PRIVACY POLICY

Last Updated: August 20, 2026

1. Introduction

This Privacy Policy explains how personal information is accessed, collected, used, stored, transmitted, disclosed, protected, and deleted in connection with:

• the Dahim mobile application;

• the website available at https://dahim.app;

• Talk, Dahim’s private AI-powered conversational feature;

• the Dua Wall;

• subscriptions, support, and related services.

Dahim is operated by:

AKHIM LLC
30 N Gould St, Ste N
Sheridan, Wyoming 82801
United States

For all privacy communications, Dahim uses the following contact details:

Dahim Privacy Support
Email: support@dahim.app
Website: https://dahim.app
Account deletion: https://dahim.app/delete-account/

AKHIM LLC is the data controller for personal information processed to operate Dahim, except where another entity acts as an independent controller under its own legal obligations.

2. Scope

This Policy applies to personal information processed through:

• account creation and authentication;

• use of Dahim features;

• Talk requests and responses;

• the journal and mood tracker;

• the Dua Wall;

• purchases and subscriptions;

• customer support;

• security and technical diagnostics;

• the Dahim website.

It does not govern independent third-party services that users access separately under those services’ own privacy policies.

3. Privacy Principles

Dahim is designed according to the following principles:

• collect only information reasonably necessary for a defined feature;

• keep sensitive content local where possible;

• do not use private content for advertising;

• do not sell personal information;

• do not use user content to train Dahim’s own general-purpose AI models;

• do not voluntarily authorize OpenAI to use Dahim API inputs and outputs to train its general models;

• provide clear information before sensitive information is transmitted;

• use protective defaults for users aged 16 and 17;

• allow users to delete conversations, local content, and their account;

• encrypt information in transit.

4. Minimum Age

Dahim is available only to users aged 16 or older.

Dahim may request a date of birth or age information during account creation to:

• determine eligibility;

• apply appropriate privacy and safety settings;

• comply with applicable child-protection rules;

• prevent access by users under 16.

Users must provide accurate age information.

Where a country requires parental or guardian authorization for a user aged 16 or older but below the applicable local age of majority or digital-consent threshold, the user must obtain that authorization.

Dahim may use reasonable and proportionate measures to assess age or authorization, but no online system can guarantee that every declaration is accurate.

If Dahim learns that an account belongs to a person under 16, it may restrict the account and delete the associated information, subject to legally required retention.

5. Information We Process

The information processed depends on which features the user chooses to use.

5.1 Account Information

Dahim may process:

• email address;

• username or pseudonym;

• user or account identifier;

• authentication information;

• account status;

• age, date of birth, or age group;

• consent records;

• account creation and deletion dates;

• language and settings.

Passwords should be stored only in protected or cryptographically transformed form through the applicable authentication system.

5.2 Subscription and Purchase Information

When a user purchases a subscription, Dahim may receive:

• transaction or order identifier;

• product or subscription selected;

• subscription status;

• purchase and renewal dates;

• billing region;

• payment-provider status;

• refund or cancellation status.

Complete payment-card information is processed by the applicable app store or payment provider and is not intended to be received or stored by Dahim.

Payment and transaction records may be retained for accounting, tax, fraud-prevention, and legal obligations.

5.3 Technical and Diagnostic Information

Dahim may process limited technical information necessary to operate, secure, and improve the application, including:

• application version;

• operating-system version;

• general device or application model;

• error type;

• crash information;

• performance, latency, and stability information;

• security events;

• connection information necessary to deliver the service.

Technical diagnostics are not intended to contain:

• Talk conversations;

• journal entries;

• mood entries;

• Dua Wall drafts not submitted;

• passwords;

• complete payment information;

• other private personal content.

5.4 Customer Support

When a user contacts support, Dahim may process:

• email address or contact details;

• content of the support request;

• attachments voluntarily provided;

• account and technical information necessary to resolve the request;

• history of the support interaction.

Users should not send unnecessary sensitive information through support communications.

6. Talk and OpenAI

6.1 Nature of Talk

Talk is a private conversation between the user and Dahim’s AI-powered system.

It is designed to provide:

• general reassurance;

• encouragement;

• reminders of Allah;

• general spiritual reflections;

• references to selected Quranic verses or duas.

Talk does not provide medical, psychological, legal, financial, emergency, or binding religious advice.

6.2 AI Provider

Talk currently uses the professional OpenAI API.

At the date of this Policy, the model used is GPT-5.6 Luna. Dahim may change the model because of availability, performance, safety, legal requirements, regional restrictions, or provider requirements.

A model change will not intentionally reduce the privacy and security commitments described in this Policy. This Policy will be updated if a change materially affects the processing of personal information.

6.3 Information Sent to Talk

When the user sends a message, Dahim transmits through its private server environment only the information reasonably necessary to generate the response.

Dahim is designed not to attach unnecessary direct account information such as:

• the user’s name;

• email address;

• payment information;

• date of birth;

• direct login credentials.

The text voluntarily entered by the user may nevertheless reveal:

• emotional or mental state;

• health-related information;

• religious or philosophical beliefs;

• personal circumstances;

• information about another person.

Users should not submit identifying information that is unnecessary for the requested response.

6.4 Detection of Identifying Information

Dahim may use automated tools designed to detect certain obvious forms of personal information, such as:

• email addresses;

• phone numbers;

• postal addresses;

• payment information;

• identity-related information.

The application may warn the user, block a message, or require additional confirmation.

These tools may fail to detect personal information or may incorrectly flag content. Users remain responsible for reviewing their message before sending it.

6.5 Sensitive-Data Consent

Before Talk is used for the first time, Dahim presents a separate disclosure explaining:

• that the message will leave the user’s device;

• that it will pass through Dahim’s private server environment;

• that it will be transmitted to OpenAI;

• why the information is needed;

• that the message may reveal health, emotional, or religious information;

• applicable retention;

• the limits of the AI feature.

The user must take an affirmative action to consent.

Where required for special-category data under applicable law, Dahim relies on the user’s explicit consent.

Consent may be withdrawn through the application’s privacy settings or by contacting support@dahim.app.

After withdrawal, the user cannot send new Talk messages unless consent is provided again. Withdrawal does not invalidate processing lawfully performed before withdrawal.

6.6 Training

Dahim does not use Talk messages or responses to train its own general-purpose AI models.

OpenAI states that data submitted through its professional API is not used by default to train or improve OpenAI’s general models unless the API customer expressly opts into data sharing.

Dahim does not voluntarily enable such training or improvement use for Dahim conversations.

OpenAI may still process limited information for safety, abuse prevention, security, and compliance with applicable law and contractual requirements.

6.7 Talk Storage and Retention

Dahim configures applicable OpenAI requests to avoid persistent application storage, including use of store: false where technically applicable.

The content of Talk conversations:

• is transmitted through the Dahim VPS to generate the response;

• is not retained on the Dahim VPS;

• is not intentionally included in technical logs;

• is stored locally in the application for up to 30 days by default;

• may be deleted by the user before that period expires.

OpenAI may retain limited API abuse-monitoring records containing prompts, responses, or related safety information for up to 30 days, unless longer retention is required by law or reasonably necessary to protect the service or third parties.

Provider retention may vary if a different OpenAI endpoint or feature is used. Dahim will update this Policy if its technical implementation materially changes.

Local history deleted by the user may remain temporarily in a device backup controlled by the user, Apple, Google, or another device-backup provider. Such independent backups are governed by the applicable provider’s settings and privacy terms.

7. Journal and Mood Tracker

Journal and mood information may reveal sensitive personal information, including emotional state, health-related information, and religious beliefs.

Unless a separate synchronization or backup feature is expressly activated and disclosed:

• journal entries remain stored locally within the application;

• mood entries remain stored locally within the application;

• the Dahim server does not receive their content;

• OpenAI does not receive their content;

• the information is retained for as long as the user chooses;

• users control deletion through the application.

Journal and mood information is not used for:

• advertising;

• behavioral targeting;

• data brokerage;

• training artificial-intelligence models;

• hidden emotional profiling.

If a user expressly chooses to send all or part of an entry to Talk, the selected text will be processed as described in Section 6.

8. Dua Wall

8.1 Information Published

The Dua Wall allows users to submit anonymous or pseudonymous dua requests.

A submitted request is transmitted to Dahim’s server because it must be stored and displayed to other users.

Depending on the implementation, Dahim may process:

• text of the dua request;

• pseudonym or anonymous publication identifier;

• internal account identifier;

• publication time;

• moderation status;

• reports, hiding, and blocking actions;

• limited security and abuse-prevention information.

The internal account identifier is used to operate, secure, moderate, or delete the publication. It is not intended to be publicly displayed.

8.2 Public Nature

Dua Wall publications may be visible to other Dahim users.

Users must not include:

• real names;

• phone numbers;

• email addresses;

• addresses;

• links;

• payment information;

• fundraising requests;

• cryptocurrency information;

• private-contact requests;

• identity documents;

• precise location;

• another person’s personal information;

• any other unnecessary identifying information.

At launch, the Dua Wall does not permit images, attachments, location sharing, direct messaging, payments, or donations between users. Comments are disabled or strictly limited.

8.3 Moderation

Dahim may analyze submitted content using automated detection and human review to identify:

• fraud;

• requests for money;

• contact information;

• external links;

• banking or cryptocurrency information;

• harassment, hatred, or threats;

• sexual content;

• self-harm or emergency content;

• another person’s private information;

• repeated spam;

• other prohibited content.

Content may be blocked, delayed, hidden, removed, or referred for human review.

Moderation records may be retained as necessary to:

• investigate reports;

• prevent repeated abuse;

• explain decisions;

• manage appeals;

• comply with legal obligations;

• protect users.

Users may appeal a decision through the in-app process or by emailing support@dahim.app with the subject “Dua Wall Moderation Appeal.”

Automated moderation does not produce legal or similarly significant effects concerning the user. A user may request human reconsideration where applicable.

8.4 Retention

A Dua Wall publication is retained until:

• the user deletes it;

• the account is deleted;

• Dahim removes it;

• it is no longer reasonably necessary to operate the feature;

• retention is required for security, legal, or moderation purposes.

Limited records of removed content may be retained where reasonably necessary to prevent fraud, respond to legal requests, protect users, or document moderation decisions.

9. How Dahim Uses Information

Dahim uses information for the following purposes:

Providing the Services

• creating and authenticating accounts;

• providing requested features;

• processing Talk requests;

• storing and displaying Dua Wall requests;

• saving preferences;

• administering subscriptions.

Legal basis where applicable:

• performance of a contract;

• steps requested before entering into a contract;

• consent;

• explicit consent for sensitive information where required.

Security and Abuse Prevention

• protecting accounts;

• investigating fraud;

• preventing unauthorized access;

• enforcing age restrictions;

• detecting prohibited Dua Wall content;

• maintaining technical security.

Legal basis where applicable:

• legitimate interests in security and service integrity;

• performance of the contract;

• compliance with legal obligations.

Support

• answering questions;

• resolving technical problems;

• managing complaints;

• handling deletion or rights requests.

Legal basis where applicable:

• performance of the contract;

• legitimate interests in customer support;

• legal obligations.

Payments and Legal Compliance

• confirming subscriptions;

• managing refunds and cancellations;

• maintaining accounting and transaction records;

• responding to lawful requests.

Legal basis where applicable:

• performance of the contract;

• legal obligations;

• establishment, exercise, or defence of legal claims.

Technical Improvement

• identifying crashes and errors;

• improving performance and reliability;

• understanding technical compatibility.

Dahim does not use private sensitive content for general analytics or product profiling.

Legal basis where applicable:

• legitimate interests in maintaining a secure and reliable service.

10. Sensitive Personal Information

Depending on the user’s voluntary input, Dahim may process information revealing:

• religious or philosophical beliefs;

• emotional or mental state;

• health-related information;

• personal hardship or private circumstances.

Dahim limits such processing to the feature expressly requested by the user.

Where applicable law classifies this information as special-category or sensitive data, Dahim relies on explicit consent or another legally permitted condition.

Sensitive information is not used for advertising, sale, data brokerage, or hidden behavioral profiling.

11. Service Providers and Disclosure

Dahim may disclose limited information to providers acting on its behalf for essential operational purposes.

These providers may include:

OpenAI

Purpose:

• generating Talk responses;

• applying applicable AI safety and abuse-prevention controls.

Data:

• the text and limited context intentionally submitted through Talk;

• technical information necessary to process the API request.

Hosting and Infrastructure Provider

Purpose:

• operating Dahim’s private virtual server environment;

• routing requests;

• maintaining availability and security.

The provider’s identity is listed in Dahim’s Legal Notice.

Authentication Provider

Purpose:

• account creation;

• login;

• credential protection;

• account security.

Data depends on the authentication method selected by the user.

App Stores and Payment Providers

Purpose:

• purchases;

• subscriptions;

• renewals;

• cancellations;

• refunds;

• fraud prevention.

These providers may also act as independent controllers for information they process under their own legal obligations.

Technical Service Providers

Purpose:

• essential error reporting;

• security;

• performance;

• transactional email.

Dahim configures such services not to intentionally receive private Talk content, journals, mood entries, or unnecessary sensitive information.

Dahim does not sell personal information and does not share sensitive content for behavioral advertising.

Information may also be disclosed:

• when required by law, court order, or valid governmental request;

• to protect users, rights, safety, or security;

• in connection with a merger, acquisition, restructuring, or transfer of the Services, subject to applicable safeguards and notice requirements;

• when the user expressly directs the disclosure.

12. International Transfers

Dahim is operated by a United States entity and uses service providers that may process information in the United States or other countries.

The principal OpenAI processing region described for Dahim is the United States, subject to OpenAI’s service configuration, infrastructure, and applicable terms.

Where personal information protected by the GDPR, UK GDPR, or similar laws is transferred outside its original jurisdiction, Dahim relies on applicable safeguards, which may include:

• an adequacy decision;

• Standard Contractual Clauses;

• the UK Addendum;

• contractual data-protection terms;

• provider security and transfer mechanisms;

• another legally recognized transfer mechanism.

Users may contact support@dahim.app for additional information concerning applicable transfer safeguards.

13. Retention Summary

Dahim applies the following intended retention periods:

• Talk request on Dahim’s VPS: processing time necessary to generate the response; not retained as conversation history.

• Local Talk history: up to 30 days by default, unless deleted earlier.

• OpenAI API abuse-monitoring records: up to 30 days under standard API controls, subject to lawful or safety exceptions.

• Journal and mood content: locally until deleted by the user.

• Dua Wall content: until deleted, removed, account deletion, or no longer necessary, subject to moderation and legal exceptions.

• Account information: for the account’s active life and during the 30-day deletion grace period.

• Technical diagnostics: for the shortest period reasonably necessary for stability, security, and troubleshooting.

• Support communications: for the period necessary to resolve the request and manage related legal or security issues.

• Payment and transaction records: for applicable accounting, tax, fraud-prevention, and legal limitation periods.

• Consent records: for as long as reasonably necessary to demonstrate valid consent and manage withdrawal.

• Moderation records: for as long as reasonably necessary to prevent abuse, address appeals, protect users, and comply with law.

When information is no longer necessary, it is deleted, anonymized, or isolated where continued retention is legally required.

14. Account and Data Deletion

Users may initiate account deletion at:

https://dahim.app/delete-account/

or contact:

support@dahim.app

After a valid request:

1. the account enters a 30-day grace period;

2. access may be suspended or limited;

3. the user may cancel the deletion during the grace period where this option is available;

4. after 30 days, account information is deleted or irreversibly anonymized, subject to lawful exceptions.

Account deletion includes associated server-side information such as:

• account information;

• saved server preferences;

• Dua Wall publications, subject to moderation or legal exceptions;

• server-side identifiers no longer necessary.

Local journal, mood, and Talk content should also be deleted from the user’s device through the relevant application or account-deletion flow.

Deleting a Dahim account does not automatically cancel an app-store subscription. The user must separately cancel the subscription through the applicable app store.

15. User Rights

Depending on applicable law, users may have the right to:

• obtain information about processing;

• access their personal information;

• correct inaccurate information;

• request deletion;

• restrict processing;

• object to certain processing;

• receive portable information where applicable;

• withdraw consent;

• request human review of an applicable automated moderation decision;

• lodge a complaint with a competent supervisory authority.

Requests may be sent to support@dahim.app.

Dahim may request reasonable verification before granting access, deletion, or other account-specific rights.

Dahim will respond within the period required by applicable law.

Users in the European Economic Area may lodge a complaint with the data-protection authority of their habitual residence, place of work, or the place of an alleged infringement.

Users in France may contact the Commission nationale de l’informatique et des libertés (CNIL) at https://www.cnil.fr.

16. Security

Dahim uses reasonable administrative, technical, and organizational measures designed to protect personal information, including:

• HTTPS/TLS encryption in transit;

• server-side protection of API credentials;

• access restrictions;

• private server infrastructure;

• minimization of information sent to service providers;

• separation of local private content from server content where applicable;

• security and abuse-prevention monitoring;

• account and authentication safeguards.

No security system is infallible. Users should use a strong password, protect their device, and promptly report suspected unauthorized access to support@dahim.app.

17. Personal Data Breaches

If Dahim becomes aware of a personal-data breach, it will investigate and take reasonable containment and remediation measures.

Affected users and competent authorities will be notified where required by applicable law.

18. Advertising and Profiling

Dahim does not use Talk conversations, journal entries, mood information, religious information, or Dua Wall requests for behavioral advertising.

Dahim does not create hidden permanent profiles of a user’s emotional or mental state for advertising, manipulation, or engagement optimization.

Dahim does not sell personal information.

If Dahim introduces advertising or materially different personalization in the future, it will update this Policy and obtain any consent required before activating the new processing.

19. Automated Systems

Dahim uses automated systems for:

• generating Talk responses;

• detecting possible personal information;

• moderating Dua Wall content;

• identifying spam, fraud, dangerous content, or abuse;

• maintaining service security.

These systems may make mistakes.

Talk responses do not constitute decisions producing legal or similarly significant effects.

A user affected by a moderation decision may request reconsideration through the application or by contacting support@dahim.app.

20. Website Cookies and Similar Technologies

The Dahim website may use technical cookies or comparable technologies necessary for:

• security;

• session management;

• language preferences;

• fraud prevention;

• proper website operation.

Non-essential analytics, advertising, or tracking technologies requiring consent will not be activated before the applicable consent choice.

Where non-essential cookies are used, Dahim will provide a cookie notice and preference mechanism identifying their purposes and retention periods.

21. Changes to This Policy

Dahim may update this Policy to reflect:

• changes to the Services;

• provider or model changes;

• legal or regulatory developments;

• new features;

• security or retention changes;

• clarification of existing practices.

The update date will be revised.

Material changes will be communicated through the application, email, website, or another appropriate method. Renewed consent will be requested where the change requires it.

22. Contact

Privacy questions, rights requests, consent withdrawals, complaints, and account-deletion requests may be submitted to:

Dahim Privacy Support
Email: support@dahim.app
Website: https://dahim.app
Account deletion: https://dahim.app/delete-account/

Legal controller:

AKHIM LLC
30 N Gould St, Ste N
Sheridan, Wyoming 82801
United States