Privacy policy

Last updated: 16 October 2026
This is a translation of the Arabic policy; if the two differ, the Arabic text prevails.

What we collect

• Your identity: your email and display name from the identity provider (Google). We don't store your password — we never see it.
• Your documents: what you request and what we generate for you, and the files you upload for processing.
• Usage record: how much balance you used and when, for accounting and to show it to you.
• Your purchases: the plan, the amount and the transaction ID at the payment gateway.
• Your reports: when you report content written by the AI, we keep the reason for the report, your note and the text of what you reported — and the question that came before it, if it was a reply in the chat.
• Your academic profile (optional): your name, college, department, course, professor and specialization — if you fill them in, to be printed on the cover of your documents.
• Notification token: an identifier for your device issued by the notification system, if you allow notifications — so we can send you what concerns your account and documents.
• Trying the chat before signing in: if you chat on the home page without an account, we keep your messages temporarily under a random identifier that stays in your browser — so you find them if you come back, and they move to your account if you sign in. They are erased after about a day if you don't sign in. To limit trial messages we keep an encrypted fingerprint of your network (not the address itself), erased after two days.
• The link you came from: if you open the site from a link we published (a reel or an ad), your browser keeps its short code for thirty days, and we keep it with your account if you sign up — so we know which of our posts worked. Visits are counted as daily totals, with nothing that identifies you. We use no third-party tracking tool for this.
• Error log: when one of your requests fails we keep the error code, its description and time along with your account ID, so we can fix it. It is erased on its own after 30 days.

What we don't collect

Your card details never reach our servers. You enter them directly with the payment gateway, and we receive only the payment confirmation and the transaction ID.

Why we use it

To run the service: generating your documents, saving them for you, calculating your balance, activating your plan, sending notifications about your account, and reviewing what you report to improve what the AI writes. We don't use it to market to you, and we don't sell it to anyone. The code of the link you came from tells us which of our posts worked, nothing more.

Who processes it with us

• AI providers: the text of your request and the content of your document, and the files and images you upload to be read, are sent to the AI provider that generates the content at that stage, according to the service's configuration. They are processed on the provider's servers, which are outside Iraq. We do not train any model on your data, and the provider's processing of it is governed by its terms. Don't send through the service anything you don't want to pass through a third party.
• Reference and image indexes (OpenAlex, Crossref and DOAJ, and Wikimedia, Openverse, Unsplash and Pexels): they receive only the search words about your document's topic — not your name, your email or the text of your conversation.
• Google: signing you in with your Google account.
• Notification service (Expo, and through it Google's Firebase): your device token and the notification text.
• Payment gateway: processes your payment and tells us the result.
• Hosting provider: hosts the servers and the database.
• GitHub: hosts the Android app file you download from the site — it receives the download request and your device's internet address like any site you download a file from, and nothing from your account.
• Telegram: if you link your account to the bot, your messages and delivered documents pass through it.

How long we keep it

We keep your account and documents for as long as your account exists.

Deleting your account or some of your data

From inside the app: Settings → Delete account. Your account and the data linked to it are deleted immediately.

Without the app: if the app isn't installed, send a request from the email linked to your account to support@verdak.app with the subject “Delete my account”. We confirm your identity through that same email, carry out the deletion within 30 days and let you know when it's done.

What is deleted: your account, email and display name, your documents and their files, your conversations, your balance and its usage record, your reports, your academic profile, your notification tokens, and the Telegram link if there is one.
What we keep: financial transaction records and the document delivery log — to the extent required for accounting and to prove delivery in a dispute with the payment gateway — and the record of what the administration did on your account (such as granting balance). These contain neither the text of your documents nor your email nor your name, only the time of the operation, its amount and its ID, and the title of the delivered document.

Deleting some of your data without deleting your account — from inside the app, immediately and permanently:
A document: Library → open the document → the three-dot button (…), labelled “Document” at the bottom of the screen → Delete file. The document, its files and its exported copies are deleted.
A conversation: Chat → “Previous chats” (the clock icon) → the delete icon next to it. Its whole history is deleted.
Your balance record keeps that a document was created and how many points it used, without its text. To delete any other specific data, write to us from your account's email at support@verdak.app and we carry it out within 30 days.

Security

The connection is encrypted, sensitive keys are stored encrypted, and administrative access is limited to the owner. No system is completely secure, so we don't promise what we can't guarantee.

Service provider and contact

Verdak — Iraq. It is the party responsible for processing your data.

Support, privacy and account deletion: support@verdak.app
Billing and refunds: billing@verdak.app