AskMeryamAskMeryam is an Islamic mental-health companion. People open it on hard days and write things they would not tell anyone else, so this policy says plainly what we keep, why, who else touches it, and how to delete it.
The short version: we collect what the app needs to work and nothing more. We do not sell your data, show ads, or use tracking, analytics or advertising SDKs. You can delete your account and everything stored with it from inside the app at any time.
Who we are
AskMeryam is made by Deploy & Enjoy Ltd, a company registered in England and Wales (company number 17371081) whose registered office is Unit 7 Oris Studios, 26 Grosvenor Way, London E5 9UQ, the data controller for the information described here. Contact: askmeryam@deployenjoy.com.
What we collect, and why
| Information | Why |
|---|---|
| Email address, password (stored hashed by our authentication provider), and the username you choose | To create and secure your account |
| Journal entries, mood check-ins, worksheet answers, dhikr counts, programme progress | To save your work and show your progress back to you |
| Conversations with Meryam, and the short summary she keeps so she remembers you between chats | To provide the AI companion. You can clear her memory in Roots at any time |
| Community posts, reactions, messages, friends, groups, blocks and reports | To run the community features and keep them safe |
| A push-notification token for your device | To deliver messages and reminders you have turned on |
| The city you choose for prayer times | To calculate prayer times. We ask for a city, never your precise location |
| Basic in-app activity (for example which tools you opened, and when) | So Meryam can offer relevant help and so gentle check-ins know when you have been away. Not used for advertising |
Some of this, such as mood check-ins and what you write about your mental health, counts as health data, a special category under UK GDPR. We process it only with your explicit consent, which you give when you choose to use these features, and you can withdraw it at any time by deleting the content or your account. What Meryam may read (journal, worksheets, moods, activity) is controlled by the switches under What Meryam can see in Roots, and her server checks them on every request. Your journal and worksheets stay off unless you switch them on, and before your first conversation Meryam asks you to agree to what is sent to the AI service she runs on (Anthropic, listed below). It is sent anonymously: your name is replaced before anything leaves our servers, and your email and account are never sent.
Some features work without an account. In that case what you do stays on your phone and never reaches our servers.
Who else processes it
We use a small number of service providers who process data on our behalf under contract, and only to run the app:
| Provider | What for | What they receive |
|---|---|---|
| Supabase | Database, accounts, server functions | Everything stored with your account. Hosted in the European Union (Ireland) |
| Anthropic | The AI model behind Meryam | The messages in a conversation and the context Meryam is allowed to use. With your name replaced, and never your email or account. Anthropic does not train its models on this data through its commercial API |
| Sentry (Functional Software, Inc.), EU region | Crash and error reports, so we can fix bugs | Technical details of the error: stack trace, app version, device model and OS. No account details, no screenshots, and nothing you have typed. Stored in Frankfurt, Germany |
| RevenueCat | Managing subscriptions across the App Store, Google Play and the web | An anonymous account id (or your AskMeryam account id), your purchase history and subscription status. No journal, mood or conversation data |
| Apple, Google | Taking in-app payments | Your payment is handled entirely by Apple or Google; we never see your card details |
| Stripe | Taking web payments and therapist listing fees | Your name, email and payment details, handled by Stripe; we never see your full card number |
| Resend | Sending account and receipt emails | Your email address and the email's content |
| Google Firebase Cloud Messaging | Delivering push notifications | Your device token and the notification text |
| Aladhan prayer-times API | Prayer times | The city and country you chose. No account details |
| Recitation audio servers (mp3quran.net) and our own storage | Streaming Qur'an recitation and sleep audio | Standard web requests (your IP address). No account details |
Read-aloud uses your phone's own text-to-speech engine. On some Android phones that engine is Google's and may use its network voices; this is governed by your phone's settings, not by us.
Some providers are based outside the UK. Where data leaves the UK it is protected by the UK International Data Transfer Addendum or an adequacy decision.
What we never do
- Sell or rent your data, or share it for advertising.
- Use advertising identifiers, tracking pixels or data brokers.
- Show your real name to other community members. Posts appear under a pseudonym.
- Read your journal or conversations ourselves, except where you report content to us, where the law requires it, or to investigate a safety report about community content.
Safety
If a message suggests someone may be in immediate danger, the app shows crisis resources such as emergency numbers and helplines. AskMeryam does not contact emergency services on your behalf.
Therapists who list in the directory
If you apply to be listed, we keep the details you give us to verify your registration and run your listing. Your name, title, registering body, registration number, approaches, languages, location, fees, biography and any public contact details are shown to app users while your listing is active. Your private email, phone number, verification notes and billing references are never shown. Stripe handles your payments. Ask us at any time to remove your listing and your data.
How long we keep it
We keep your data while your account exists. When you delete your account, everything linked to it is deleted from our live database straight away. Backups held by our database provider roll over and are gone within 7 days. Reports you make about content are removed along with your account.
Deleting your account
In the app, go to Roots → Delete account. If you can no longer get into the app, see how to request deletion.
Your rights
Under UK GDPR you can ask to access, correct, delete or receive a copy of your data, object to or restrict how we use it, and withdraw consent. Email askmeryam@deployenjoy.com and we will reply within one month. You can also complain to the Information Commissioner's Office at ico.org.uk.
Children
AskMeryam is intended for people aged 18 and over. We do not knowingly collect data from younger users; if you believe a child has an account, contact us and we will delete it.
Changes
If we change this policy in a way that affects you, we will tell you in the app before the change takes effect.