Batin

Privacy Policy

Last updated: 14 August 2026

The short version

Batin is a place where people write down things they would not say out loud. We treat that with the seriousness it deserves.

We do not sell your data. We do not advertise to you. We do not build a profile of you to sell to anyone. What you write in Batin is yours, and you can delete all of it — permanently — from inside the app at any time.

Who we are

Batin is operated by Northcube Ltd, 50 Wash Lane, Bury, BL9 6AS, United Kingdom (company number 16791490). We are the data controller for the personal information described in this policy.

If you have any question about your data, email hello@batin.app.

What we collect

Information you give us

What	Why
Email address and password	To create your account and sign you in. Passwords are hashed — we never see them.
Your name or preferred name	So Batin can address you personally.
Onboarding answers — the struggle you are working on, what you are working toward, when you feel most vulnerable	So the guidance you receive is relevant to your situation rather than generic.
What you write in the Trigger and to the companion	So Batin can respond to what you are actually going through.
Prayer, dhikr and reflection logs	To show your patterns over time and maintain streaks.
Your location, if you allow it	To calculate accurate prayer times for where you are.

Information collected automatically

Basic device and app version information, to diagnose problems
Crash reports, if the app fails unexpectedly
When you last used the app, to maintain streaks and send timely reminders

Sensitive information — please read this part

Under UK and EU data protection law, some of what Batin holds is special category personal data — the most protected kind. Specifically:

Religious beliefs. Using Batin reveals that you are Muslim and discloses details of your religious practice.
Health and personal life. What you write about your struggles may describe your mental health, your relationships, or your sexual behaviour.

We can only process this with your explicit consent. You give that consent when you create an account and confirm you have read this policy. You can withdraw it at any time by deleting your account, which erases everything.

How your information is used

To give you a personal response. When you write in the Trigger, that text is sent to an AI service so a relevant reply can be generated.
To show your patterns. Your logs are analysed so the app can reflect your progress back to you.
To remind you. Notifications for prayer times and check-ins, if you allow them.
To keep the app working. Diagnosing crashes and fixing faults.

We do not use your information for advertising, we do not sell it, and we do not share it with data brokers.

Who else processes your data

We use a small number of providers to run the service. Each is bound by contract to process data only on our instructions.

Provider	Purpose	What they receive
Supabase	Database, authentication and hosting	All account data. Stored in the EU.
Anthropic	Generating Batin's responses	The text you write and relevant context. Not used to train their models.
OpenAI	Generating structured content such as duas	The text you write and relevant context. Not used to train their models.
Aladhan	Prayer time calculation	Approximate coordinates only. No account information.
Sentry	Crash reporting	Error details and a device identifier. Your written content is removed before anything is sent.

Anthropic and OpenAI are based in the United States. Transfers are covered by the UK International Data Transfer Addendum and EU Standard Contractual Clauses.

How long we keep it

Your account and its contents — until you delete your account.
Deleted accounts — removed immediately and permanently. This is not a soft delete; the records are gone and cannot be recovered by us or by you.
Crash reports — 90 days.
Backups — up to 30 days, after which deleted data disappears from those too.

Your rights

Under UK GDPR you have the right to:

Access a copy of what we hold about you
Correct anything inaccurate
Erase everything — available immediately in the app under Settings → Delete account
Restrict or object to how we use it
Withdraw consent at any time
Complain to the Information Commissioner's Office at ico.org.uk

To exercise any of these, email hello@batin.app. We will respond within one month.

Security

All data is encrypted in transit (TLS) and at rest
Database access controls ensure your records are readable only by your account
AI provider keys are held server-side and never shipped inside the app
Crash reports are stripped of anything you have written before being sent

No system is perfectly secure, but we take this seriously and design for it.

Children

Batin is not intended for anyone under 16. We do not knowingly collect information from children. If you believe a child has created an account, contact us and we will remove it.

Changes to this policy

If we make a material change we will notify you in the app before it takes effect. The date at the top of this page always reflects the current version.

Contact

Northcube Ltd
50 Wash Lane, Bury, BL9 6AS
hello@batin.app