Privacy Policy

Naseeha AI · Last updated: 11 July 2026

This Privacy Policy explains how Naseeha AI ("Naseeha," "the App," "we," "us") collects, uses, and protects your information when you use our iOS application. Naseeha is developed and operated by Mohamed Amer, as an individual developer, based in Germany.

A note specific to Naseeha: because Naseeha's core purpose is helping Muslim investors track halal-compliant portfolios and calculate Zakat, using these features inherently reveals information about your religious beliefs and practices. Under EU data protection law (GDPR Article 9), this is treated as a special category of personal data — the same heightened protection given to health or political data. We ask for your explicit consent to this before you can use the halal screening and Zakat features, and this policy explains exactly what that means.

1. Who is responsible for your data (the "Data Controller")

Mohamed Amer, operating Naseeha AI as an individual developer.
Contact: hello@naseehaai.app

2. What data we collect

Category	Examples	Why
Account data	Email address, or identifiers from Sign in with Apple / Sign in with Google	To create and secure your account
Portfolio data	Asset holdings, purchase/sale lots, quantities, prices, platforms, dates — entered manually or extracted from broker statements you upload	Core app functionality — tracking your portfolio
Uploaded documents	Broker/exchange statement PDFs or CSVs you choose to upload	To extract transaction data via automated processing (see Section 4)
Religious/faith-related data	Use of halal screening results, Zakat calculations, and related preferences	Core app functionality — this reveals your religious practice and is treated as special category data (see Section 3)
Chat messages	Messages you send to the "Naseeha" AI assistant, and its responses	To provide portfolio-aware financial guidance
Device push token	An Apple-issued token identifying your device for notifications	To send price alerts and portfolio digests you've enabled
Support communications	Messages you send via in-app support tickets	To respond to your questions or issues
Usage data	Number of AI chat messages sent per month	To manage service usage tiers

We do not collect precise location, contacts, photos (beyond documents you explicitly choose to upload), or browsing history outside the app.

3. Special category data: halal screening & Zakat

Because engaging with Naseeha's halal-compliance and Zakat features discloses that you are Muslim or practicing Islamic finance principles, this data receives extra protection:

We ask for your explicit, separate consent before these features are activated on your account, distinct from your general acceptance of this policy.
This data is never used for advertising, never sold, and never shared with any third party for marketing purposes.
You can withdraw this consent at any time in Settings, which disables these features and lets you request deletion of related data (see Section 8).
Access to this data internally is limited to what's technically necessary to run the automated screening and calculation features described in Section 4.

4. Automated processing & AI

Naseeha uses AI (Anthropic's Claude models) for three purposes:

Halal screening — analyzing publicly available financial and business information about an asset to assess Shariah compliance. Only the asset's identifying information (e.g. ticker, name) is sent — not your personal or portfolio data.
Portfolio chat assistant ("Naseeha") — your messages, along with relevant portfolio context (holdings, values, Zakat status) needed to answer your question, are sent to Anthropic's API to generate a response.
Statement import — uploaded broker statement documents are sent to Anthropic's API (vision-capable models) to extract transaction data automatically.

Anthropic (PBC, USA) processes this data as our sub-processor under a data processing agreement and Standard Contractual Clauses (SCCs) for international transfer, since Anthropic's infrastructure is US-based. Anthropic does not use data submitted via its API to train its models.

5. Other service providers (sub-processors)

Provider	Purpose	Data involved
Supabase (hosted in Frankfurt, Germany, EU)	Database, authentication, file storage, backend infrastructure	All account and portfolio data described above
Anthropic PBC (USA)	AI processing (see Section 4)	Chat messages, asset identifiers, uploaded statement content
Apple Inc.	Sign in with Apple, push notifications (APNs)	Apple ID identifier (if used), device push token
Google LLC	Sign in with Google (if used)	Google account identifier, basic profile info
CoinGecko, Yahoo Finance, Frankfurter (FX rates)	Public market price data	None of your personal data is sent — these are one-way public data lookups

6. Legal basis for processing (GDPR)

Contract necessity — processing needed to provide the core app functionality you've signed up for (account, portfolio tracking, chat).
Explicit consent — for special category data (halal/Zakat features, Section 3), and for optional push notifications.
Legitimate interest — for basic security, fraud prevention, and service reliability, balanced against your rights.

7. Data retention

We keep your data for as long as your account is active. If you delete your account, your portfolio data, chat history, and uploaded documents are deleted within 30 days, except where we're legally required to retain certain records for longer.

8. Your rights

Under GDPR and similar laws, you have the right to:

Access — request a copy of the personal data we hold about you
Rectification — correct inaccurate data
Erasure — request deletion of your account and associated data
Portability — receive your portfolio data in a portable format
Withdraw consent — for special category data or notifications, at any time
Object — to certain processing based on legitimate interest
Lodge a complaint — with your local data protection supervisory authority

To exercise any of these rights, use the in-app "Clear All Data" option in Settings, or contact us directly (see Section 11).

9. Security

Your data is protected using row-level security (each user can only access their own data at the database level), encryption in transit (HTTPS/TLS), and access controls on our backend infrastructure. No system is completely immune to risk, but we take reasonable, industry-standard measures to protect your information.

10. Children's privacy

Naseeha is not directed at, and should not be used by, anyone under 18. We do not knowingly collect data from minors. If you believe a minor has provided us data, contact us and we will delete it.

11. Contact us

Mohamed Amer
Email: hello@naseehaai.app

12. Changes to this policy

We may update this policy as the app evolves. Material changes affecting special category data or your rights will be highlighted in-app before they take effect.