Rusukh is a Qur'an and Islamic study companion. This policy explains exactly what the app collects, why, who it is shared with, and how to get it deleted.
The short version. We collect the email address you sign up with, the study data you create in the app (questions you ask, bookmarks, notes, memorisation progress), diagnostics when the app crashes, and — because the free tier shows ads — an advertising identifier. We do not sell your data. We do not build advertising profiles from your questions. You can delete your account and everything in it at any time.
1. Who we are
Rusukh is published by DeepFAI ("we", "us"). For any privacy question, or to exercise any right described below, contact support@deepfai.com.
2. What we collect
| Data | Why | Legal basis / control |
|---|---|---|
| Email address and password (password is stored only as a salted hash) | To create and secure your account, and to sync your study data across devices | Necessary to provide the service you asked for |
| Study preferences — translation, madhab, reciter, language, and the masjid or organisation you affiliate with | To show the right translation, reciter and scholarly lens | Necessary to provide the service; you choose each value |
| Questions you ask and the answers returned, plus any feedback or source corrections you submit | To show your history, to let you report a mis-citation, and to audit the citation pipeline for accuracy | Necessary to provide the service |
| Bookmarks, notes, collections, memorisation goals, review sessions and the mistake log | To keep your reading and hifz progress | Necessary to provide the service |
| Usage counters for rate limiting | To stop abuse and keep the service available | Our legitimate interest in service integrity |
| Crash reports and performance diagnostics (Firebase Crashlytics) — Android only | To find and fix crashes | Our legitimate interest in a working app |
| A push notification token, if you allow notifications — Android only | To send review reminders you have opted into | Your consent — revocable in your device settings |
| An advertising identifier and coarse ad-serving signals, on the free tier only (Google AdMob) | To show banner ads that fund the free tier | Your consent where required; see Advertising |
We do not ask for your name, address, phone number, date of birth, photos, contacts, precise location, or health data. The app has no social feed and no public profile.
3. How your questions are processed
Rusukh's Ask feature is retrieval-based. When you ask a question, the text of that question is sent to our server, which searches a verified corpus of Qur'anic verses, translations and hadith. The question and the retrieved passages are then sent to a large language model, routed through our model gateway, whose only job is to assemble an answer out of the retrieved passages.
Every quotation is checked against the source database before it is displayed. If the retrieved sources do not support an answer, the app says so and defers to a qualified scholar rather than generating sacred text. Rusukh is a study aid, not a mufti.
Your questions are not used to train third-party models. They are retained on your account so you can see your own history, and are deleted when you delete your account.
4. Advertising
The free tier shows banner ads supplied by Google AdMob. By design, ads never appear against sacred content — not in the mushaf, not in an Ask answer, not in tafsir, and not during a hifz review. They appear only on index, bookmark and profile surfaces.
AdMob may access an advertising identifier to serve and measure ads. On iOS, Rusukh does not ask for permission to track you across other companies' apps and websites, and does not access the IDFA for that purpose. Where regional law requires a consent choice for personalised ads, you will be asked before personalised ads are shown, and you can change that choice later. Subscribing to Rusukh Premium removes all ads.
5. Who your data is shared with
We do not sell personal data and we do not share it for cross-context behavioural advertising. We use these processors, each only for the purpose listed:
- Supabase — database, authentication and file storage.
- Google Firebase — Crashlytics (crash diagnostics) and Cloud Messaging (push notifications). These run on Android only; the iOS build does not currently initialise Firebase, so no crash reports or push tokens are collected on iOS.
- Google AdMob — banner advertising on the free tier.
- Our model gateway and its underlying model providers — processing the text of an Ask question to assemble an answer from retrieved sources.
- Apple and Google — app distribution, and billing if you subscribe. We never receive your card details.
- RevenueCat — subscription status, if you subscribe, so entitlements work across your devices.
We may also disclose data where we are legally required to, or to protect the rights and safety of our users.
6. Retention
Account and study data is kept while your account exists. Delete your account and it is removed from our production systems, with encrypted backups ageing out within 30 days. Crash reports are retained by Crashlytics for up to 90 days. Anonymised, non-identifying counts (for example "how often did the app defer to a scholar") may be kept to monitor citation accuracy.
7. Security
Traffic is encrypted in transit. Every user table enforces row-level security so one account cannot read another's data. Model calls are made server-side; API credentials are never shipped in the app.
8. Your rights and choices
- Access, correction, export or deletion — email support@deepfai.com and we will respond within 30 days.
- Delete your account — see Delete account.
- Notifications — turn off in your device settings at any time.
- Ads — reset or limit your advertising identifier in device settings, or subscribe to remove ads entirely.
Depending on where you live you may have additional rights under the GDPR, the UK GDPR, or US state privacy laws, including the right to object, to restrict processing, and to complain to your local supervisory authority. We honour those rights regardless of where you live.
9. Children
Rusukh is not directed to children under 13, and we do not knowingly collect data from them. If you believe a child has created an account, contact us and we will delete it.
10. International transfers
Our processors operate data centres in the United States and the European Union. Where data leaves your region, transfers rely on standard contractual clauses or an equivalent safeguard.
11. Changes
If we change this policy materially we will update the effective date above and notify you in the app before the change takes effect.
12. Contact
DeepFAI — support@deepfai.com