Privacy Policy

Effective July 9, 2026 · Qawmpass is a product of Rihlah LLC, a New Mexico limited liability company

This policy explains what information we collect through qawmpass.com and the Qawmpass app, how we use it, and the choices you have. Qawmpass is a private family app: parents create and control the family account, and children participate through profiles their parent creates and supervises.

Contact: email@rihlah.tech · Rihlah LLC

1. Information We Collect

From parents

• Account information: your name, email address, and password (stored in hashed form).
• Subscription information: your plan, trial and renewal dates, and identifiers from our payment provider. Payments are processed by Lemon Squeezy (a Stripe company) as merchant of record — we never receive or store your card number.
• Messages you send us, including support requests and waitlist signups (name and email).

From children (through profiles a parent creates)

• A first name or nickname and a sign-in code, both chosen by the parent at profile creation. We do not collect your child's age or birthdate, and we never ask children for addresses, phone numbers, photos, or last names.
• Content the child creates in the app: journal entries and drawings, questions asked to the assistant, reflections, logs of practices (service tasks, Qur'an study, dhikr, kindness notes, promises), leadership notes, and small-business ledger entries.

Automatically

• Basic technical data needed to run and secure the service: IP address, device and browser type, and log events.
• Aggregate usage statistics collected in a privacy-respecting way, used only to keep Qawmpass working well. We do not use advertising trackers and we do not track anyone across other sites or apps.

2. How We Use Information

• To provide the service: accounts, child profiles, journals, practice tracking, book-making, and parent insights (parents see themes from a child's activity — not a surveillance feed).
• To operate the AI assistant (Section 4).
• To manage subscriptions, trials, renewals, receipts, and support.
• To secure the service, prevent abuse, and comply with law.
• To email you: transactional messages (receipts, renewal reminders, consent notices) and, with your consent, product updates. Every marketing email includes an unsubscribe link.

We do not use your family's information for advertising, we do not sell or rent it, we do not share it for cross-context behavioral advertising, and we do not permit it to be used to train artificial-intelligence models.

3. Children's Privacy (COPPA Notice)

This section, together with the direct notice parents receive at signup, is our notice under the Children's Online Privacy Protection Act (COPPA) and 16 CFR Part 312.

Operator collecting information from children: Rihlah LLC (doing business as Qawmpass), email@rihlah.tech.

What we collect from children and how: the profile name or nickname and sign-in code entered at profile creation; content the child creates in the app (journal entries, drawings, questions to the assistant, practice logs, ledger entries); and the technical and log data described above. We collect no more than is reasonably necessary for a child to participate — we do not even collect a child's age — and children can use every feature without disclosing more.

How we use it: solely to provide the app's features to the family, generate the parent's insights view, answer the child's questions through the assistant, and keep the service secure. Children's information is never used for marketing or advertising, is never sold, and is never used to train AI models.

Who it is shared with: only service providers that host or process data so the app can function, under contracts limiting them to that purpose:

We do not disclose children's personal information to any other third parties. Because we make no non-integral third-party disclosures, no separate disclosure consent is required — if that ever changed, we would ask parents first.

Parental consent: we obtain verifiable parental consent before a child profile becomes active, and a parent may consent to our collection and use of their child's information without consenting to any disclosure to third parties other than the integral service providers listed above.

Your rights as a parent. At any time you may: review your child's information (parent dashboard, or ask us); have it deleted (delete an entry, a profile, or the whole account in the dashboard, or ask us); refuse to permit further collection or use (deactivate the profile or close the account); and consent to collection without consenting to third-party disclosure. To exercise any right by request, email email@rihlah.tech from your account email; we verify that the request comes from the parent account holder and respond within 30 days. The service works the same for families who exercise these rights, though deleting information a feature needs may limit that feature.

Data retention (our published retention policy)

We keep children's personal information only as long as reasonably necessary for the purposes above — never indefinitely:

A note on age. Qawmpass child profiles are designed for children under 13 under a parent's direction. If we learn we have collected personal information from a child without verifiable parental consent, we will delete it promptly.

4. The AI Assistant

When a child (or parent) asks the assistant a question, the question and limited relevant context are sent to Anthropic's Claude API to generate an answer grounded in the Qur'an and authenticated hadith collections, with sources shown. Under our agreement with Anthropic, this content is used only to generate the response, is subject to limited retention, and is not used to train AI models. The assistant is an automated AI tool — it is not a person, and it is not a scholar or mufti; see our Terms of Service for the full disclaimer. Parents can review the assistant's use from the parent dashboard.

5. Sensitive Information and Your Consent

By its nature, Qawmpass content may reveal religious beliefs and practices — yours and your child's. We treat all such content as sensitive information: we use it only to provide the service, we never sell it, never use it for advertising, and never disclose it except to the integral service providers above. Where law requires consent to process sensitive information (including religious information and any personal information of a known child), we rely on the express consent you give at signup, which you may withdraw at any time by closing your account.

6. Security

We maintain a written information-security program appropriate to the sensitivity of the data we hold, including encryption in transit and at rest, database-level access rules isolating each family's data, least-privilege access controls, multi-factor authentication on administrative systems, vendor security review, and an annual risk assessment. No system is perfectly secure; if a breach affects your information we will notify you as required by law.

7. Your Privacy Rights (All Users)

Wherever you live, you can: access and export your family's data; correct it; delete it; and object to or restrict our processing. US state privacy laws may give you specific versions of these rights and the right to appeal a refusal. To exercise any right, use the parent dashboard or email email@rihlah.tech; if we refuse a request you may appeal by replying, and we will respond within the statutory period. We do not sell personal data or process it for targeted advertising — for anyone, and for minors categorically.

8. Where the Service Is Offered; International Users

Qawmpass is operated from the United States, data is stored in the United States, and the service is offered to residents of the United States. It is not directed to residents of the European Union, EEA, or United Kingdom. If you access the service from elsewhere, you do so understanding your information will be processed in the US.

9. Changes and Contact

If we make material changes to this policy — and always before any new use or disclosure of children's information beyond what parents consented to — we will notify parents by email and obtain new consent where required. Continued use after non-material changes constitutes acceptance. The current version is always at qawmpass.com/privacy.html with its effective date.

Questions or requests: email@rihlah.tech · Rihlah LLC