Privacy Policy

1. About this policy

Lubab is a personal planning app for tasks, schedules and focus. This policy covers the Lubab app, its online services and lubab.io.

For privacy questions or support, contact info@lubab.io.

2. Information we use

Account and sign-in information

When you sign in, Lubab and its authentication provider, Supabase, process the information needed to identify your account and maintain your session. This includes an account identifier and email address. Your sign-in provider may also supply basic profile information such as your name and profile picture.

If you choose Sign in with Google, this information comes from Google with your authorization. Lubab uses it to create or authenticate your account and associate your synced tasks with you. Lubab does not receive your Google password. Google sign-in does not give Lubab access to your Gmail messages, Google Drive files, Google Calendar or contacts.

Planning information

The app stores information you create on your device, including tasks, notes, projects, goals, plans, schedules, reminders and focus history. When account sync is active, task information is also sent to Supabase. This includes task titles, notes, steps, status, priority, dates, estimates and related task metadata.

Other planning information, including focus sessions, schedule templates, daily plans and reminders, currently stays on your device rather than being included in task sync.

Optional AI and voice features

When you use an AI feature, the text, images or documents you submit are sent through Lubab's backend to Anthropic to produce a response or draft. When you use voice transcription, the recording is sent for processing by Google Cloud Speech-to-Text. These features process the input you submit for that request.

Lubab does not maintain a separate archive of uploaded recordings or documents. Text you choose to save as tasks or notes becomes planning information. AI and speech providers may process and retain request data under the terms applicable to their services; this policy does not promise zero retention by those providers.

Permissions and optional analytics

Microphone access enables voice capture. Location permission can supply a location fix to calculate prayer times on your device; the fix is held in memory and is not stored or sent to Lubab's servers. You can choose a city instead. Notification permission enables reminders you set.

Where optional activity analytics is offered, it requires your consent and is off by default. Events are associated with your account and include the event date, platform and optional country, without task titles, notes or other free-text content.

Website, service and support information

Cloudflare serves this website. Hosting and service infrastructure process connection information, such as IP addresses, browser or device information, request times and response status, to deliver and protect the service. Lubab's application diagnostics record technical outcomes rather than task content.

If you contact us, we receive your email address and the information you include so we can respond.

3. How information is used

We use information to operate your account, store and sync your tasks, provide features you request, respond to support requests, protect the service and investigate technical problems. Where offered and enabled with your consent, optional analytics helps us understand how the app is used.

Lubab does not sell personal information or use it for advertising. Google account information is used for sign-in and account operation, not advertising or training AI models.

Where data-protection law requires a legal basis, account and requested service functions rely on providing the service to you; optional analytics relies on your consent; and necessary security and support processing relies on legitimate interests, subject to your rights. We may also process information to meet legal obligations.

4. Service providers and connected apps

Information is shared as needed with Supabase for authentication and task sync, Cloudflare for website delivery and protection, Anthropic for AI requests, and Google Cloud for speech transcription. Your identity provider handles its own sign-in service.

If you separately authorize a supported chat app to connect to Lubab, the current connector can read task titles, status and priority. It cannot create, edit or delete tasks. It does not return task notes or deadlines.

Task details returned to a chat app may become part of a conversation that the chat service retains under its own policies. Revoking a connection stops future access through that connection; it does not remove information already in a chat conversation.

We may disclose information where required by law or where necessary to address fraud, abuse or a security incident. Service providers may process information in countries other than yours. The protections that apply depend on the provider, service and applicable law; contact us for information about the arrangements relevant to your data.

Lubab's use of information received from Google is subject to the Google API Services User Data Policy, including applicable Limited Use requirements.

5. Storage and deletion

Account information and synced tasks are kept while needed to operate your account. You can request account deletion in the app. Successful account deletion removes your account and its associated data from Lubab's active backend, including account-linked AI usage records.

Signing out does not delete your data. Account deletion also does not automatically erase the planning information kept on your device. Local content remains unless you remove it separately. Removing the app does not by itself delete your online account.

Support correspondence is kept as needed to resolve your request and any related dispute. Operational records, backups and provider-held data may follow separate retention schedules. Retention depends on the purpose, recovery needs and applicable legal requirements; account deletion is not a promise that every provider backup is erased immediately.

6. Your choices and rights

You can change device permissions in your operating-system settings, stop using optional AI features, and revoke supported chat connections in Lubab Settings. Where optional analytics is offered, you can choose not to consent.

You can also review or revoke Google's access permission through your Google Account connections. Revoking Google access is separate from deleting your Lubab account.

Depending on applicable law, you may request access, correction, deletion or a portable copy of your personal information, object to certain processing, or ask for processing to be restricted. Where processing relies on consent, you can withdraw it without affecting processing already carried out lawfully.

Send privacy requests to info@lubab.io. We may ask for enough information to verify that a request concerns your account. You may also complain to the data-protection authority in your jurisdiction.

7. Security

Lubab uses encrypted network connections and account-based access controls for its online services. Local information relies on your device's app sandbox and operating-system protections. Task sync is not end-to-end encrypted. No storage or transmission method can be guaranteed completely secure.

8. Changes and questions

We will update this page and its effective date when the policy changes. Material changes to data use will be communicated as required by applicable law and platform requirements, with new consent where required. Contact info@lubab.io with questions about this policy.