Privacy Policy

This Privacy Policy explains how Isnad handles information when you use the Isnad website, AI assistant, Telegram bot, Telegram Mini App, saved conversations, learning tools, library features, and related services.

Isnad is designed to collect only the information reasonably needed to operate, secure, personalize, and improve the service.

Depending on how you use Isnad, we may process the following:

• Telegram account information: Telegram user ID, first and last name, username, language code, and other account details Telegram makes available to the Mini App or bot.
• Profile and preference information: display name, bio, language, answer-length preference, Arabic display preference, transliteration preference, citation depth, madhhab context, theme, and memory setting.
• Conversation content: questions, messages, AI responses, conversation titles, routing metadata, citations, and related history when persistent history is enabled.
• Saved learning and library data: bookmarks, notes, saved conversations, course or lesson progress, and similar data when you use those features.
• Usage and service events: internal event names, feature activity, timestamps, model information, citation counts, latency, and similar operational analytics.
• Security and technical data: request metadata needed to authenticate Telegram sessions, prevent abuse, deduplicate Telegram updates, enforce rate limits, and diagnose service errors. For anonymous web requests, an IP address may be processed in transit and a one-way hash derived from a request identifier may be used for rate limiting.

If you use the public web chat without an authenticated Telegram session, Isnad does not create a persistent Isnad account for that request and does not add the conversation to your Isnad conversation history.

Your prompt still must be processed by the AI provider to generate a response, and limited technical data may be processed for security, abuse prevention, rate limiting, and service reliability.

• Provide and personalize Islamic knowledge features.
• Authenticate Telegram Mini App and bot sessions.
• Save conversations, settings, notes, bookmarks, and learning progress.
• Generate AI responses and source-aware citations.
• Maintain conversation memory when you enable it.
• Prevent abuse, enforce rate limits, and protect the service.
• Measure reliability and improve product quality.
• Comply with legal obligations and enforce applicable terms.

Isnad uses OpenAI to generate AI-assisted responses. To answer a question, Isnad may send the question, recent conversation context, relevant system instructions, and necessary response preferences to OpenAI.

Do not submit passwords, API keys, wallet seed phrases, private keys, government identification numbers, or other secrets that are not necessary for your question.

Isnad relies on service providers to operate the product. These may include:

• Telegram for bot and Mini App identity, delivery, and platform features.
• OpenAI for AI response generation.
• Vercel for website hosting, deployment, and application infrastructure.
• Database and infrastructure providers used to store persistent account and application data.

We may also disclose information when reasonably necessary to comply with law, respond to valid legal process, protect users, investigate abuse, or defend the rights and security of Isnad.

Isnad does not currently sell personal information and does not currently use third-party advertising trackers to build advertising profiles from your use of Isnad.

If this changes in a way that materially affects your privacy, this policy will be updated before the new practice is applied where required.

Persistent account information, conversations, preferences, saved content, learning records, and internal analytics may be retained for as long as reasonably needed to provide the service, maintain security, resolve disputes, meet legal obligations, and preserve legitimate operational records.

Archiving or removing a conversation from active history does not necessarily mean the underlying database record is immediately and permanently erased.

You may request access, correction, or deletion of personal information where applicable. Requests may require verification before we act on them, and some information may be retained when required or permitted by law.

Isnad uses technical safeguards intended to reduce unauthorized access and misuse. Telegram Mini App identity data is validated using Telegram's signed authentication data, sensitive application secrets are kept server-side, and application logging is designed to redact common secret-bearing fields.

No online system can guarantee absolute security. You should use reasonable care when deciding what information to submit.

• Adjust available profile, language, display, citation, theme, and memory settings.
• Choose whether to use Isnad through the public web or an authenticated Telegram experience.
• Avoid submitting information that is not needed for your question.
• Request access, correction, or deletion where applicable law provides those rights.

Isnad is not intended to knowingly collect personal information from children in violation of applicable law. Telegram's own eligibility and account rules also apply when Isnad is used through Telegram. If you believe a child's information has been collected improperly, contact the project so the matter can be reviewed.

Isnad and its service providers may process information in countries other than the country where you live. Privacy protections and legal requirements may differ by jurisdiction.

We may update this Privacy Policy as Isnad changes. The effective date at the top of this page will be revised when the policy changes. Material changes may also be communicated through the site or other appropriate Isnad channels.

For privacy questions, access requests, correction requests, or deletion requests, use the contact information published by the official Isnad project account.

The current project profile is available at github.com/gwapupward-hub. Do not post passwords, private keys, seed phrases, API keys, or other secrets in a public issue or message.