Privacy Policy

Alhemmah ("we") is a free daily routine tracker at alhemmah.com. This policy explains what we collect when you use it, why, and what you can do about it. Questions go to hello@alhemmah.com.

What we collect

• Your account: your name and email, and your password, which we store only as a one-way hash we cannot read. If you sign in with Google, we receive your name, email and profile picture from Google.
• What you put in the app: your routine, your days, the blocks you tick off, the time you track, your language and when your day starts.
• Your timezone, read from your browser, so reminders and emails reach you at your own hour.
• If you turn on the daily reminder: a push subscription, which is an address your browser's push service gives us to deliver notifications, and the name of your browser.
• How you found us: the site that sent you and any campaign tags on the link you first arrived with, recorded once when you sign up.
• Which reminder and summary emails we have sent you and when, so we never send the same one twice.
• If you connect an AI assistant: the assistant's name and the access it holds for your account.
• Usage analytics: Google Analytics records how the site is used, such as pages visited, device type and approximate location, using cookies.

How we use it

To run the app for you, to send the reminders and emails you can turn off at any time, to understand which parts of Alhemmah work and which do not, and to keep the service secure. We do not show ads, we do not sell your data, and we do not share it with anyone for their marketing.

Who processes it for us

• Vercel hosts the app. Requests may be processed in regions outside your own, including the United States.
• Neon stores the database, in the European Union (Frankfurt).
• Resend delivers our emails.
• Google provides sign-in if you choose it, and Google Analytics.
• Your browser's push service (run by Google, Apple or Mozilla, depending on your browser) delivers reminders if you turn them on.
• An AI assistant you connect, such as ChatGPT or Claude, receives the parts of your routine and days that you ask it to read or change. That assistant's own privacy policy then applies to what it receives.

Cookies

• A session cookie that keeps you signed in.
• A language cookie that remembers English or Arabic.
• A first-visit cookie, kept for up to 90 days, that records how you found us until you sign up.
• A short-lived cookie that remembers a ready-made routine you picked before signing up.
• Short-lived cookies used only while you connect an AI assistant.
• Google Analytics cookies, described above.

AI assistants

Connecting an assistant is your choice and needs your approval on a screen that lists what it can do: read your routine and days, tick blocks off, add, edit, reorder and delete blocks in your days and routine. It cannot see your password or delete your account. To disconnect it, remove the connection in that assistant's settings. Deleting your Alhemmah account also ends every connection.

Keeping and deleting your data

We keep your data while you have an account. You can delete your account at any time from Settings, Delete account. That removes your account and everything in it at once: your routine, your days, your settings, reminders, email history and assistant connections. Backups our database provider keeps for a short period may still contain it until they expire. Every email we send has a link to stop further emails.

Your rights

You can ask us for a copy of your data, ask us to correct it, or ask us to delete it, by writing to hello@alhemmah.com. If you are in the European Union or the United Kingdom, you can also complain to your local data protection authority.

Children

Alhemmah is not directed at children under 13, and we do not knowingly collect their data.

Changes

When this policy changes we update the date on this page. If a change affects how we use data you have already given us, we will tell you in the app or by email first.