Privacy Policy — RawiLoom
1) Who we are
RawiLoom is provided by Saifullah Ahad. Contact www.saifullah.ai@gmail.com or visit saifullah.ai.
2) What RawiLoom does
RawiLoom is a hadith study application with an offline source library, reviewed narrator-chain graphs, cross-collection wording comparison, private bookmarks and notes, and optional live study circles.
Reading, searching, narrator graphs, wording comparisons, bookmarks, and personal notes work on-device. A network connection is used only for study-circle identity, synchronization, moderation, reports, presence, and notifications.
3) Data stored only on your device
- The read-only hadith corpus and narrator-graph pack.
- Bookmarks, bookmark folders, personal notes, and reading positions.
- Local blocked-member filtering needed to hide content immediately.
RawiLoom disables Android cloud backup. Clearing app storage or uninstalling removes this local data. Personal notes are not uploaded to study circles.
4) Data processed for study circles
RawiLoom creates an anonymous Firebase identifier so public circle listings can load without gating the offline library. Before a person creates or joins a circle, the app asks them to connect Google sign-in. The following data may then be processed:
- Firebase user ID, Google account email and display name.
- Circle names, invite membership, messages, threaded replies, host position, reading plans, member progress, and recent presence.
- Reports, blocked-user relationships, owner-removal actions, moderation status, and server-side rate-limit records.
- Firebase Cloud Messaging device tokens for circle-start and reply notifications.
- Technical request metadata normally processed by Google Firebase and Cloudflare, such as IP address, timestamps, and security logs.
5) How data is used
- Authenticate members and prevent removed accounts from rejoining a circle.
- Synchronize the host's current narration, presence, discussion, plans, and progress.
- Screen abuse before a post is stored, enforce posting limits, and investigate reports.
- Deliver optional circle notifications and protect the service from misuse.
RawiLoom does not use study-circle content for advertising, profiling, or sale.
6) Service providers and international processing
Google Firebase provides Authentication, Cloud Firestore, and Firebase Cloud Messaging. Cloudflare Workers provides the server-side moderation and write gateway. These providers may process data in countries outside your own under their privacy and security terms.
7) Moderation, reports, and child safety
Circle posts are screened and rate-limited on the server before they reach Firestore. Members can report every message and block its author; circle owners can remove members. Reports are stored in a restricted review queue. Our separate Child Safety Standards prohibit child sexual abuse and exploitation, grooming, and sectarian or identity-based abuse.
8) Retention
Circle content remains while the circle continues, unless it is removed through moderation, owner action, or account deletion. Presence data is used as short-lived activity state. Open reports and limited audit records may be retained as reasonably necessary for safety, legal compliance, abuse prevention, and dispute handling. FCM tokens are replaced or deleted when the circle identity is deleted.
9) Your controls
- Reading never requires Google sign-in.
- You can block a member or report any message from its safety menu.
- You can disable notifications in Android Settings.
- Open Sources & developer → Delete circle identity & cloud data to close circles you own, remove memberships, hide authored messages, delete notification tokens and blocks, and delete the Firebase identity.
- You can also follow the public account and data deletion instructions or email us.
Offline bookmarks and notes are separate from the circle identity and can be erased by clearing app storage or uninstalling.
10) Children
RawiLoom is not directed to children under 13, or the equivalent minimum age in their jurisdiction. We do not knowingly permit a child below that age to create a study-circle account. Suspected child exploitation should be reported using the in-app action and to www.saifullah.ai@gmail.com.
11) Security
Direct client writes to circle messages, membership, reports, moderation, blocks, and notifications are denied by Firestore rules. Authorized writes pass through a server-side identity check, content screen, membership check, and rate limiter. No method of transmission or storage can be guaranteed completely secure.
12) Changes and contact
Updates will appear at this URL with a revised effective date. Privacy, deletion, or safety questions may be sent to www.saifullah.ai@gmail.com.