In short
Hafez: Divan & Oracle (“the app”) is published by Mehdi Turan (“we”, rikny.com). There is no registration or login and we never ask for your name, email or phone number. The app has no ads, no analytics and no tracking.
Reading the Divan, casting omens and your journal work on your device. Our server is involved only for three things: an anonymous identifier that keeps your Golden Seals and subscription, the optional Hafez Guide (AI), and checking that requests come from the genuine app.
No account: an anonymous identifier
On first launch the app registers itself with our server. The server creates a random identifier and a random recovery secret; we store only the identifier and a one-way hash of the secret. The app keeps them in your phone’s secure storage (iOS Keychain / Android Keystore) and uses a session token that expires after 24 hours.
This identifier is not linked to your name, email, phone number, contacts, location or advertising ID. For this account the server keeps: your platform (iOS/Android), your Golden Seal balance and its history, your subscription status and expiry, and whether the welcome gift was given.
Stored only on your device
Your omen journal (ghazal, intention, date, your optional notes and outcomes, the sender’s name of gift omens), bookmarks, your recent intentions, a copy of your Guide conversations, settings (language, theme, font size, notification time, privacy lock) and downloaded language packs are kept in the app’s own storage, encrypted with a key held in the phone’s secure storage. The journal and your notes are never sent to us.
Casting an omen happens entirely on the device; the daily free omen is counted locally. Deleting the app deletes this data (on iOS the anonymous identifier can remain in the Keychain so your seals return if you reinstall).
The Hafez Guide (AI)
The Guide is optional. Before the first use the app asks for your consent; you can say no and use everything else, and you can withdraw consent at any time in Settings.
When you send a message, our server receives: your message (up to 500 characters), the ghazal number, your intention category and the app language. To write the answer, the server sends the AI provider the ghazal’s couplets, your intention category, your new message and a few earlier messages of the same conversation as context. No identifier, IP address, name or location is sent to the AI provider.
The AI provider is Anthropic (Claude), through its paid commercial API. If Anthropic is unavailable, we may use Google’s paid Gemini API as a backup. Under their commercial terms these providers do not use API data to train their models; they may keep it for a limited time for safety and abuse monitoring.
Our server stores the messages of each conversation (yours and the Guide’s) so the conversation can continue, and deletes them automatically after 30 days. Message contents are not written to our logs. Messages that show signs of a crisis are not stored and not sent to the AI; the app shows helpline information instead. Please do not share health details or other sensitive personal information in the chat.
Purchases
Golden Seals and the Book of Secrets subscription are sold through the Apple App Store or Google Play; we never see your payment details. We use RevenueCat to confirm purchases: the app tells RevenueCat your anonymous identifier, and RevenueCat informs our server about purchases, renewals, cancellations and refunds (product, transaction ID, dates, price and store environment) so your balance and subscription can be updated.
The detailed purchase notifications are trimmed after 90 days; the balance history is kept for accounting and fraud prevention. Purchases are also governed by the privacy policies of Apple, Google and RevenueCat.
Security checks and abuse prevention
To make sure requests come from the genuine app on a real device, the app uses Apple App Attest (iOS) or Google Play Integrity (Android). On iOS our server stores the device’s attestation key ID and public key; on Android our server asks Google to verify a one-time integrity token. These keys are kept up to 365 days after their last use, also after you delete your data, only so the one-time welcome gift cannot be claimed again (fraud prevention).
Your IP address is never stored. For rate limits (for example, how many welcome gifts one network can receive per day) we use a salted, shortened one-way hash of it, which is deleted when the time window ends.
Service providers
Cloudflare hosts our server, database and language packs; like any web host it processes technical request data such as IP address and device type when the app connects. Anthropic (and, as a backup, Google Gemini) writes the Guide’s answers. RevenueCat, Apple and Google handle purchases and device checks. Expo delivers app updates; the app checks for an update when it starts.
Some of these providers are located in the United States or other countries, so your data may be processed outside your country. We only share what each service needs to work, and we never sell your data.
Advertising and tracking
The app contains no ads, no advertising identifier, no analytics or crash-reporting SDK and no third-party tracking. Daily-couplet reminders are scheduled locally on your phone; no push token is sent anywhere.
Permissions
Face ID / fingerprint (optional) locks your journal and conversations; the check happens on the device and we never receive biometric data. Notifications (optional) are asked for only if you turn on the Couplet of the Day. The app does not use your camera, microphone, photo library, contacts or location.
Story cards and gift links
Story cards are created on your phone and shared only through your phone’s share sheet; your intention and conversations are never printed on them. A gift link contains only the ghazal number, the intention and the names you choose to type; it is visible to whoever you send it to and to the apps you share it through. If it is opened in a browser, rikny.com shows the gift from the link itself without storing it.
How long we keep data
Conversations: 30 days. Detailed purchase notifications: 90 days. Rate-limit and one-time security data: minutes to hours. Device attestation keys: up to 365 days after last use. Your anonymous account (balance and subscription): until you delete it. Balance history: kept without any link to you after deletion, for accounting.
Deleting your data and your rights
In the app, Settings → Delete all data erases your account on our server (conversations, balance, subscription link and purchase notifications) and then your journal, conversations and settings on the phone. Golden Seals on the account are lost. An active subscription must be cancelled separately in your App Store or Google Play account.
Depending on where you live (for example under the GDPR or Türkiye’s KVKK), you may have the right to access, correct, delete or export your data and to object to processing. We process data to provide the app you asked for, on the basis of your consent for the Guide, and on our legitimate interest in preventing fraud. Because we do not know who you are, please include your request from inside the app or write to [email protected]. You can also complain to your data protection authority.
Children
The app is not directed at children under 13, and we do not knowingly collect data from them. Younger users should use the Hafez Guide only with a parent’s permission. If you believe a child has used the Guide, delete the data in Settings or contact us.
Contacting us
If you email us or use the contact form on rikny.com, we receive what you choose to send and use it only to reply; see the rikny.com privacy policy. Data controller: Mehdi Turan, Istanbul, Türkiye · [email protected]
Changes
If we change how the app handles data (for example a new AI provider or a new feature), we will update this page before the change and update the date above.