Privacy Policy
This policy explains what data the Qawam and Sukūn apps process, how it is protected, and the rights available to you. Last updated: June 13, 2026.
Who we are
Qawam and Sukūn are two AI relationship-coaching apps published by HARS [legal form and registration number to be completed], headquartered at [address to be completed] ("we", the data controller). Qawam is for the husband, Sukūn for the wife — two independent accounts that share the same technical infrastructure and the same privacy policy.
Data we collect
Account: email address and password (or passwordless sign-in link), managed by our authentication provider, Supabase. Relationship profile: your answers during onboarding (temperament, love language, conflict style, tension topics, cultural background, length of marriage, etc.), stored encrypted (AES-256-GCM). AI coach conversations: the content of your messages, plus conversation titles and summaries, stored encrypted (AES-256-GCM). Screenshots (optional): if you share a screenshot of a conversation for the coach to analyze, the image is sent to the AI model for that single request and is not stored in our database — only a flag noting that a message included an image is kept. Subscription data: subscription tier, trial dates, RevenueCat customer ID, remaining credits, and billing events (e.g. "trial started"). Notifications: an Expo push token, used to send your daily tip. Referral code (optional), entered at sign-up. Preferences: language and display theme. Voice dictation (optional): if you use the microphone button to dictate a message, the audio is processed by your phone's built-in speech recognition (Apple or Google) — we do not receive, store, or transmit any audio recording; only the transcribed text, which you can review and edit before sending, is processed like a normally typed message.
Menstrual cycle tracking
In Sukūn, you can enable tracking of your own hormonal cycle to receive advice tailored to each phase — this is your own health data, processed as described above (encrypted with AES-256-GCM, based on your explicit consent). In Qawam, the husband can optionally enable, in Settings, tracking of his wife's hormonal cycle to personalize the coach's advice. This data (dates, cycle phase) then concerns a third party — the wife — who is not herself the holder of the account it's stored under. It remains encrypted (AES-256-GCM) and is used only to personalize the coach's responses. By enabling this feature in Qawam, the user confirms they have an appropriate basis to provide this information in the context of their marriage, and we encourage openness about it within the couple. Anyone who believes information about them has been entered without an appropriate basis can contact us at [email protected] to request access to, correction of, or deletion of that data.
Why we use this data
To provide the AI coaching service and personalize its responses based on your profile, cycle phase, and couple memory; to manage your subscription and trial period; to send your daily tip; to prevent abuse (rate limiting); and to produce aggregated usage statistics.
Legal basis
Most processing is based on the performance of our contract with you (GDPR Art. 6.1.b) — i.e., providing the service you signed up for. Tracking the wife's cycle in Qawam, which is health data under GDPR Art. 9, relies on explicit consent, given when the user enables this feature in Settings — it can be turned off at any time.
Encryption and security
Your profile, cycle data, and message content are encrypted at rest using AES-256-GCM, with a per-user key derived and held on our servers. This protects your stored data, including in the event of unauthorized database access. This is not end-to-end encryption, however: our servers hold the key and decrypt content when needed to operate the service — in particular, to send your messages to the AI model that generates the coach's responses. Traffic between the app and our servers is also encrypted in transit (TLS).
Who we share data with
We use the following providers (processors under GDPR) to operate the service: • Supabase — database and authentication • Anthropic (Claude) — primary AI model, which processes your message content and any shared screenshots to generate the coach's responses • Google (Gemini) — secondary AI model used in some configurations, with the same access to data as above • RevenueCat — subscription and entitlement management • Expo, Apple, and Google — push notification delivery • Vercel — application hosting • Cloudflare — hosting for qawam.app We do not sell any data, and nothing is shared between Qawam and Sukūn accounts without your explicit consent.
International transfers
Some of these providers are located in, or process data in, the United States (notably Anthropic, Google, RevenueCat, and Vercel). These transfers are governed by Standard Contractual Clauses or an equivalent mechanism recognized by the European Commission as providing an adequate level of protection.
How long we keep your data
Your data is kept for as long as your account is active. You can delete your account and all your data at any time from Settings → "Delete all my data": your profile, cycle data, conversations, and messages are then permanently and cascadingly deleted.
Your rights
Under the GDPR, you have the right to access, rectify, erase, port, restrict, and object to the processing of your data, and to withdraw consent at any time. To exercise these rights, contact us at [email protected]. You can also lodge a complaint with your national data protection authority (CNIL in France).
Age requirement
Qawam and Sukūn are intended for adult users (18+) who are married or in a committed relationship. We do not knowingly collect data about minors.
Cookies
The qawam.app website does not use advertising cookies or third-party trackers. Only the technical connections needed to load fonts (Google Fonts) are made.
Changes to this policy
We may update this policy as the service or applicable regulations evolve. The date of the last update appears at the top of this page.
Contact
For any question about your personal data or this policy, write to us at [email protected].