Privacy Policy

What we store

Account. Depending on how you sign in: a Telegram user ID and first name, or a Google account ID, email address and given name, or — for guest accounts — only an internal identifier and an optional name you type yourself. Guest accounts contain no contact details at all.

Preferences. Interface and conversation language, time zone, prayer calculation method and notification setting.

Conversations. The messages you write and the replies you receive. The service also maintains a short rolling summary of your conversations so the companion can remember context between sessions.

Saved anchors. Quotes and reflections you choose to save, with their source and optional tag.

Usage events. Records such as "a message was sent", "the paywall was shown" or "an account was created", with the traffic source if you arrived through a tagged link. These are also used to count your daily message allowance.

Payments. Subscription status and expiry, and for donations the amount, optional message and the payment identifier returned by Telegram. Card and payment credentials never reach us — they are handled entirely by Telegram and Tribute.

Technical. Short-lived counters derived from your IP address, used only to limit how often accounts can be created and requests made. They expire within an hour and are deleted automatically.

Data stored on your device

Some things never leave your browser or your Telegram client: quick notes captured during the day, the micro-step you confirmed, your sign-in token, and the traffic source of your first visit. We do not use advertising or cross-site tracking cookies.

Who else processes your data

The service runs on infrastructure and integrations provided by third parties. Each receives only what it needs:

• Vercel — hosting, and privacy-friendly, cookieless visit analytics.
• Supabase — the database where accounts, conversations and anchors are stored.
• OpenRouter — routes your messages to the AI model that generates replies.
• Telegram — sign-in, the bot, notifications and Stars donations.
• Tribute — subscription payments.
• Google — optional sign-in.
• Aladhan — prayer times. If you enable this feature, the coordinates or place name you provide are sent to this service to calculate prayer times. Your identity is not sent with them.

These providers operate in different countries, so your data may be processed outside your own.

What we do not do

We do not sell your data, do not share it with advertisers, and do not use your conversations to train AI models. Your reflections are not read for any purpose other than operating the service and, where you ask for support, resolving your request.

Erasing your data

In Settings you can permanently erase your conversation history — for today, the past week, the past month, or everything. Choosing "everything" also erases the rolling summary the companion keeps about you. This is a real deletion from the database, not a hidden flag, and it cannot be undone.

Two honest exceptions. Usage events (see above) are not removed by this action, because they carry your daily message counter; they record that activity happened, not what you wrote. Saved anchors are deleted individually from the Hidayah screen.

To delete your account entirely, or to request a copy of your data, write to suhba.ai@gmail.com from the address linked to your account, or through the bot if you signed in with Telegram.

How long we keep things

Conversations, anchors and preferences are kept until you erase them or ask us to delete the account. Rate-limit counters expire within an hour. Usage events and payment records are retained while the service operates, as they are needed for allowances, billing history and accounting.

Children

The service is not intended for children under 13, and we do not knowingly create accounts for them.

Not medical or religious authority

Suhba is a companion for reflection. It does not issue religious rulings, and it is not a substitute for a scholar, a therapist or a doctor. Replies are generated by an AI model and may be inaccurate.

Changes

If this policy changes materially, the date at the top will be updated. Continuing to use the service after a change means you accept the updated policy.