Privacy Policy

Last updated: 17 July 2026

RaheemAI ("we", "us") is operated by Abdulraheem Ahmed, Dublin, Ireland. We are the data controller for the personal data described in this policy. Contact: [email protected].

What we collect

Account data — your email address, your name (if you provide it or your sign-in provider shares it), and, for password accounts, a salted cryptographic hash of your password. We never store the password itself.
Usage data — the questions you ask the copilot, the answers you receive, your question count, and feedback you submit. This is kept so we can operate your question allowance, improve answer quality, and investigate errors you report.
Technical data — standard server logs (IP address, time, endpoint) kept by our hosting provider for security and reliability.

Why we process it (lawful bases)

Providing the service you asked for (contract — GDPR Art. 6(1)(b)): accounts, sign-in, answering your questions, your question allowance.
Improving and securing the service (legitimate interests — Art. 6(1)(f)): reviewing questions and answers to find and fix wrong or misleading responses, preventing abuse, debugging.
Legal obligations (Art. 6(1)(c)) where they apply to us.

Who processes data for us

We use a small number of service providers, each acting under their own data-processing terms:

Google — "Sign in with Google" authentication; Google Cloud (Vertex AI) processes your questions to generate answers; a Google Sheet receives usage and feedback records for our internal review.
Cloudflare — storage of account records and document data (R2).
DigitalOcean — application hosting (Frankfurt, EU).

Some providers process data outside the EEA (for example in the United States). Where that happens it is under the European Commission's Standard Contractual Clauses or an adequacy decision.

Cookies and local storage

We set one strictly necessary cookie (raheem_auth) to keep you signed in — it contains a signed session token and lasts up to 30 days or until you log out. Because it is strictly necessary for the service you requested, it does not require consent. We also use your browser's local storage to remember interface preferences (for example that you have acknowledged the guidance disclaimer) and to keep your chat history on your own device. We do not use advertising or third-party analytics cookies.

How long we keep data

Account and usage data: for as long as your account exists.
If you delete your account, your account record and stored question log are deleted from our systems. Copies in our internal review sheet and server logs are purged in the normal course (at most 12 months).

Your rights

Under the GDPR you can ask us for access to, correction of, deletion of, or a copy (portability) of your personal data, and you can object to or ask us to restrict processing. You can delete your account yourself from the copilot menu ("Delete my account"), or email [email protected] — we act on requests within one month. You also have the right to lodge a complaint with the Irish Data Protection Commission (dataprotection.ie).

A note on what you type into the copilot. Questions are sent to our AI provider to generate the answer and are stored against your account. Please don't include personal data about other people, or confidential information you are not entitled to share, in your questions.

Changes

If we change this policy we will update the date above; material changes will be flagged in the app.