Export — download a complete backup of your journal anytime from the ⚙ menu.
  • Turn off sync — you can disable Cloud Sync at any time; your local journal remains on your device.
  • Delete — you can request deletion of your account and synced data by contacting us; we will remove your synced content from our storage.

7. Data retention

Synced data is kept while your account is active. If you delete your account, your synced entries and files are removed from our active storage.

8. Children

AyahInk is intended for general audiences and is not directed at children under 13 (or the minimum age of digital consent in your country). If you believe a child has created a synced account, contact us and we will remove it.

9. Changes to this policy

We may update this policy as the Service evolves. Material changes will be reflected by an updated effective date on this page.

10. Contact

Questions about privacy? Email [email protected].