Privacy Policy
Effective 21 July 2026
Ayah Ink is built local-first. Your notebooks, handwriting, highlights, and notes live on your device, and everything essential works with no account and no connection. This policy explains what leaves your device, when, and why, in plain terms.
Ayah Ink (“the app”) is operated by Northstar Engineering Limited (“we,” “us,” “our”), a company registered in Mauritius. This policy also covers this website. We are the data controller for the limited personal data described below, and we handle it under the Mauritius Data Protection Act 2017. If you are in a region with additional protections, such as the EU/UK under the GDPR, those rights are honored too.
The short version
- Your study content stays on your device unless you turn on optional cloud sync.
- You can use the app fully without an account, a subscription, or a network connection.
- Analytics is off by default. If you turn it on, it is anonymous and never includes your notes, ink, or scripture.
- We do not sell your data, and we do not show ads.
What we collect, and when
Content you create
Notebooks, handwriting and highlights, shapes, page and verse notes, bookmarks, layers, and reading positions are stored locally on your device. This content is not sent to us unless you enable cloud sync (a Pro feature). Local backups you export are files under your control and are not uploaded to us.
Account information
An account is optional. If you create one, we process your email address and an account identifier to authenticate you, through our processor Supabase. Creating an account is required only to purchase Pro, so that your subscription can be restored across your devices.
Cloud sync content
If you enable cloud sync, one private snapshot of your app state is stored in your account so it can be carried across your signed-in devices. It is protected by row-level security so that only your account can read it. Deleting your cloud account removes this snapshot and does not touch the notebooks stored on your device.
Subscription information
Purchases are handled by the app store on your device and by our processor RevenueCat, which records your purchase and entitlement status. We do not receive or store your full payment card details; those are handled by the app store.
Analytics (opt-in)
In-app analytics is off by default. If you enable Anonymous diagnostics in Settings, the app sends a small set of anonymous product events (for example, that a notebook was created or the Pro screen was viewed) to our processor PostHog to help us understand which features are used. These events never include your notes, ink, verse text, or any notebook content. You can turn diagnostics off at any time in Settings.
Online scripture content
The complete Qur’an, its bundled translation, and word-by-word study data ship inside the app and are read offline. When you request reviewed translations, tafsir, or recitation for a selected verse, the app sends that request through our licensed content gateway to retrieve the material. Retrieved content is cached on your device for no more than seven days.
Reminders
If you enable the daily study reminder, it is scheduled as a local notification on your device. No reminder schedule or notification profile is uploaded to us.
This website
This website uses PostHog to measure visits and interactions (such as which links are used), which involves cookies and similar technologies. These load only after you agree: on your first visit a banner lets you accept or decline, nothing is set or sent until you choose, and declining loads no analytics at all. Session recording is disabled. You can change your choice at any time through Cookie settings in the footer. The app’s analytics is separate and controlled by the in-app toggle described above. The site’s fonts are served from our own hosting, so viewing this website sends no request to any font provider.
Launch waitlist
If you join the launch waitlist on this website, the email address you enter is stored with our processor Supabase (hosted in the EU) and used for exactly one thing: a single announcement when Ayah Ink launches. It is not used for other marketing, not shared, and not linked to any app account. We delete the waitlist after that announcement is sent, and you can ask us to remove your address at any time using the contact below.
Who processes data for us
We use a small number of service providers (processors) to run these features. Each receives only what that feature needs.
| Processor | Purpose | What it receives |
|---|---|---|
| Supabase | Accounts, cloud sync, collaboration, launch waitlist | Email, account identifier, and your private synced snapshot (only if you enable these); your email if you join the waitlist |
| RevenueCat | Subscriptions and entitlements | Purchase and entitlement status linked to your account identifier |
| PostHog | Product analytics (app and website) | Anonymous product events; website usage and cookies |
| Qur’an content gateway | Licensed online tafsir, translations, and recitation | The verse reference you request, to fetch the material |
These providers may process data on servers outside Mauritius, including in the EU and the United States. Where that happens, we rely on the providers’ own safeguards for international transfers. Each provider maintains its own privacy policy governing how it handles data.
How long we keep it
- On-device content stays until you delete it or remove the app.
- Your cloud snapshot and account stay until you delete your cloud account.
- Online scripture content cached on your device expires within seven days.
- Analytics events are retained according to PostHog’s retention settings for our project.
- Waitlist emails are kept until the launch announcement is sent, then deleted.
Your rights
Under the Mauritius Data Protection Act 2017 (and the GDPR where it applies), you can request access to the personal data we hold about you, ask us to correct or delete it, object to or restrict certain processing, and request a copy in a portable form. You can delete your cloud account at any time from within the app. To make any other request, contact us at the address below. You also have the right to lodge a complaint with the Data Protection Office in Mauritius, or your local supervisory authority.
Children
Ayah Ink is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided us personal data, contact us and we will delete it.
Security
Your content is local-first, which limits what is exposed in the first place. Cloud data is protected by authentication and row-level security so that only your account can read it. No method of storage or transmission is completely secure, but we work to protect your information appropriately.
Changes to this policy
We may update this policy as the app evolves. When we make a material change, we will update the effective date above and, where appropriate, note it in the app.
Contact
For any privacy question or request, contact Northstar Engineering Limited at adiwani98@gmail.com.