Privacy Policy

ReliWise respects your privacy. This page explains honestly what data we collect, why, and your rights over it. For a religious learning platform, trust is everything — the system is designed to expose as little personal data as possible.

Data we collect

• Account: email address, name, and optional profile photo — from email sign-up or Google login.
• Profile: the bio, education, and credentials you enter yourself.
• Session bookings: schedule, consultation topic, and session status.
• Direct messages (DMs) with scholars.
• Ask-a-Scholar questions — the asker's identity is hidden from the public; anonymous questions never show your name.
• Public content: posts, comments, reviews, and events you create.
• Scholar/organization applications: verification documents (PDF) — stored privately, only admins can open them.
• Feedback & reports you submit.

Data that NEVER leaves your device

The worship tools run entirely on your device: prayer-time location & preferences, the prayer tracker, tasbih and adhkar counts, Qur'an bookmarks and reading position. All of it lives in your browser's local storage and is never sent to our servers.

How data is used

• Running the service: accounts, bookings, messages, and content.
• Notifications: in-app, prayer reminders (if enabled), and email digests — all can be turned off in your Profile.
• Safety & moderation: acting on reports and keeping the learning space healthy.
• Anonymous usage statistics (pages visited) to improve the product.

Third parties that process data

• Supabase — database, authentication, and file storage.
• Vercel — hosting and anonymous analytics (sensitive tokens are stripped from analytics URLs).
• Google — Google login (optional) and Google Meet for sessions.
• Resend — delivery of transactional emails and notification digests.
• Content services your browser fetches directly: OpenStreetMap/Nominatim/Overpass and CARTO (mosque map), AlQuran Cloud (Qur'an text), Islamic Network (recitation audio). When your browser loads them, your IP address is visible to those services — as with the web generally.

Legal bases

We process data to perform the service agreement with you, based on your consent (e.g. location access, notifications), and on our legitimate interest in keeping the platform safe (moderation).

Security

Data access is enforced at the database level (Row-Level Security): every user can only read the data they are entitled to. User emails are never sent to another user's browser; verification documents are private.

Your rights

You have the right to access, correct, and delete your personal data, and to object to certain processing. Most data you can edit yourself on the Profile page. For account deletion or other requests, use the "Send feedback" button in the app — we will follow up.

Retention & deletion

Data is kept while your account is active. On deletion the account is deactivated and can no longer sign in; content may be removed or anonymized. You can request full erasure of your personal data.

Changes to this policy

If this policy changes, we announce it through the platform. The effective date is shown below.