RuhOS
Sign in

Privacy Policy

Last updated: August 18, 2026

RuhOS is operated by Sidrat Digital Inc., a Canadian federally-incorporated corporation. This policy describes what data RuhOS collects, where it is stored, how it is used, and your rights.

Data collected

When you use RuhOS, we collect and store the following:

Account information (created at sign-up):

  • Email address (from your OAuth provider or from account creation)
  • Full name and profile picture URL (if provided by your OAuth provider — Google or Apple)
  • Authentication session tokens (stored as HTTP-only cookies in your browser)

Reader activity:

  • Bookmarks you save (which verses)
  • Reading position (last surah and ayah you dwelt on)
  • Reader preferences (chosen translation, Arabic script preference, translation visibility toggle)

Automatic:

  • Locale and timezone (auto-detected from your browser at sign-up)
  • Aggregate analytics events (page views, page load timing) — no personal identifiers

We do not currently collect reflections, notes, or any user-generated written content beyond bookmarks and reader activity above. If future versions of RuhOS introduce additional data collection, this policy will be updated and the change reflected in the “Last updated” date above.

Where data is stored

Account and reader activity data is stored in Canadian data centers via Supabase in the ca-central-1 region (Toronto). Your account information, bookmarks, reading position, and preferences never leave Canadian infrastructure.

Static site content(HTML, CSS, JavaScript, images, fonts) is served through global content delivery networks — Vercel’s edge network and Cloudflare’s CDN. These serve public content only; they do not store your personal account data.

Session cookiesare stored on your device by your browser. They contain encrypted authentication tokens that identify you to RuhOS while you’re signed in. They are not shared with third parties.

How data is used

Your data is used exclusively to provide the RuhOS reading experience:

  • Email is used to authenticate you and communicate account-related notices
  • Bookmarks and reading position are shown to you in the reader and dashboard
  • Preferences customize how the reader displays content for you
  • Analytics events (aggregate, no personal identifiers) help us understand how the site is used

What we never do:

  • We never sell your data to third parties
  • We never use your bookmarks, reading position, or preferences for advertising
  • We never train AI models on your data
  • We never share your data with third parties except when legally required

Cookies

RuhOS uses cookies for two purposes only:

  • Authentication cookies (sb-*): session management provided by Supabase. Required to keep you signed in.
  • Analytics cookies (if applicable): Vercel Analytics for aggregate page view counts. No personal identifiers.

We do not use tracking, advertising, or third-party marketing cookies.

Your rights

You can:

  • Access your data: contact info@ruhos.io to request a copy of the data we hold about you
  • Delete your data: contact info@ruhos.io to request account and data deletion. All account data, bookmarks, reading position, and preferences will be permanently removed.
  • Correct your data: update your email or other account information through account settings
  • Ask questions: contact info@ruhos.io for any privacy-related inquiries

We aim to respond to all requests within 30 days.

Changes to this policy

We may update this policy from time to time. Material changes will be communicated via email to your account address. The “Last updated” date at the top of this page always reflects the most recent revision.

Contact

For privacy-related questions or requests, contact:

Sidrat Digital Inc.
Email: info@ruhos.io

For general product questions or feedback, use the same email address.