1. Who we are
The 99 Names of Allah ("the App", "we", "us", "our") is operated by Biruni Intelligence, based in United Arab Emirates.
For any question about this policy, or to exercise any privacy right described below, email us at contact@themathemysticsarchive.com. We aim to respond within 30 days.
We are the data controller responsible for the personal information described in this policy.
2. What this policy covers
This policy explains what personal information the App collects, why we collect it, who it is shared with, how long we keep it, and the choices you have. It applies to the App on iPhone, iPad and the web.
We have written it to be readable. If anything is unclear, please ask us.
3. Information you give us
Account information. To create an account you provide an email address and a password. We use your email address to verify your account with a one-time code, to let you sign in, to send password-reset messages, and to contact you about your account or important service changes. Passwords are handled and stored in hashed form by our platform provider; we never see or store your password in readable form.
Your settings. We store your preferred display language and your notification preference so the App behaves the way you set it.
Your spiritual progress. When you mark a Divine Name as understood, reflected upon, or acted upon, we store that marker together with a timestamp so your Journey view and progress charts work.
Your personal reflections. If you write a journal reflection against a Name, we store the text you write. These reflections are private. They are visible only to you. They are never published, never shown to other users, never used for advertising, never used to train artificial intelligence models, and never sold. Access is enforced at the database level: our data rules permit reading, writing and deleting a reflection only by the account that created it.
4. Information collected automatically
Usage information. When you are signed in, our platform records which page of the App you have opened. We use this only to understand which parts of the App are used and to keep the service working. We do not build advertising profiles from it.
Technical information. Standard technical data such as your IP address, device type, operating system version and timestamps is processed by our hosting provider to deliver the service, keep it secure, and diagnose faults.
On-device storage. The App stores a small amount of information on your device to keep you signed in and remember your language choice — specifically a session token, your app and server identifiers, and your selected language. This is stored in your browser's or the app's local storage. Signing out or deleting the App clears it.
5. What we do NOT collect
We want to be specific, because this matters:
- We do not collect your location.
- We do not access your camera, microphone, photos, contacts, calendar, or health data.
- We do not use advertising networks, advertising identifiers, or any third-party analytics or tracking software.
- We do not track you across other apps or websites, and we do not ask for permission to do so, because we have no reason to.
- We do not process payments and the App contains no purchases.
- We do not sell, rent, or trade your personal information to anyone, for any purpose.
6. Why we process your information, and our legal basis
- Purpose
- Legal basis (UK/EU GDPR)
- Creating and authenticating your account
- Performance of a contract with you
- Storing your progress, reflections and settings
- Performance of a contract with you
- Sending account, verification and password-reset emails
- Performance of a contract with you
- Keeping the App secure and preventing abuse
- Our legitimate interests
- Understanding which features are used, to improve the App
- Our legitimate interests
- Complying with legal obligations
- Legal obligation
Where we rely on legitimate interests, we have considered your rights and have limited what we process to what is necessary.
7. Who we share information with
We do not sell your information. We share it only with the following categories of recipient, and only so the App can function:
Our platform and hosting provider. The App is built and hosted on the Base44 platform (Base44, Inc. and its affiliates), which provides our database, authentication, backend functions, email delivery, file storage and content delivery. Base44 processes this data on our instructions under a data processing agreement. Base44 states that it is SOC 2 Type II audited and ISO 27001 certified. You can read Base44's privacy policy at https://base44.com/privacy-policy.
Sub-processors used by our platform provider. These include cloud storage and content-delivery services used to serve audio recitations and images, and an email delivery service used to send verification and password-reset emails (these arrive from the base44-apps.com domain).
Professional advisers and authorities. We may disclose information where we are legally required to do so, or where necessary to establish, exercise or defend legal claims.
Every third party with access to your data is bound by contract to protect it to a standard at least equal to that described in this policy, and may use it only to provide services to us.
8. Where your information is stored, and international transfers
Our platform provider's servers are located in the United States, and your information is stored there by default.
If you are located in the United Kingdom, the European Economic Area, or another region with data transfer restrictions, this means your personal information is transferred outside your home region. These transfers are covered by contractual safeguards including Standard Contractual Clauses, adequacy decisions, or participation in the EU–US Data Privacy Framework, as applicable to each recipient.
9. How long we keep your information
We keep your account information, progress and reflections for as long as your account is open.
When you delete your account, we delete your data. The App includes a "Delete Account" control on the Profile screen. Using it permanently deletes your account record and every progress marker and journal reflection associated with it. This is immediate and cannot be undone.
Residual copies may persist in our provider's encrypted backup systems for a limited period before those backups are overwritten in the normal course. Those copies are not accessible for ordinary use and are not restored to live systems.
We may retain a minimal record of the fact of deletion where necessary to comply with legal obligations.
10. Your rights and how to exercise them
Everyone. You can view and edit your settings and reflections at any time inside the App. You can delete your entire account and all associated data from the Profile screen. You can sign out at any time.
If you are in the UK or EEA (UK GDPR / GDPR), you have the right to: access your personal information; have inaccurate information corrected; have your information erased; restrict or object to processing; receive your data in a portable format; and withdraw consent where processing is based on consent. You also have the right to lodge a complaint with your national supervisory authority.
If you are in California (CCPA/CPRA), you have the right to know what personal information we collect and how it is used; to request deletion; to correct inaccurate information; and to not be discriminated against for exercising these rights. We do not sell or share your personal information for cross-context behavioural advertising, and we have not done so in the preceding twelve months.
If you are in South Africa (POPIA), you have the right to be notified of the information we hold, to access and correct it, to object to processing, and to lodge a complaint with the Information Regulator.
If you are elsewhere, you may have equivalent rights under your local law. Contact us and we will honour them.
To exercise any right, email contact@themathemysticsarchive.com from the address associated with your account. We may ask you to confirm your identity before acting on the request.
11. Children
The App is not directed at children under 13 (or under 16 where local law sets a higher age), and we do not knowingly collect personal information from them. If you believe a child has created an account, email us at contact@themathemysicsarchive.com and we will delete it promptly.
12. Security
We take the protection of your reflections seriously. Measures in place include:
- All traffic between the App and our servers is encrypted using TLS.
- Data is encrypted at rest by our platform provider.
- Access to your progress and journal reflections is enforced at the database level so that only your own account can read, modify or delete them.
- Passwords are hashed by our platform provider and are never visible to us.
- New accounts require verification of the email address via a one-time code.
- Our platform provider maintains SOC 2 Type II and ISO 27001 certification.
No system is completely secure. If we become aware of a breach affecting your personal information, we will notify you and the relevant authorities as required by law.
13. Sessions
Signing in creates a session that lasts up to 90 days on that device. Signing out, clearing the App's data, or deleting the App ends it.
14. Notifications
Any reminders provided by the App are shown inside the App while you are using it. The App does not send push notifications to your device and does not request permission to do so.
15. Links to other services
The App contains links to third-party websites, including an online bookseller and social media platforms used for sharing. We do not control those sites and are not responsible for their content or privacy practices. Their policies apply once you leave the App.
16. Changes to this policy
We may update this policy. If we make a material change, we will update the "Last updated" date above and, where the change significantly affects your rights, notify you within the App or by email. Continued use of the App after a change takes effect means you accept the updated policy.
17. Contact
Biruni Intelligence
Email: contact@themathemysticsarchive.com
This policy is published in English. Translations, if provided, are for convenience; the English version governs.