Privacy Policy
This policy explains what data the Qawam and Sukūn apps process, how it is protected, and the rights available to you. Last updated: September 26, 2026.
Who we are
Qawam and Sukūn are two AI relationship-coaching apps published by H A R S VENTURES CO W.L.L, a limited liability company incorporated in Bahrain under commercial registration number 188858-1, with its registered office at Office 39, Building 111, Road 385, Al Khalifa Avenue, Block 304, Capital Governorate, Manama, Al Asimah, Bahrain ("we", the data controller). Qawam is for the husband, Sukūn for the wife, two independent accounts that share the same technical infrastructure and the same privacy policy.
Data we collect
Account: email address and password (or passwordless sign-in link), managed by our authentication provider, Supabase. Signing in with Apple or Google (optional): if you choose “Sign in with Apple” or “Sign in with Google”, we receive the account identifier and the email address the provider passes on. Apple may offer you a private relay address; we take it as given and make no attempt to trace it back to your real address. For Apple, we also keep an encrypted refresh token, for the sole purpose of revoking your authorization with Apple when you delete your account. Relationship profile: your answers during onboarding (temperament, love language, conflict style, tension topics, cultural background, length of marriage, etc.), stored encrypted (AES-256-GCM). AI coach conversations: the content of your messages, plus conversation titles and summaries, stored encrypted (AES-256-GCM). Mood and relationship satisfaction: your daily mood (Sukūn) and weekly relationship satisfaction (both apps), on a 1-5 scale, used to personalize the coach and, if enabled, feed the insight shared with your spouse. Screenshots (optional): if you share a screenshot of a conversation for the coach to analyze, the image is sent to the AI model for that single request and is not stored in our database. Only a flag noting that a message included an image is kept. Subscription data: subscription tier, trial dates, RevenueCat customer ID, remaining credits, and billing events (e.g. "trial started"). Notifications: a push subscription token (a Web Push subscription in your browser, or a native token via Apple APNs on iOS and Firebase Cloud Messaging on Android in the app), used to send your daily tip. Referral code (optional), entered at sign-up. Preferences: language and display theme. Voice dictation (optional): if you use the microphone button to dictate a message, the audio is processed by your phone's built-in speech recognition (Apple or Google). We do not receive, store, or transmit any audio recording; only the transcribed text, which you can review and edit before sending, is processed like a normally typed message.
Menstrual cycle tracking
In Sukūn, you can enable tracking of your own hormonal cycle to receive advice tailored to each phase. This is your own health data, processed as described above (encrypted with AES-256-GCM, based on your explicit consent). In Qawam, the husband can optionally enable, in Settings, tracking of his wife's hormonal cycle to personalize the coach's advice. This data (dates, cycle phase) then concerns a third party, the wife, who is not herself the holder of the account it's stored under. It remains encrypted (AES-256-GCM) and is used only to personalize the coach's responses. Before any dates are entered, Qawam asks the husband to confirm explicitly that his wife knows about this tracking and agrees to it. The confirmation is required both during initial setup and when he turns the feature on from Settings: without it, no cycle data is recorded. We also encourage couples to talk about it openly. Anyone who believes information about them has been entered without their agreement can contact us at privacy@qawam.app to request access to, correction of, or deletion of that data.
Sharing an insight with your spouse
If you enable it in Settings, the AI can, after certain conversations, generate a short insight to share with your spouse (for example, a note about your state of mind or an expressed need). This insight is never sent automatically: you review it and choose whether to share or dismiss it each time. An unreviewed insight expires after 48 hours without being shared. Your spouse only ever sees the text you approved, never the content of your conversations. You can disable this option at any time in Settings.
Why we use this data
To provide the AI coaching service and personalize its responses based on your profile, cycle phase, and couple memory; to manage your subscription and trial period; to send your daily tip; to prevent abuse (rate limiting); and to produce aggregated usage statistics.
Legal basis
Most processing is based on the performance of our contract with you (GDPR Art. 6.1.b), i.e., providing the service you signed up for. Tracking the wife's cycle in Qawam, which is health data under GDPR Art. 9, relies on explicit consent, given when the user enables this feature in Settings. It can be turned off at any time.
Encryption and security
Your profile, cycle data, and message content are encrypted at rest using AES-256-GCM, with a per-user key derived and held on our servers. This protects your stored data, including in the event of unauthorized database access. This is not end-to-end encryption, however: our servers hold the key and decrypt content when needed to operate the service, in particular to send your messages to the AI model that generates the coach's responses. Traffic between the app and our servers is also encrypted in transit (TLS).
Who we share data with
We use the following providers (processors under GDPR) to operate the service: • Supabase: database and authentication • Google (Gemini): primary AI model, which processes your message content and any shared screenshots to generate the coach's responses • Anthropic (Claude): backup AI model, used automatically if Gemini is unavailable, with the same access to data as above • RevenueCat: subscription and entitlement management • Apple and Google: push notification delivery • Vercel: application hosting • Cloudflare: hosting for qawam.app We do not sell any data, and nothing is shared between Qawam and Sukūn accounts without your explicit consent.
International transfers
Some of these providers are located in, or process data in, the United States (notably Anthropic, Google, RevenueCat, and Vercel). These transfers are governed by Standard Contractual Clauses or an equivalent mechanism recognized by the European Commission as providing an adequate level of protection.
How long we keep your data
Your data is kept for as long as your account is active. You can delete your account and all your data at any time from Settings → "Delete all my data": your profile, cycle data, conversations, and messages are then permanently and cascadingly deleted. Two caveats: billing records, which we must keep to meet our accounting and tax obligations, and our database backups, in which copies remain until their retention period with our host expires.
Your rights
Under the GDPR, you have the right to access, rectify, erase, port, restrict, and object to the processing of your data, and to withdraw consent at any time. To exercise these rights, contact us at privacy@qawam.app. You can also lodge a complaint with your national data protection authority (CNIL in France).
Age requirement
Qawam and Sukūn are intended for adult users (18+) who are married or in a committed relationship. We do not knowingly collect data about minors.
Cookies and local storage
The qawam.app website does not use advertising cookies or third-party trackers. Only the technical connections needed to load fonts (Google Fonts) are made. Inside the app, we use your device's local storage to remember your language, your theme, and your onboarding draft — your answers are held there until they are saved, so that closing the app by accident does not make you start over. This stays on your device and goes when the app does.
Changes to this policy
We may update this policy as the service or applicable regulations evolve. The date of the last update appears at the top of this page.
Contact
For any question about your personal data or this policy, write to us at privacy@qawam.app.