1. Who is responsible for your data

Responsible party: the Kawn Ad-Din project — the website kawnaddin.com, run by a group of scholars located in different countries. Personal data requests: privacy@kawnaddin.com.

2. What we collect

Without an account. All content is open without signing up. For the daily limits of guest features (calculators) we set a technical cookie kawn_gid (a random identifier, 1 year) and compute a hash of your IP address with a salt that changes every day — the address cannot be recovered from it. Searches made without an account are not linked to you.

Account. On registration: name, e-mail address, password (stored only as a hash), gender, country, madhhab and language. These fields drive the service: for example, the hayd tracker opens only for women, and fatwas are shown in your language.

Your consents. When you sign up we record that you accepted the Terms of Use and Sale and consented to the processing described in this Policy: the version of each document, the date and time and your IP address — as proof of consent. The same is recorded each time you accept an updated version, give or withdraw consent for the tracker, or confirm the terms of sale before a payment.

What you create. Bookmarks, viewing history, diary, settings, questions to the mufti with attachments, saved AI research, plan requests.

Health data — the hayd tracker. Records of menstruation, nifas, pregnancy and iddah are health data — a special category of personal data (Article 9 of the GDPR). We process them only with your explicit consent and for one purpose only — calculating your Sharia status, missed prayers and fasts. The consent is separate from the box you tick at sign-up: the tracker stays switched off until you read the description and give it in a dedicated window, and it records the version, date, time and your IP address. Without the consent the tracker does not read, store or use any data (including reminders and the debts summary built from it). These records are never shared, never sent to AI and never analysed in aggregate. You can withdraw the consent at any time in your account (Diary → Cycle tracker → “Withdraw consent and delete my data”): all tracker data is then deleted at once and irreversibly; copies in backups age out within 6 months. Deleting the account deletes them as well.

Sign-in security. When you sign in we record the IP address, device and browser type and time, and we look up the country and city from the IP via ipinfo.io — to show your device list and warn you by e-mail about a sign-in from a new device. For two-factor authentication we store the TOTP secret and backup codes (encrypted). Account actions (sign-in, e-mail change, subscription) are written to an audit log.

AI search and the sentence generator. The text of your question is sent to a third-party language-model provider (USA) to search and compose the answer. No name, e-mail or other account data is sent with it. Under its API terms the provider does not use submitted data to train its models. We keep questions, answers and the cost of requests in our logs for limits, quality control and statistics.

Payment. Cryptocurrency: you pay in USDT or USDC on a public blockchain. We store the network, the transaction hash, the amount, the time and the payment reference; the blockchain is public and permanent, and we cannot erase a transaction from it. To confirm a transfer we query public blockchain nodes with the transaction hash. Bank card: where card payment is offered, it is processed by a third-party payment provider; card details are entered on its page and never reach us. We receive only the fact of payment, the plan, the amount and a payment identifier. In both cases we keep the payment record and the confirmation of the terms of sale (version, time, IP) for subscription records, proof of the transaction and as long as tax law requires.

E-mail. E-mail confirmation, password reset, sign-in alerts and subscription notices are sent through Resend. We record delivery status (delivered, bounced) so as not to keep sending to dead addresses.

Errors. Technical errors are sent to Sentry without personal data (“no PII” mode): only the error message, page and browser version.

Site statistics. To see which pages and features are used and where visitors come from, we keep our own anonymous statistics on our own server (section 4); no outside analytics service receives your data. It sets no cookies and builds no profile of you. We record the page address, the referring site, the country, the type of device, the interface language and the names of a few feature events (for example, “calculator used”). Your IP address is not stored: visits are counted by an anonymous daily hash that cannot be traced back to you, and the country and the type of network (data centre or ordinary provider, to filter out robots) are determined from the network part of the address only (the last number is zeroed before the lookup at ipinfo.io). The statistics are not collected in your account area (including the hayd tracker) or on administration pages, and nothing from the hayd tracker is ever sent to them. The text of search queries is not sent to them either. If your browser sends Do Not Track or Global Privacy Control, the statistics are switched off completely.

How you found us. On your first visit your browser remembers, in its local storage, the campaign tags of the link you came by (utm_source, utm_medium, utm_campaign) and the domain of the referring site — for 90 days. If you register, we copy these tags into your profile to learn which channels bring readers who stay. They contain no personal data about you and are not sent anywhere on their own.

What we do not do. No advertising trackers and no analytics that follow you across sites (Google Analytics, Yandex Metrica and the like) — the only statistics we use is the anonymous one described above. We do not sell or share data for marketing and do not build profiles.

3. Why, and on what basis

• Performance of a contract with you: account, subscription, payment, subscription notices, mufti answers.
• Your consent: the consent given at sign-up, the hayd tracker (special information), notifications, sending questions to AI. You can withdraw consent at any time by switching the feature off, using the withdrawal button in your account or writing to us; this does not affect processing done before.
• Legitimate interest: protecting accounts from takeover, protecting the site from automated scraping, limiting abuse, accounting for AI costs, anonymous statistics of site use.
• Legal obligation: keeping payment records and responding to lawful requests.

4. Where data is stored and who receives it

The site and database are hosted by Hetzner Online GmbH in Helsinki, Finland (European Union), so your data is stored in the EU under the protection of the General Data Protection Regulation (GDPR). Some of the operators below are in the USA.

Operators (processors) that receive limited data to provide services to us:

• Hetzner Online GmbH (Germany/Finland) — hosting;
• a language-model provider (USA) — AI search: the text of the question only;
• Resend (USA) — e-mail delivery: address and message content;
• Sentry (Functional Software, Inc., USA) — error monitoring, no personal data;
• ipinfo.io (USA) — country and city from the IP at sign-in; for the site statistics — the country and the type of network, from the network part of the address (last number zeroed);
• the card payment provider — when you pay by card; its own policy governs card data;
• public blockchain nodes and explorers — a transaction hash and our public address, to confirm a crypto payment.

All are bound by data processing agreements and apply industry safeguards. Other disclosures happen only where the law requires.

5. How long we keep data

• Your account and what you created — for as long as the account exists.
• Sign-in sessions — until sign-out or expiry; you can clear the device list yourself.
• AI search conversations — 30 days; those you mark “keep” — until you delete them.
• Daily AI usage totals — 90 days; request logs — up to 12 months.
• Audit log and e-mail delivery statuses — up to 12 months.
• Web server logs (IP address, requested page, browser, time) — 14 days; application logs, which carry no names or e-mail addresses — 30 days.
• Anonymous site statistics — 12 months; they contain no personal data. The acquisition channel in your profile — as long as the account exists; in your browser — 90 days.
• Payment records and records of consent — as long as tax law requires and as needed to prove a transaction or a consent.

When you delete your account (your account → Security → “Your data”), your personal data is erased at once, except payment records (kept without your name, e-mail or IP address), records of consent and what the law obliges us to keep; answers already published as fatwas stay without your name. Copies in backups age out within 6 months.

6. Your rights

You can: ask what data we hold about you; correct it; delete your account and data; receive a copy of your data in a machine-readable form; object to processing based on legitimate interest; withdraw consent. You can withdraw the tracker consent and delete the tracker data yourself in your account; for everything else write to privacy@kawnaddin.com from the e-mail your account is registered with. We reply within 30 days.

Users in other countries. We serve people worldwide. The rights described here are available to every user wherever they live; if the law of your country gives you more, write to the same address. By signing up you agree that your data is processed and stored in Finland and by the recipients listed in section 4.

If you believe we are violating your rights, please write to us first. You may also complain to the data-protection authority of the country where you live.

7. Children

Accounts are for adults. Minors use the site without registering and we do not knowingly collect personal data from them. If you believe a minor has registered, write to privacy@kawnaddin.com and we will delete the account.

8. Cookies and local storage

We use only what is necessary: the session key and your settings (theme, language) in the browser's local storage; the campaign tags of your first visit (kawn_ft, 90 days) in the same storage; the kawn_gid cookie for the daily limits of guest features. The site statistics use no cookies. There are no advertising or third-party cookies, so no consent banner is required.

9. Security

HTTPS only; passwords stored as hashes; two-factor authentication available; alerts on sign-in from a new device; server access restricted and logged. Report a vulnerability: security@kawnaddin.com.

10. Changes

The current version is always available at kawnaddin.com/privacy; the version date is in the heading. We will announce material changes in your account.