Privacy Policy

Effective date: 2026-05-25 Last updated: 2026-05-25

Falah ("we", "us", "our") respects your privacy. This Privacy Policy explains what data we collect when you use the Falah mobile app ("Service"), how we use it, who we share it with, and the rights you have over it.

By using Falah you agree to the practices described here.

1. What we collect

Information you give us

Information collected automatically

Information we do NOT collect

2. How we use your data

We do not sell your data, share it with data brokers, or use it for advertising.

3. Third-party processors

Your data flows through the following service providers strictly to deliver the app's functionality:

Provider Purpose Data shared
Supabase (PostgreSQL + Storage + Edge Functions) Account storage, audio files, server-side logic Account data, goals, generated audio
Anthropic (Claude) Drafting affirmation script text from your goal Your goal text, no account identifier
OpenAI (GPT-4o-mini) Fallback script drafting when Anthropic is unavailable Same as above
ElevenLabs Text-to-speech rendering + optional voice cloning Script text, voice sample (if you opted in)
Apple App Store / Apple Push Notifications Subscription billing, push delivery Transaction receipts, device push token
RevenueCat Subscription state management App Store receipt, anonymous user ID
PostHog (analytics, when enabled) Aggregate product analytics Pseudonymous event stream
Google Cloud (Sign-In) Optional Google sign-in only OAuth ID token

Each processor is contractually obligated to handle your data only as instructed and to maintain industry-standard security.

4. AI processing disclosure

Falah uses generative AI to write affirmation scripts and synthesize voice audio. Specifically:

This processing happens only when you explicitly create or regenerate a session and only after you have granted AI consent in the onboarding screen. You can revoke AI consent any time in Settings → AI & Data.

Per the EU AI Act Article 50 and Apple App Store guideline 5.1.2(i), provider names are disclosed in three places: the onboarding consent screen, Settings → AI & Data, and the App Store description.

5. Data retention

You may request deletion at any time via Settings → Delete Account. The deletion cascade purges Supabase Storage, the ElevenLabs cloned voice (if applicable), the Auth row, and your RevenueCat customer record.

6. Your rights

Depending on where you live, you may have the right to:

Most of these are self-serve in the app (Settings → AI & Data, Settings → Delete Account). For others, email us at the address below.

7. Children

Falah is rated 17+ on the App Store and is not directed at children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect data from children. If we learn that we have, we will delete it promptly.

8. International transfers

Our processors operate globally. Your data may be processed in the United States, the European Union, or other regions where our providers maintain infrastructure. We rely on standard contractual clauses and equivalent safeguards where required.

9. Security

We use TLS 1.2+ for all network traffic, row-level security on the database, signed-URL access for private storage, and OS-level secure storage for tokens on the device. No system is perfectly secure — please use a strong account password and enable device biometrics.

10. Subliminal positioning and medical disclaimer

Falah is a personal development tool for self-reflection. It is not a medical device. The app does not diagnose, treat, cure, prevent, or manage any disease or condition. Audio sessions are intended for relaxation and intentional reflection only and are not a substitute for professional medical, psychological, or therapeutic care.

11. Halal compliance note

Falah is engineered to remain halal-aligned: the audio underlay contains only natural ambient recordings, white/brown/pink noise, low-Hz tones, or silence — never music with melodic structure. Generated affirmations avoid shirk-adjacent framings (no "the Universe", no "I create my reality"). See our internal compliance documentation for details.

12. Changes to this Policy

When we materially change this Policy, we update the "Last updated" date above and, where appropriate, notify you in-app. Continued use after a change constitutes acceptance.

13. Contact

Questions, deletion requests, or concerns:

Email: hello@khadinakbar.com Repository / changelog: https://github.com/khadinakbarlabs/subliminal-maker