Sanad

Privacy policy

Last updated October 12, 2026

Sanad is operated by Taj Asset Management, an Ohio limited liability company ("Sanad", "we", "us"). This policy explains what we collect when you text Sanad, why, who else handles it, and your choices. It sits alongside our Terms of service.

The short version

• Our database stores a one-way keyed hash of your phone number, not the number itself. Our messaging provider does handle your number.
• We keep message-reference text for up to three days, so replies and team reviews have context. We don't store your voice notes or photos. What we keep longer includes a short list of your goals and useful context, which Sanad saves as you talk. You can see it, correct it, delete it or turn it off.
• What you share can reveal your religious beliefs. We use it only to run Sanad. We never sell it or use it for advertising.
• Text DELETE to delete your Sanad data. Text STOP to end all recurring messages.

1. Who can see your messages

Your messages travel through our messaging provider, Linq, which handles your phone number and keeps a copy of the conversation under its own retention policy. Our team can view conversations and phone numbers in the provider's dashboard to run, support and fix the service. Access is limited to the Sanad team. Sanad's own database stores a one-way keyed hash instead of your phone number. Text held to process a reply is erased when that work finishes, within 24 hours at most. Message-reference text is kept separately for up to three days for swipe replies, reactions and the team's private review tool. A small recent-message context is kept for up to two hours so that a follow-up such as "send the link" makes sense. These temporary copies expire on their own and are erased at once if you text STOP or delete your data. The review tool reads available message text from these records; it does not keep its own transcript after they expire. Team members can save separate ratings, feedback notes and suggested replies to improve Sanad. Those reviewer-written notes are retained independently of message text; reviewers should describe the problem without copying private disclosures.

Your messages are processed by AI models to understand them and write replies. AI can be wrong.

2. What we collect

Identifiers

• Your phone number arrives with each message. Our database does not store the number itself. Your account is keyed to a one-way keyed hash of it, made with a secret key.
• We store the messaging provider's chat identifier so replies can be sent, along with that chat's delivery status. The chat identifier is removed when you delete.

What you tell Sanad in setup and settings

• A name or nickname (optional), your language, short or detailed answers, and your school of thought, if any.
• Your city, country, time zone and that city's coordinates. We never read your device's location.
• Prayer settings: which prayers, how early, which days, quiet hours, the calculation method, and whether check-ins (follow-ups) are on.
• Setup answers, saved as short topic labels (for example "Struggles to pray on time"), not your full words.
• Your plan choice (monthly or yearly).
• If a question before you join is deferred, its text (up to 200 characters, at most five questions) is held in your profile until it is answered after activation. It has no expiry of its own. DELETE erases it; STOP does not.
• Goals and context Sanad remembers. As you talk, Sanad saves short notes about your own goals, what you're learning and your progress, and your routines, so it can build on them. It does this automatically. You don't need to ask. It is designed not to save questions, hypotheticals, other people's details, health or crisis disclosures, or sins and private matters you share. You can ask what's saved, correct it, tell Sanad to forget one note or all of them, or turn automatic memory off, at any time. Deleting your data erases all of them. At most 32 short notes are kept.

Records we keep to run the service

• A consent record: whether reminders are on or off, when that changed, and which message changed it.
• Membership records: payment processor customer and subscription IDs, status, paid-through date, and your checkout request. No card details.
• Check-in status for the current prayer: whether you said you prayed or skipped. Silence is not recorded.
• Delivery and event metadata: message IDs, status and times. No message content, apart from the swipe-reply text in the next bullet.
• Message references for swipe replies and reactions: the message ids for 30 days; the short text they carry is erased after 72 hours. STOP and DELETE erase them at once.
• If a message matches a crisis phrase, Sanad sends a fixed reply and may ask the AI once whether the message was about you; if so, prayer check-ins pause for three days. The message is held for that reading for up to an hour and then erased. The only record kept is the pause itself, which ends after three days.
• Payment markers: a marker for a payment link that was open when someone said they were under 18 (90 days); a flag for the owner's refund review of a payment by someone under 18 (1 year); a marker for a checkout link replaced when you switched plans (48 hours); and a flag for a duplicate subscription (1 year). They hold payment and subscription ids and, for the replaced link, your hashed account key, never your name or number.
• Team testers' feedback messages about Sanad, kept as typed and not purged on a schedule; DELETE removes them.
• Private team reviews: ratings, reviewer-written notes, suggested replies and message references. These are used to identify problems and improve Sanad, and are retained until the team removes them. Live message text is read from the temporary records above, not saved as a separate review transcript.
• Feature flags: if a feature such as image reading is switched on for you personally, a row recording that, kept until it is cleared or you text DELETE. It holds no message content.
• Technical logs: operation type, timing, and success or failure. No message content or phone numbers.
• How you found Sanad: if your first text came through a creator's link, the code it carried and the Sanad number you texted, with the dates you first texted, finished setup and paid. No message text. When you delete your data this record is cut loose from you and kept only as a count.
• A one-time reminder you ask for ("remind me at 9pm to read Surah al-Kahf"): the note you give, kept until it is sent, at most a day, then erased.

What our systems don't keep

• No permanent message transcript in Sanad's database. Reply-processing text lasts at most 24 hours; message-reference text lasts up to three days. The last few messages used as model context last up to two hours. Longer-lived profile notes, deferred questions and team feedback are described above.
• Voice notes and photos are processed in memory and not stored.
• No card numbers, device location, contacts or advertising IDs.

This website uses no cookies, no analytics and no third-party requests. It keeps one flag in your browser's session storage so the opening animation plays once. The /compass page asks your browser for your location and heading to point the qibla; that stays on your device and nothing is sent to us.

3. How we use it

• To run Sanad: answer you, work out prayer times, send reminders you agreed to, and manage your membership.
• To build on what you shared: the notes Sanad remembers are shown to the AI when it writes replies to you, and nowhere else. In this version Sanad sends no follow-ups about them.
• To keep it safe and working: prevent abuse, review replies, improve instructions and tests, fix problems and meet legal duties.
• Sanad does not use your message content to train AI models.
• We never sell your personal data or use it for advertising. We don't build ad profiles. We send no marketing texts without your separate consent.

4. Sensitive information

Using Sanad can reveal your religious beliefs and practice. We treat religious belief as sensitive data and use it only to provide the service. We never use it to infer unrelated things about you.

5. Who else handles your data

Messages travel over Apple iMessage or your carrier's SMS. They are the transport, and their own policies apply. These companies process data for us:

• Linq (message delivery and payment requests). As the carrier of the conversation, Linq receives and retains message content, attachments and your phone number, plus delivery status and checkout requests.
• Stripe (payments). It receives the payment details you enter at checkout, your subscription and invoices. We never get your card number.
• Cloudflare (hosting, database, queues, storage, and speech-to-text for voice notes, which runs on Cloudflare Workers AI; the audio is not stored). Everything we store lives on Cloudflare.
• Anthropic (the Claude models, through Anthropic's API). It receives your message, the name you gave, your settings and the notes Sanad keeps, so that it can reply, and, if image reading is switched on for you, photos you send. It receives no phone number, hash or payment id. Anthropic does not train on API data.
• Open-Meteo. It receives the place text you type, to find your city.
• AlAdhan. It receives coordinates and the date, for prayer times.
• Open Quran and hadith datasets served from a public CDN. Only verse or hadith reference numbers are requested, and nothing about you. quran.com, sunnah.com and hadeethenc.com are link destinations, and findahelpline.com is named in crisis replies. A site you open from a link sees your visit.
• Langfuse (operational timing data), when enabled. It receives the operation name, when it started and ended, and whether it succeeded. No message text, phone number or account identifier.

Team members may access operational data to run and fix the service. We may disclose information if the law requires it, to protect someone's safety, or in a merger or sale, with notice to you.

6. How long we keep it

• Text held to process a reply: erased when that work is finished, at most 24 hours.
• Recent messages used as model context: up to two hours.
• Delivery and event metadata: about 30 days.
• Message references for swipe replies and reactions: ids 30 days; their text up to 72 hours. The private review tool follows the same text window.
• A message held for the crisis reading: up to an hour.
• Payment markers and refund-review flags: 48 hours, 90 days or 1 year, as listed in section 2.
• Testers' feedback: until DELETE.
• Team review ratings and reviewer-written feedback: until removed by the team; these are separate from the expiring message text.
• Per-person feature flags: until cleared or DELETE.
• Cached prayer timetables (by city, not by person): daily tables 1 day; the yearly table used for quiet-hours checks 30 days.
• Check-in status: about a day after that prayer's window ends.
• Profile, consent record and membership IDs: until you delete them.
• Notes Sanad remembers: until you ask Sanad to forget them or delete your data. STOP does not erase them.
• How you found Sanad: the dates and the code, until you delete your data; then kept only as a count with no link to you.
• Backups: our hosting provider's backups follow the provider's schedule.
• Linq's copy of the conversation: kept under Linq's own retention policy.
• Payment records: Stripe keeps its own. We keep what tax and accounting law requires.

7. STOP and DELETE

STOP ends all recurring messages at once and turns off reminder consent. You may not get a confirmation. STOP does not delete your profile and does not cancel billing. Text cancel to stop renewal, or BILLING to manage payment. Text START to come back. Consent is never restored by restarting the chat. Reminders stay off until you say yes again.

DELETE erases your profile immediately. It stops renewal of any subscription; your access ends at once and Stripe's record of the subscription stays until the paid period ends. There is no refund for the current period. We then remove your chat identifier, membership IDs, consent record, check-ins, any held question, swipe-reply references, testers' feedback, feature-flag rows and the notes Sanad remembered.

• We retain a minimal, non-identifying record (the hashed key and technical counters) so that late events can't recreate your account.
• Delivery and event metadata clears within about 30 days. Provider backups follow the provider's schedule.
• Deleting your Sanad data does not delete the copy held by the messaging provider or on your device. Messages already on your device, the carrier's and the messaging provider's copies, and payment records held by the payment processor are outside Sanad's control.
• You can ask us at info@textsanad.com to request deletion from the messaging provider where available.
• If you text Sanad something new later, you start again from an empty account.

You can also text SETTINGS to see what is saved and ask Sanad to change it, and ask Sanad what notes it has saved for you or to turn automatic memory off.

8. Your privacy rights

California (CCPA/CPRA). You can ask to know and access the personal information we hold, delete it, correct it, and get a portable copy. We won't treat you unfairly for using these rights. We don't sell or share your personal information. We already limit our use of sensitive information to providing the service. You may use an authorized agent.

Other US states. Many states give similar rights to access, correct, delete and get a copy, to opt out of targeted advertising, sale and certain profiling (we do none of these), and to appeal. If we deny an appeal, you can contact your state attorney general.

Your information is processed in the United States and wherever our providers operate, under the laws there.

Internal status reports with aggregate counts and no personal data are shared with the team in Google Drive.

How to use your rights. Text SETTINGS or DELETE, or email info@textsanad.com. You can also ask us for a copy of the conversation data our messaging provider holds, or ask us to request its deletion. Because our database doesn't store your phone number, we may ask you to text from that number to verify a request. We answer within 45 days.

9. Children

You must be 18 or older to subscribe. If you tell Sanad you are under 18 during setup, it closes the conversation and deletes what it has; after setup it asks you to confirm by replying yes, and only then closes the account, deletes your data and switches off renewal of any membership. Sanad is not for children under 13, and we don't knowingly collect their data. If we learn that someone under 13 is using Sanad, we end their service and delete their data. Parents can email info@textsanad.com.

10. Security

We key accounts to a hash made with a secret key, verify that incoming events come from Linq and Stripe, encrypt data in transit, limit team access and apply rate limits. No system is perfectly secure.

11. Changes

We will post updates at textsanad.com/privacy with a new date. We will tell you in the chat or on the site before important changes take effect.

12. Contact

Taj Asset Management
Email: info@textsanad.com
Website: https://textsanad.com