Privacy policy
Last updated: 22 October 2026
This Privacy policy explains how Darwa Labs LLC (“Darwa Labs”, “we”, “us”) handles personal data when you use darwa-labs.com and our Products: IslamScribe, Darwa and Mushaf (together, the “Services”).
1. Who is responsible
Darwa Labs LLC, a New Mexico limited liability company, 8206 Louisiana Blvd NE, Ste A #10914, Albuquerque, NM 87113, United States, is the data controller for the Services.
Contact: contact@darwa-labs.com.
2. One account for all Products
Your Darwa Labs account works on IslamScribe, Darwa and Mushaf. The same account data is shared between the three Products so that you can use them with one identity. You sign in separately on each Product.
3. Data we collect
- Account data: email address, name or display name, password (stored only as a secure hash), sign-in and security information such as multi-factor authentication settings.
- Content you provide: audio, video, links, documents, transcripts, subtitles, translations, project settings and any other material you upload, link or create in the Services.
- Payment data: subscription and billing details. Card payments are processed by Stripe; we do not store your full card number.
- Device and notification data: device type, app version and push-notification tokens when you enable notifications in the mobile app.
- Usage and analytics data: pages and screens viewed, interactions, approximate location derived from IP address, browser and device information, collected through Google Analytics.
- Technical and diagnostic data: IP address, logs, error reports and crash diagnostics used to keep the Services running and fix problems.
- Correspondence: messages you send us by email.
4. Why we use data
| Purpose | Legal basis (where GDPR or similar laws apply) |
|---|---|
| Create and run your account and provide the Services | Performance of our contract with you |
| Process your content (for example transcription, translation, subtitle and video generation) | Performance of our contract with you |
| Billing, subscriptions and fraud prevention | Contract; legal obligation; legitimate interests |
| Security, debugging and service reliability | Legitimate interests |
| Measure and improve the Services with analytics | Consent where required by law; otherwise legitimate interests |
| Service emails and support | Contract; legitimate interests |
| Comply with law and defend legal claims | Legal obligation; legitimate interests |
We do not sell your personal data and we do not use it for third-party advertising.
5. Who receives data
We share personal data only with service providers that process it on our behalf, under contract, and only as needed:
- Hosting and storage: Hetzner and other infrastructure providers, with data stored in Germany, Finland and France.
- Artificial-intelligence providers: third-party model providers that process your content to produce transcripts, translations and other generated results.
- Payments: Stripe.
- Error monitoring: Sentry, for debugging only.
- Analytics: Google Analytics (Google).
- Push notifications: Expo, to deliver mobile notifications.
- Email delivery: our email service provider, to send account and service emails.
We may also disclose data when required by law, to protect our rights, users or the public, or as part of a merger, acquisition or sale of assets.
6. International transfers
Darwa Labs LLC is based in the United States and some of our providers operate outside your country. When personal data from the European Economic Area, the United Kingdom or Switzerland is transferred to a country without an adequacy decision, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.
7. Cookies and analytics
darwa-labs.com does not use cookies or analytics. The Product web applications use cookies and similar technologies that are necessary for sign-in and security, and Google Analytics cookies to measure use. Where the law requires it, analytics cookies are set only with your consent. You can also block or delete cookies in your browser settings.
8. How long we keep data
- Account data and content: for as long as your account is active, then deleted within 30 days of account deletion, except for copies in backups, which are overwritten on a rolling basis within 90 days.
- Billing records: for as long as required by tax and accounting laws.
- Logs and diagnostic data: generally no longer than 90 days.
- Data needed to resolve disputes or comply with law: for as long as that need lasts.
9. Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict or object to the processing of your personal data, to receive it in a portable format, and to withdraw consent at any time without affecting earlier processing.
To exercise these rights, including to delete your account, email contact@darwa-labs.com from the address linked to your account. We may need to verify your identity. We respond within the time required by applicable law.
If you are in the EEA, the UK or Switzerland, you may also complain to your local data protection authority.
10. Security
We use technical and organisational measures appropriate to the risk, including encryption in transit, hashed passwords and access controls. No system is completely secure, and we cannot guarantee absolute security.
11. Children
The Services are not intended for anyone under 16. We do not knowingly collect personal data from children under 16. If you believe a child has given us personal data, contact us and we will delete it.
12. Changes
We may update this Privacy policy. We will post the new version here with a new “Last updated” date and, for material changes, notify you by email or in the Services.
13. Language
This policy is available in English, French and Arabic. If the versions conflict, the English version prevails to the extent permitted by law.