Privacy policy

AskIslam is a WhatsApp chatbot that answers questions about Islam. When you message the bot, we keep a record of your WhatsApp number and the messages exchanged so we can improve the bot's answers over time. We don't sell your data and we don't share your conversations with third parties.

If you want your data deleted, email us at onetruemessagefoundation@gmail.com and we'll take care of it.

AskIslam is operated by a small independent team based in the United Kingdom. For privacy questions, write to onetruemessagefoundation@gmail.com.

• WhatsApp number — used to identify your conversation and respond to you on WhatsApp. Derived from the message metadata WhatsApp sends to us.
• Message content — every message you send and every reply the bot sends back, stored so the team can review and improve future answers.
• Derived signals — the bot's internal classification of each message (topic, language preference, country code inferred from the phone prefix). We don't collect anything you haven't explicitly shared.
• Report submissions — if you submit a report on /report, we store what you sent us plus a timestamp, your IP, and your browser's user-agent string for abuse prevention.

We do not collect saved payment details, government IDs, passwords, or biometric data. WhatsApp itself encrypts messages in transit between your phone and ours.

• To answer your questions on WhatsApp.
• To improve the bot's prompts when we notice patterns of incorrect or unhelpful replies.
• To prevent abuse of the bot (e.g. flagging repeated harmful messages from a single number).
• To respond to issue reports submitted on the website.

We do not use your data for advertising, profiling, or automated decisions that have a legal or similarly significant effect on you.

We share data only with:

• WhatsApp / Meta — the platform delivering messages. Meta's own privacy policy governs how it handles WhatsApp traffic.
• Google (Gemini) — our language-model provider. Your message text is sent to Google to generate the reply; Google processes it under its enterprise API terms and does not train its general models on this traffic.
• Supabase — our database provider, located in the EU. They store the data on our behalf and do not access it.

We never sell, rent, or trade your data. We don't allow advertisers or analytics platforms to track you on this site.

Conversation history is kept indefinitely so the team can continue improving the bot, but you can ask us to delete yours at any time (see below).

Issue reports are kept for as long as they're useful for identifying patterns — typically until the underlying issue is fixed and confirmed solved. After that they may be deleted or anonymised.

Under the UK GDPR and similar laws, you have the right to ask us to:

• Tell you what data we hold about you.
• Correct anything that's wrong.
• Delete your data.
• Export your data in a portable format.
• Stop processing your data.

To exercise any of these, email onetruemessagefoundation@gmail.com from the same WhatsApp-linked number, or include the WhatsApp number in the body of the email so we can find your record. We'll respond within 30 days.

The public site (this one) does not use tracking cookies. The staff dashboard uses a single authentication cookie set by Supabase Auth so signed-in staff stay signed in. That cookie is essential and is not shared with third parties.

AskIslam is not directed at children under 13. If you believe a child has provided us with personal data, email us at onetruemessagefoundation@gmail.com and we'll delete it.

If we change anything material, we'll update the “Last updated” date at the top of this page. The current version is always at askislam.co.uk/privacy.