Privacy Policy

Last updated: June 17, 2026

This Privacy Policy describes what information IsItSahih ("we", "our", or "the service") collects when you use isitsahih.app, how it is used, and what controls you have.

1. Information We Collect

When you submit a claim for verification, we collect and log:

The claim text you submitted
Verdict and result returned by the verification pipeline
Session ID — a random identifier stored in your browser's localStorage. It is generated locally and never linked to your name, email, or account.
Device information derived from your User-Agent string: device type (mobile/desktop/tablet), operating system, and browser name
Approximate location derived from your IP address by Netlify's infrastructure: country, city, and region. We do not log your raw IP address or precise GPS coordinates.
Browser language preference (Accept-Language header)
Language selection (English or Bangla) you chose in the app

We do not collect your name, email address, account credentials, payment information, or any form of persistent personal identifier beyond the anonymous session ID described above.

2. Shared Results

Every verification automatically creates a permanent, publicly accessible link at https://isitsahih.app/share/{id}. This link contains the claim text, verdict, explanation, and Islamic source references. If you share this link with others, they can read the result. Do not submit personal or sensitive information as a claim.

Shared results are stored indefinitely in Netlify Blobs and may be indexed by search engines and AI crawlers.

3. How We Use This Information

To operate the verification service
To monitor service health, detect abuse, and improve the pipeline
To understand aggregate usage patterns (e.g., which languages are used, which regions use the service)
To log API usage for internal quota management

We do not sell your data to third parties. We do not use your data for advertising.

4. Analytics

We use Google Analytics 4 (GA4) to measure aggregate page views and user interactions. GA4 may set cookies and collect anonymised usage data. You can opt out using the Google Analytics Opt-out Browser Add-on.

5. Third-Party Services

Netlify — hosting, serverless functions, Blobs storage, and geo-location derived from IP
Kalimat.dev — semantic search API used to retrieve relevant Quran and Hadith passages. Your claim text is sent to Kalimat's servers.
Google Gemini API — AI model used to generate the verdict and explanation. Your claim and the retrieved references are sent to Google's servers.
Google Analytics — anonymised usage analytics
Google Fonts — font delivery (Inter, Noto Naskh Arabic, Noto Sans Bengali)

6. Cookies and Local Storage

We store two items in your browser's localStorage:

Session ID (iss_session) — a random UUID generated in your browser. Used to group your requests in our logs. Does not identify you personally.
Language preference (iss_language) — stores your selected language (English or Bangla) so it persists across visits.

Google Analytics may set its own cookies (_ga, _ga_*). These are subject to Google's privacy policy.

7. Data Retention

Verification logs (claim text, verdict, device info, approximate location) are stored in Google Sheets and retained until manually deleted. Shared result blobs are stored indefinitely unless we receive a removal request.

8. Your Rights

If you would like to request deletion of a shared result or any logged data associated with your session, please contact us at isitsahih@gmail.com with the share URL or your session ID (visible in your browser's localStorage under iss_session).

9. Children

This service is not directed at children under 13. We do not knowingly collect information from children.

10. Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top of this page will reflect the most recent revision. Continued use of the service after a change constitutes acceptance of the updated policy.

11. Contact

isitsahih@gmail.com