Last updated: October 14, 2026
Hadith Node is designed with privacy in mind. We collect minimal data, we don't track you, and we don't maintain user accounts. This policy explains our actual practices.
TL;DR:
Hadith Node has no user account system. You don't need to create an account, provide your name, email, or any personal information to use the app.
For paid features: You use your existing Apple ID to manage subscriptions through the App Store. Your Apple ID is managed by Apple, not by us.
ZERO personal data collection. Free users:
All of this happens locally on your device. We collect nothing.
The one exception is AI Search, and only if you choose to use it. The first time you open it, the app explains what it sends and asks for permission; if you tap Not Now, nothing is sent. When you use it, the description you type or speak is sent (as text) to our server and to Anthropic to run the search, and our server keeps per-install app-key records, not tied to your name or Apple ID, to enforce search limits. Details in §11.
Paid subscribers can sync bookmarks, notes, highlights, and reading progress across devices using Apple's CloudKit (iCloud).
Paid subscribers can also export their bookmarks, notes, highlights, and reading progress to a backup file (a .hnbackup file) and restore it on another device via Files or AirDrop. This file stays on your device and the destinations you choose (Files, AirDrop, etc.) — it is never uploaded to us. Important: backup files are stored as plain, unencrypted text, so anyone who can open the file can read its contents. Store and share backup files only with people and locations you trust.
Data stored in your iCloud account:
What Apple handles:
What we don't do:
When you use the app, your device automatically shares device type (iPhone model), iOS version, and app version. This is used only for basic debugging and compatibility. No personal identification included.
Daily hadith notifications are scheduled using iOS's push notification system. We don't:
You control notifications:
Subscriptions are managed entirely by Apple through the App Store. Apple handles your payment method, billing information, and subscription status.
What we receive from Apple:
We use this only to show/hide paid features. We don't see your payment method or personal payment details.
We do not collect usage analytics. We do not measure app opens, feature usage, or performance metrics, and we do not send any usage data off your device. Crash reports, if you opt in via iOS Settings, go only to Apple — never to us or any third party.
AI Search exception: AI Search's server keeps daily totals — how many searches it answered, how many failed, how long they took and what they cost — to check that the feature works. These totals hold no description, no hadith text and no app key, so they can't be tied to you or your device. A monthly clean-up deletes them once they're 3 months old, so they're gone within 4 months.
Your bookmarks, notes, and highlights are stored in your iCloud account. You can access them by using iCloud's backup features through Apple, or by requesting a data export via our contact form.
You can delete:
When you unsubscribe from paid features, your synced data is automatically deleted from iCloud within 30 days (Apple's standard).
To request complete deletion of any data we have about you, send your request through our contact form. We'll process it within 30 days.
AI Search's server records (a hash of a random per-install app key, that key's public key and signature counter, and search counts) aren't linked to your name, email or Apple ID, so there is nothing we can look up for you on request. They're deleted automatically by a monthly clean-up once the key has gone unused for 3 months — so within 4 months of its last use. Deleting or reinstalling the app creates a new key, so earlier records are no longer connected to your device and expire on that schedule.
Since your data is in iCloud, it's already portable. You can:
Hadith Node is not intended for children under 13. We don't knowingly collect data from children under 13. If you believe a child under 13 has provided personal information, contact us immediately.
For users 13-17, we provide extra protection:
We comply with privacy laws worldwide:
AI Search finds a hadith you describe in your own words. It is optional: the first time you open it, the app shows what it sends and asks for permission, and Not Now sends nothing. Keyword search keeps working entirely on your device either way.
What leaves your device, and what's kept:
| Data | Sent to | Why | Kept? |
|---|---|---|---|
| Your description (typed, or spoken and turned into text on your device) | Our server → Anthropic’s Claude API | To turn it into a search and judge which hadiths match | Not logged or stored by Hadith Node. Anthropic doesn’t use it to train its models and deletes it within 30 days, unless it must keep it longer to enforce its usage policy or by law (Anthropic’s API terms, checked October 14, 2026) |
| Up to 40 passages from the app’s own hadith library | Our server → Anthropic | So the AI can rank them | Public book content; not logged |
| A random per-install app key (Apple App Attest), not tied to your name or Apple ID, proving requests come from the genuine Hadith Node app | Our server | To stop abuse and enforce search limits | A hash of the key’s ID, its public key, a signature counter, whether it’s a test or App Store build, and first/last-seen dates — deleted by a monthly clean-up once the key has gone unused for 3 months (within 4 months of last use). Search counts: Premium’s per month, deleted within 4 months; a free install’s 5-search count, kept with its key and deleted with it. A daily call count — deleted the next day. One-time App Attest challenges — deleted within a day |
| Whether you have Premium (yes or no), as the app sees it | Our server | To apply the right limit | Not stored on its own — only as which count your searches go on (a monthly Premium count or the free count), deleted as above |
| Request metadata (IP address, connection and HTTP headers) | Supabase, which hosts our server | Delivering the request | Not stored by Hadith Node. Supabase’s platform logs may hold request metadata for up to a day. Anthropic receives requests from our server, never from your phone |
| Audio | Nowhere | Speech is recognised on your device | — |
This website (hadithnode.com) uses Google Analytics to count visits and see which pages are read. Google Analytics uses cookies and collects information such as the pages you visit, your browser and device type, and your approximate location; Google processes it under its own privacy policy. This covers the website only — the app doesn't use Google Analytics and sends nothing to Google. You can opt out with Google's Google Analytics opt-out browser add-on.
For privacy questions or requests, use our contact form.
We'll respond to privacy requests within 30 days.
We may update this policy to reflect changes in our practices, new features, or legal requirements. We'll notify you by an in-app notification or a website update. Continued use means you accept the changes.
| Data | Collected? | Shared With Whom? | Purpose |
|---|---|---|---|
| Bookmarks (paid only) | Yes | Your iCloud account | App functionality |
| Notes (paid only) | Yes | Your iCloud account | App functionality |
| Highlights (paid only) | Yes | Your iCloud account | App functionality |
| Reading progress (paid only) | Yes | Your iCloud account | Resume reading |
| Backup file export (paid only) | Yes (on your device) | Only where you save/send it (Files, AirDrop) — never us | Manual backup / device transfer; file is unencrypted |
| Preferences | Yes | Your device only | Personalization |
| Device info | Yes | Apple (standard) | Compatibility |
| Subscription status | Yes | Apple only | Feature access |
| Crash logs | Yes | Apple only | Bug fixing |
| Hadith reads / keyword searches | No | Nobody | — |
| AI Search description (only if you use AI Search) | Sent, not stored by us | Our server → Anthropic (deleted within 30 days per its terms) | Finding the hadith you describe |
| AI Search app-key records | Yes (per-install key hash, public key, counter, search counts; not tied to your name or Apple ID) | Our server only | Proving genuine requests; enforcing search limits. Deleted within 4 months of last use |
| AI Search daily totals | Yes (no text, no identifiers) | Our server only | Checking the feature works. Deleted within 4 months |
| Personal info | No | Nobody | — |
| Tracking data | No | Nobody | — |
| Analytics data (app) | No | Nobody | — |
| Website visits (hadithnode.com) | Yes (Google Analytics cookies) | Counting visits to the website |
Thank you for trusting Hadith Node. Your privacy matters to us.
Version 1.2 · Last updated October 14, 2026