Privacy Policy

Muhasaba is a personal accountability and muhasaba companion built to help you keep small, meaningful commitments — privately and without pressure. This Privacy Policy explains what information we collect, why we collect it, and the choices you have.

1. Who we are

Muhasaba (“the App”) is operated by Orif AI (“we”, “us”, “our”). For any privacy questions or requests you can reach us at amirbek@getmuhasaba.com. The App connects to our servers at muhosaba.orif.ai.

2. Information we collect

2.1 Information you provide

2.2 Information collected automatically

2.3 Location (only with your permission)

If you use the Qibla compass or prayer times, the App may request your location. Your precise coordinates are used on your device to compute the Qibla direction and distance. To calculate prayer times, an approximate location (such as a city, or coordinates you set) may be saved to your profile on our servers. You can change or remove this at any time in Settings, and you may decline the location permission entirely — those features will simply ask you to set a location manually.

3. How we use your information

• To provide, maintain, and improve the App’s features.
• To authenticate you and keep your account secure.
• To sync your commitments, circles, prayer times, and reflections across your sessions.
• To send notifications you have opted into.
• To generate iSahaba’s answers via a third-party AI service, with your consent (see Section 6.1).
• To process subscriptions and payments (see Section 5).
• To diagnose problems and prevent abuse.

We do not sell your personal information, and we do not use your private reflections or missed-day data for advertising.

4. Your privacy within circles

Muhasaba is designed to celebrate, not to shame. By design:

• Missed or partial days are never shared to any circle feed.
• Reflections and notes you mark private stay private to you.
• Invite codes expire, and only a circle’s admin can rotate or delete it.

5. Payments & subscriptions

If you purchase a premium plan, gift, or sponsorship, payment is processed by our payment provider, Stripe, through a secure hosted checkout. We do not receive or store your full card number. Stripe processes your payment details under its own privacy policy.

6. Third-party services

We rely on a small number of trusted providers to operate the App. Each processes data only as needed for its function:

6.1 iSahaba and third-party AI

iSahaba, the in-app companion, generates its answers using a third-party AI service. When you use iSahaba:

• What is sent: the text of the messages you write to iSahaba — your questions and any reflection you choose to share in the chat — together with limited context needed to answer you (for example, your first name and a short summary of the habit you are working on).
• Voice-to-text (dictation): if you tap the microphone to dictate a message, your voice recording is sent — through our backend — to a third-party speech-to-text service (ElevenLabs) to be transcribed into text. The audio is processed for transcription only and is not stored by us. In the (upcoming) voice mode, the words you speak are likewise transcribed and the reply is turned into speech by a speech service.
• Who it is sent to: the message text is transmitted through our backend to our third-party AI provider (Anthropic, with OpenAI as a fallback), which processes it solely to generate a reply and return it to you.
• Your permission first: the App asks for your consent before your first message is sent to the AI service, and nothing is sent until you agree.
• What is not shared: iSahaba does not post to your circle and does not share your private reflections with other users. Your messages are used to answer you — not to show ads or to sell your data.

Our AI provider processes this data under its own confidentiality and security commitments and does not use it to train its models on your personal content.

7. How we store and protect your data

• Your authentication token is stored in your device’s secure keychain/keystore — never in plain storage, and never written to logs.
• Data in transit is encrypted using HTTPS/TLS.
• Access to our servers is restricted and monitored.

No method of transmission or storage is perfectly secure, but we take reasonable measures to protect your information.

8. Data retention

We keep your information for as long as your account is active. When you delete your account, we delete or anonymise your personal data, except where we must retain limited records to comply with legal, tax, or fraud-prevention obligations.

9. Your rights and choices

• Access & correction: view and edit your profile and content in the App.
• Deletion: delete your account from Settings, which removes your associated personal data.
• Notifications: turn push notifications on or off at any time.
• Location: grant or revoke location permission in your device settings.
• Data requests: contact amirbek@getmuhasaba.com to request a copy or deletion of your data.

Depending on where you live (for example, the EU/EEA under GDPR, or California under the CCPA), you may have additional rights. We honour valid requests under applicable law.

10. Children’s privacy

Muhasaba is not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

11. International transfers

Your information may be processed in countries other than your own. Where required, we use appropriate safeguards for such transfers.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, for material changes, provide a more prominent notice.

13. Contact us

Questions or requests? Email amirbek@getmuhasaba.com.