Privacy policy
Effective date: July 21, 2026. Muslim Lantern is operated by MUSLIM LANTERN LLC, a United States limited liability company ('we', 'us'). This policy explains what we collect, why, who we share it with, and the rights you have wherever you live.
The short version
We collect the minimum needed to run and improve the app. We don’t sell or share your personal information for advertising, we don’t run third-party ads, and your questions are never published with your identity. You can schedule deletion yourself, with 30 days to change your mind.
What we collect
- Account data: email address, display name, and profile photo from the sign-in provider you choose (Apple, Google, or email code), and your authentication identifiers.
- Activity data: saves, Ask questions and the answers you receive, your helpful/not-helpful ratings, watch/listen progress, interests, and preference settings.
- Transaction data: shop order references, items, amounts, shipping selections, and subscription entitlement status. Full payment details go directly to Apple, Google, or Shopify — card numbers never touch our servers.
- Community content: questions you submit to the inbox and any reports you file.
- Contact requests: if you use the “Becoming a Muslim” page to reach a real person, we store the name you optionally give, the email or phone you provide, and your message — visible only to the small team that responds, never used for marketing, and deletable on request or with your account.
- Device & diagnostics: push token (only if you enable notifications), device model, OS and app version, language, time zone, IP address at request time, approximate location (country only, derived from your IP — we store the two-letter country code, never your precise location), and crash/performance diagnostics.
- Usage measurement: to count visits and understand engagement — including before you sign in — we store a random, first-party identifier on your device and record a periodic “still here” signal while a page is open. It is ours alone, never shared, used only for our own aggregate counts, and never to track you across other apps or websites. On the web you can clear it any time by clearing site data.
What we deliberately do NOT collect
No advertising identifiers (IDFA/AAID). No precise location. No contact-list, photo-library, or microphone access without an explicit feature action you initiate. No cross-app tracking. No data brokering, ever.
Why we process it (legal bases under GDPR/UK GDPR)
- To provide the service you asked for — accounts, sync, answers, orders, notifications (contract performance, Art. 6(1)(b)).
- To secure and improve the service — diagnostics, abuse prevention, aggregate analytics (legitimate interests, Art. 6(1)(f)).
- With your consent — push notifications, marketing emails, optional interests, and any optional research donation selected when leaving (Art. 6(1)(a)); withdraw research consent through privacy@muslimlantern.app.
- To comply with law — tax, commerce, and lawful requests (Art. 6(1)(c)).
How AI features use your data
When you use Ask, Objection Mode, Conversation Prep, or Lantern Voice, your question (or spoken words, transcribed on your device) and relevant transcript excerpts from published videos are sent to our AI providers to generate a response. Our provider agreements prohibit using your content to train their models. Your questions are stored with your account so you can revisit them. To make answers faster and better for everyone: identical questions may be served from a shared answer cache that stores the question and answer without any link to your account (entries expire on a rolling basis, typically within about a week); and when you rate an answer helpful, the answer text—not your question or identity—may guide how similar future questions are answered. If you schedule account deletion, two separate optional checkboxes let you donate (1) raw questions and answers and/or (2) your ordered usage journey to improve Muslim Lantern. Neither is preselected and declining does not affect deletion. Donated material moves to a restricted research vault under a random identifier; account, contact, device, IP, payment, and precise-location fields are not copied. Because raw questions can contain details you chose to type, donated question text is retained as written. You may withdraw this research consent through privacy@muslimlantern.app. Lantern Voice and spoken answers use an AI voice generated with the speaker’s consent from his published recordings. It is always labeled as AI in the app — it is generated speech, not the speaker, and never a religious ruling. Voice audio generated for you is stored privately for playback and deleted with your account. AI conversations are never sold, published with your identity, or used for advertising.
Who we share with (processors)
Only service providers that make the app work, bound by data-processing agreements: Supabase (database & authentication, hosted on AWS, USA), AI inference providers for Ask, RevenueCat (subscription entitlement management), Shopify (shop & checkout), Apple/Google (sign-in, purchases, push delivery), our podcast host for audio streaming, and crash/analytics tooling. Video playback streams directly from YouTube under YouTube’s own terms and privacy policy. We disclose data beyond this only when the law genuinely requires it, and we object to overbroad requests.
International transfers
Our infrastructure is in the United States. Where GDPR/UK GDPR applies to your use, transfers rely on Standard Contractual Clauses (and the EU-US Data Privacy Framework where our providers are certified).
Retention
Deletion requests have a 30-day recovery period. After it ends, account and associated operational data are deleted, including generated voice audio, contact requests tied to the account or account email, and identified analytics/subscription profiles. Optional research donations are retained while the documented improvement purpose continues, reviewed at least annually, or until consent is withdrawn. Shared answer-cache entries are account-unlinked and expire on a rolling basis, typically within about a week. Order and tax records are retained only where law requires. Account-unlinked diagnostics use rolling short-term windows. Encrypted backups expire on their fixed rotation after deletion.
Security
Encryption in transit (TLS) and at rest, row-level security on every user table, scoped API keys, and least-privilege access for the small team. No system is perfectly secure; if a breach affects you, we will notify you and regulators as the law requires.
Your rights
Everyone: access, correct, export, and delete your data — most of it self-serve in the app. EU/UK/EEA: additionally, restriction, objection, portability, and the right to complain to your supervisory authority. California (CCPA/CPRA): right to know, delete, correct, and portability. We do not 'sell' or 'share' personal information as defined by the CPRA, and we honor Global Privacy Control signals for anything in scope. We never discriminate for exercising rights. Requests: privacy@muslimlantern.app — answered within 30 days (or the timeline your law requires).
Children
The app is not directed at children under 13 (or the higher minimum digital-consent age where you live), and we do not knowingly collect their data. If you believe a child has an account, contact privacy@muslimlantern.app and we will delete it.
Do Not Track & GPC
We do not track you across other companies’ apps or websites, so there is nothing for DNT to disable. Global Privacy Control signals are honored where applicable.
Changes
If this policy changes materially, we will notify you in the app before the change takes effect and update the effective date above.
Contact
MUSLIM LANTERN LLC Privacy requests: privacy@muslimlantern.app Everything else: support@muslimlantern.app