Thaqalayn Library: Privacy Policy

Last updated: 28 October 2026

This app is provided by Thaqalayn Office, part of Bab Al-Murad Association, directed by Sayyid Nusrat Qashaqish Al-Amili (“we”).

1. Without an account

Browsing, downloading, reading and searching downloaded books need no account. Downloaded books, reading progress, notes, highlights, marks and study sessions are stored on your device. Online search and “by meaning” search send your search text to our server to return results. We do not store search text and do not link it to your account, device or network address. “By meaning” search is processed by a model running on our own server; its text is not sent to any outside service.

2. When you sign in we collect

• Your email and the account creation date (to sign in with a one-time code).
• For each device you sign in from: its id, name, platform, sign-in dates and hashed sign-in tokens (to link your devices to your account).
• Your notes, highlights, marks, study sessions and reading progress (to sync them).
• Your questions to the AI assistant, its answers and your chats (to answer and keep your chats).
• If you turn on notifications: your device’s Apple push token, your permission state, the app language, your time zone, the app version, your notification choices, and the list of ids of the books downloaded on your device (to send the notifications you chose at the right time; see section 4A).

We do not collect your location, contacts, photos or payment details, and we do not record your device model or your network (IP) address with your data.

3. What we do not do, and who receives your data

No advertising, no tracking, no analytics tools in the app. We do not sell your data or share it for marketing. We share it only with three providers, only to run the service: (1) Google (Gemini), to write the AI assistant’s answer (see section 4); (2) Brevo, to send the sign-in code email; it receives your email address and the code; (3) Apple (APNs push service), to deliver notifications to your device; it receives the device token and the notification text.

4. AI assistant

Your question is sent to our server, then, together with the earlier messages of the chat and the closest passages of the library’s books, to Google’s Gemini service, which writes the answer from those passages only. We currently use the free tier of this service, and Google’s terms for it may apply to the content sent. For each question our server logs: the question and answer text, your account id, an optional install id and the app version, token counts and timings, the search texts the model wrote, and the passages used. No network (IP) address is logged here. Purpose: to answer, improve the service and diagnose faults. Answers are generated automatically from book text and show their sources so you can check them. The assistant has a daily question limit per account.

4A. Notifications

If you allow notifications we send three kinds, each with its own switch in Settings → Notifications: assistant answer ready (when your question is answered and you left the app; on by default), your books (when a book you read, downloaded, or added a note or mark to is updated; on by default), and new books in the library (one digest a day at most, at 10:00 your time; off by default). A notification carries no private text: only the chat or book id, so the app can open it when you tap. For book updates we keep the list of ids of the books downloaded on your device. We send none from 22:00 to 08:00 your time (except assistant answers) and at most three a day. Notifications use the language you chose in the app.

5. Retention

• Chats, questions and answers: kept until you delete the chat, then removed from the server log after 30 days. A request that failed without an answer loses its text after 30 days.
• Network (IP) address: kept only to limit sign-in requests (code requests and checks) and deleted after 1 day. It is not stored with chats, search or sync data, and we keep no web server access logs.
• Sign-in email log: a hash of the email (not the address) and the sending result, for 90 days.
• Your device token and notification choices: until you sign out, delete your account or turn notifications off. If Apple tells us a token is no longer valid, it is disabled and then deleted after 30 days.
• The list of downloaded books (ids only, no titles): emptied when you sign out, and deleted when you delete your account.
• The log of sent notifications (title and text, which may include a book title, and the chat or book id): deleted 7 days after it is created. We keep nothing else about a notification after it is delivered except the time of the last successful send to your device. Apple holds the notification for its own delivery under its own policy.
• Other account data: until you delete your account. We keep no database backups of our own.

6. Your control

Delete your account in the app’s Settings: the account, all your devices, everything you synced (notes, marks, highlights, sessions, progress) and all your chats and their log entries are deleted immediately, in one step. Local data stays on your device until you delete the app. Signing out removes saved chats from your device and stops notifications to it. You control each kind in Settings → Notifications in the app, or turn them all off in iOS Settings. You can delete or rename chats. For any request about your data write to support@thaqalaynlibrary.com.

7. Security

Data travels to the server over HTTPS; your sign-in key is kept in the device Keychain, and sign-in tokens are stored on the server hashed.

8. Children

The app is a library of texts and is not directed at collecting data from children.

9. Changes and contact

We may update this policy; the date above shows the latest version. Contact: support@thaqalaynlibrary.com