Howwetreatyourdata.

Ruqyah with Nizam is run by Mohamed Nizamdeen. He is based in Madinah, Saudi Arabia, and the site serves people mostly in the United Kingdom, the United States and worldwide. We follow UK GDPR as our standard wherever you are. For anything about your data, write to privacy@ruqyahwithnizam.com.

Most of what you do here never leaves your phone or computer. It is kept in your browser’s own storage and we cannot see it:

• Plan ticks, reactions and the notes you write on a plan day
• Adhkār counts for the day
• Reader settings (font size, transliteration on or off)
• The symptom check and the healer check — both run entirely in your browser and send nothing
• Raqi tools: counters, the question sheet, the checklist and case notes
• Whether you confirmed the raqi gate, dismissed the install hint, or the site decided your device should not run the background animation

Clearing your browser data removes all of it. The raqi case notes can be exported first.

An account needs only your email address; there is no password. When you sign in, the things listed above are copied to your account so they follow you to another device, and anything you add while signed in is stored with it:

• Plan progress, adhkār counts, raqi tool state and Academy progress (lessons completed, quiz exercises done, your notes and highlights)
• Your journal: the day, your mood, the reactions you tick (these can include physical symptoms such as headache or nausea), what you recited, and any text you write
• Reminders you set, and the browser push subscription that delivers them (an endpoint address and keys from your browser — no phone number)
• Your display name, timezone and settings

You can turn sync off by signing out; you can delete the account, and everything with it, from Settings.

Anything about symptoms, spiritual illness or your religion is special-category data under UK GDPR, and much of what this site is for touches it. We collect it only where you choose to give it: in your journal, in the notes on a plan, in a booking intake form, in messages to Nizam, and in questions to the Ask assistant. We rely on your explicit consent, which you give by writing it and pressing save or send. We keep it to what you wrote, we encrypt it in storage and in transit, and you can delete it at any time.

No person reads your account data unless you choose that:

• “Share my tracking with Nizam” in Settings is off by default. When you switch it on, Nizam can see your plan progress, journal entries, reactions and recited items in a private client view, and can keep his own notes about your case. Switch it off and the view closes; his notes stay with your file until the account is deleted.
• Joining Guided switches sharing on, because that is what the membership is for. Cancelling ends the guidance; sharing stays on until you switch it off.
• A consultation booking is seen by Nizam: your name, email, what you wrote in the intake form (including any medical care you mention), and, for sisters, the mahram confirmation.

Nobody else has access. We do not sell data, share it for advertising, or show adverts.

When you book a consultation we store the booking (time, length, your name, email, intake answers, timezone) and, once paid, a private video room for it. Guided membership stores your tier, its status and billing period, the messages between you and Nizam, and any plan or reading set he assigns you. Donations store the amount, currency, your name and email if you gave them, and whether it repeats monthly.

Payments are taken by Stripe on our pages; card details go to Stripe and never reach us. We keep Stripe’s reference numbers so we can refund you. A monthly donation or membership can be cancelled from Account → Billing (membership) or by replying to any Stripe receipt (donation); we will do it the same day.

Your enrolments, lesson progress, exercise ticks, notes and highlights are stored with your account. If you buy the Raqi Course, the purchase and its Stripe reference are stored so it stays unlocked. A certificate you claim records the name you type on it, the course and the date, with a code. Anyone with that code can confirm on our /verify page that a certificate with that name, course and date exists — that is what a certificate is for. If you would rather it not be verifiable, do not claim it, or email us and we will withdraw it.

Ask is an AI assistant, grounded only in this site’s own pages. What you type, the last few turns of your conversation, and the passages it retrieves from the site are sent to Anthropic (a United States company) to produce the answer. Anthropic processes it under a contract that does not allow training on it. We do not store your Ask conversations. Do not put anything in Ask you would not put in an email; for anything urgent, use Help now.

We count page views with Umami — a privacy-friendly service that sets no cookies, records no personal identifiers and does not follow you between sites. It tells us which pages and recordings are used, so we know what to write next. Nothing about you individually is recorded, and nothing is shared for advertising.

We set no advertising or tracking cookies. If you sign in, a secure sign-in cookie keeps you signed in; it is strictly necessary and is removed when you sign out. Nothing else is set. The service worker that makes the site installable caches pages and the recordings you play, on your device only.

Only the companies that make the site run, under contracts that limit them to that:

• Vercel — hosting (worldwide edge, with the site’s servers in the United States and Europe)
• Supabase — the database and sign-in (Tokyo region; encrypted at rest)
• Stripe — payments, receipts and refunds
• Resend — email (sign-in links, booking and membership emails, your feedback to us)
• Daily.co — the video room for consultations, created per booking and deleted after
• Cloudinary — streaming the recordings
• Bunny Stream — the Academy’s video lessons. Nothing is recorded yet; when lessons are published, watching one goes through them
• Umami — counting page views. No cookies, nothing personal
• Anthropic — the Ask assistant’s language model
• Cloudflare — the check on our forms that tells a person from a script. It sees your IP address and browser, shows you nothing in the ordinary case, sets no advertising cookie and is used for nothing else
• Your browser’s push service (Apple, Google or Mozilla) — delivering reminders you set

Some of these are outside the UK and EU. Where a transfer happens it is covered by the provider’s standard contractual clauses or an adequacy decision.

Newsletter emails until you unsubscribe. Account data until you delete the account, then gone within 30 days from backups. Bookings, memberships and donations for six years, because payment records must be kept for tax — with your name and email removed once the account is gone. Certificates until withdrawn.

You can ask for a copy of what we hold, ask us to correct it, or ask us to delete it, and you can withdraw consent at any time. Most of this you do yourself in Settings: “Download my data” gives you one file with everything keyed to your account, and “Delete account” removes all of it. Otherwise email privacy@ruqyahwithnizam.com and we will act within a month. If you are in the UK you may also complain to the ICO; in the EU, to your national authority.

The site is for adults. If you are looking after a child, the account and its journal are yours, not theirs; write only what is needed.

If this page changes in a way that matters, the date at the top changes and, for anything significant, we tell account holders by email.