Privacy Policy

    Last updated: March 2026

    1. Introduction

    qibla.ai ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our educational AI platform.

    2. Information We Collect

    We collect information you provide directly:

    • Account information (email, name) when you register
    • Questions and queries you submit to the AI
    • Feedback and communications with our team

    We automatically collect:

    • Usage data (pages visited, features used)
    • Device information (browser type, operating system)
    • IP address and approximate location

    3. How We Use Your Information

    • To provide and improve our educational AI service
    • To respond to your inquiries and support requests
    • To send service-related communications
    • To analyze usage patterns and improve user experience
    • To comply with legal obligations

    4. AI Training & Conversation Data

    Your conversations with qibla.ai are NOT used to train AI models. We use the OpenAI API under a data processing agreement that prohibits the use of customer data for model training.

    Only anonymized, aggregated usage patterns (not conversation content) may be used to improve our source-matching algorithms and response quality.

    5. Data Sharing & Third-Party Services

    We do not sell your personal information. We use the following third-party services to operate the platform:

    • OpenAI — AI language model provider (API only; your data is not used for model training)
    • Vercel — Application hosting and deployment
    • Supabase — Database and authentication services
    • Google Analytics — Usage analytics (with your consent; no conversation data is shared). For details on how cookies are managed, see our Cookie Policy.

    We may also share data with:

    • Legal authorities when required by law
    • Academic researchers (anonymized data only)

    6. Your Rights (GDPR)

    If you are in the EU/EEA, you have the right to:

    • Access your personal data
    • Rectify inaccurate data
    • Request deletion of your data
    • Restrict or object to processing
    • Data portability
    • Withdraw consent at any time

    7. Data Retention

    • Conversation data: Retained for 90 days in active storage, then permanently anonymized. You may request immediate deletion at any time.
    • Account data: Retained until you delete your account, plus 30 days for processing.
    • Anonymized analytics: Retained indefinitely (cannot be linked back to you).

    Automated data cleanup runs monthly. You may request deletion of your account and all associated data at any time by contacting privacy@qibla.ai.

    8. Security

    We implement industry-standard security measures to protect your data, including encryption in transit and at rest, access controls, and regular security audits.

    9. Contact Us

    For privacy-related inquiries, contact us at: privacy@qibla.ai