Nisaa Nisaa
Back to home
Legal ⸱ Your data, your rules

Privacy Policy

Last updated: April 28, 2026

1. Information We Collect

We collect information you provide directly to us, including:

  • Account information (name, email)
  • Menstrual cycle data
  • Health-related information you choose to log
  • Fasting and prayer-related preferences
  • App usage data

2. How We Use Your Information

We use the information we collect to:

  • Provide and maintain our services
  • Make predictions about your cycle
  • Send you notifications and reminders
  • Improve and personalize your experience
  • Provide customer support
  • Protect against fraudulent or illegal activity

3. AI-Powered Features

Nisaa includes an AI chat feature that allows you to ask questions about cycle-related Islamic rulings. This feature is powered by Google's Firebase AI (Gemini).

When you use the AI chat feature, the following data is sent to Google's Firebase AI service:

  • The text of your question
  • Your selected madhab (school of Islamic jurisprudence)
  • Your current cycle phase (e.g., menstrual, follicular, ovulation, luteal)

No personally identifiable information (such as your name, email, or account details) is sent to the AI service. Your questions are not stored by the AI service after generating a response. Google's Firebase AI processes this data in accordance with Google's privacy policies and data processing terms.

You will be asked for consent before using the AI chat feature for the first time. You may use all other features of Nisaa without enabling the AI chat.

4. Third-Party Services

We use the following third-party services to operate and improve Nisaa:

  • Google Firebase AI (Gemini): Powers the AI chat feature. Receives only your typed questions, selected madhab, and cycle phase. No personal data is shared.
  • Mixpanel: Used for app analytics to understand how users interact with the app. Collects anonymized usage data such as screen views and feature usage. Does not collect health or cycle data.
  • TikTok SDK: Used for marketing attribution to measure the effectiveness of advertising campaigns. Collects device identifiers and install attribution data. Does not collect health or cycle data.
  • AppsFlyer: Our mobile measurement partner used for marketing attribution and install measurement. Collects device identifiers (IDFA only with your permission via the App Tracking Transparency prompt; IDFV always), basic device information (model, OS version, language, country), network information (IP address, carrier), and app event data (installs, app opens, subscription events). Does not collect health or cycle data. You can review AppsFlyer's privacy policy at appsflyer.com/legal/services-privacy-policy and opt out at appsflyer.com/optout.
  • RevenueCat: Used to manage subscriptions and in-app purchases. Processes purchase-related data through Apple's App Store infrastructure. May forward subscription event data to AppsFlyer for marketing attribution.
  • OneSignal: Used to deliver push notifications. Receives device tokens for notification delivery.
  • Supabase: Used as our backend database. Stores your account and cycle data securely with encryption.

All third-party service providers are bound by their respective privacy policies and are required to protect your data. We do not sell your personal information to any third party.

5. Data Security

We take your privacy seriously and implement appropriate security measures to protect your personal information. Your cycle data is encrypted and stored securely. However, no method of transmission over the internet is 100% secure.

6. Data Sharing

We do not sell your personal information. We may share your information only in the following circumstances:

  • With your explicit consent
  • To comply with legal obligations
  • To protect our rights and prevent fraud
  • With service providers who assist in app operations (as listed in Section 4, under strict confidentiality agreements)

7. Your Rights

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Delete your account and data
  • Export your data
  • Opt-out of marketing communications

8. Data Retention

We retain your information for as long as your account is active or as needed to provide services. When you delete your account, we will delete your personal data within 30 days, except where we are required to retain it by law.

9. Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

10. Changes to Privacy Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy in the app and updating the "Last updated" date.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at support@techtinker.studio or through the app's feedback system.