Privacy Policy
How Sukon collects, uses and protects your personal data.
1. Who we are
This Privacy Policy explains how INDO CHATS PRIVATE LIMITED (CIN U62012WR2026PTC295588), registered office 168, G.T. Road, near Aloka Cinema, Shibpur, Howrah, West Bengal 711102, India, which owns and operates the Sukon App (“Sukon”, “we”, “us”), processes personal data when you use the sukon.in website and, the Sukon mobile and web apps (together, the “Services”). INDO CHATS PRIVATE LIMITED is the Data Fiduciary for Sukon. Our Data Protection Officer can be reached at dpo@sukonapp.in.
2. Our principles
- We collect only what each feature needs (data minimisation).
- We ask for consent before we collect, and you can withdraw it at any time.
- We never sell personal data, and we never share it with any third party for that party’s own purposes. We share data only as described in Section 6.
- We never request or use an advertising identifier.
- Religious-practice data is treated as sensitive: it is never used for advertising and never shared with third parties for their own purposes.
3. What we collect on this website
This website does not use advertising or tracking cookies.
- Your account and Sukon updates: if you sign up, we collect your email address and, if you give it, your name. You sign in with a one-time code we email you, and a sign-in token is kept in your browser for up to 30 days. Sign-ups that are not confirmed are deleted automatically within 24 hours. We email you about your account, the Sukon launch and major updates, and you can ask us to remove your account at any time.
- Requests: if you send a request, we collect the details you enter (name, email, phone, city, state, preferred language and contact method, and your message) and use them to respond and to arrange what you asked for. We share only what is needed with the verified provider or partner who handles your request.
- Vendor registration: if you register a company, we collect the business and contact details you enter and use them only to assess and contact you as a possible supplier.
- Trackers and prayer settings: your Salah and Roza tracker entries and chosen city are saved only in your browser and are never sent to us.
- Email: if you email us, we receive your address and message and use them only to respond to you.
Website form data is stored on Sukon’s secure cloud in the Mumbai region (India), and confirmation emails are sent through our email delivery service.
4. What the app will collect
- Account details: name, email or mobile number, preferred language.
- Prayer profile: location (for prayer times and Qibla), Fiqh and calculation method.
- Bookings and giving: service details, payment status (card details are handled by regulated payment partners and never stored by Sukon), donation records.
- Learning: course progress and, with your permission, recitation audio for Tajweed feedback.
- Support: messages and complaints you send us.
5. How we use data
- To provide and personalise the Services you request.
- To process bookings, payments, payouts and disbursement reports.
- To verify Imams, scholars, teachers and partners.
- To provide support and resolve grievances.
- To meet legal obligations.
6. Sharing
We share data only with service providers who process it on our instructions (for example our cloud hosting provider in the Mumbai region (India), and regulated payment partners), with the Imam or partner you book or give to (only what is needed to fulfil your request), and where required by law.
7. Where data is stored
Indian users’ data is hosted in India. Data of users in other markets will be hosted in line with the laws of those markets as Sukon expands to them.
8. Your rights
Under the Digital Personal Data Protection Act, 2023, you may access, correct, complete, update and erase your personal data, withdraw consent, nominate another person to exercise your rights, and seek grievance redressal. Write to grievance@sukonapp.in. We acknowledge requests within 24 hours and aim to resolve them within 15 days. If you are not satisfied with our response, you may complain to the Data Protection Board of India.
See all of this in one table — what we collect, why, where it is stored, who processes it and how long we keep it — on our data map, which also lists every service provider.
8A. Sukon AI (Islamic AI Bot)
When you ask Sukon AI a question, the text of your question and the recent conversation are sent to our AI service, which runs on our cloud provider’s servers in India and the Asia-Pacific region, only to produce the answer. Sukon does not save your questions or answers in any database, does not link them to your account, and does not use them — and does not allow our AI provider to use them — to train any AI model.
- On your device: the last 20 messages are kept in your browser for the current session only, so the chat keeps its context. Closing the tab, or tapping “New chat”, clears it.
- On our side: to stop abuse we keep a daily question counter linked to a one-way scrambled (hashed) form of your internet address. It contains no question text and is deleted after 24 hours.
- If you tap “Report this answer”: that question and answer are sent to our scholar panel for review and kept for up to 12 months, without your name or email.
- Sukon AI gives general guidance with references. It is not a fatwa. Questions about divorce, inheritance shares and similar personal rulings are pointed to a qualified scholar.
9. Retention and security
We keep personal data only as long as needed for the purpose collected or as required by law, and protect it with encryption in transit and at rest, access controls and regular security reviews.
| Data | How long we keep it |
|---|---|
| Sign-in codes (OTP) | 10 minutes, then deleted |
| Unfinished sign-ups | 24 hours |
| Sign-in session on your device | 30 days, or until you sign out |
| Your account and settings | Until you delete your account |
| Email updates subscription | Until you unsubscribe |
| Service requests, bookings and invoices | 8 years, as required by GST and income-tax record rules |
| Donation pledges | 8 years, so receipts and reports can be checked |
| Grievances and complaints | 3 years after they are closed |
| Dua Wall posts | Until you or our moderators remove them; abuse reports 30 days |
| Sukon AI questions | Not stored (see section 8A) |
| Technical server logs | 30 days |
Analytics: the Sukon website does not use any third-party analytics, advertising or tracking scripts, and sets no advertising cookies. We look only at overall, anonymous server statistics (such as total page requests) to keep the site running well.
9A. Personal data breaches
If a personal data breach occurs, we will report it to CERT-In within 6 hours of noticing it, inform the Data Protection Board of India as required by the Digital Personal Data Protection Act, 2023, and tell affected users within 72 hours — explaining what happened, its likely impact, the steps we are taking and what you can do.
10. Children
Accounts for users under 18 require verifiable consent of a parent or lawful guardian, as required by law. At sign-up we ask for your date of birth; if you are under 18 we ask for your parent or guardian’s consent and email address, and we email them to let them know. A parent can ask us to delete the account at any time by writing to dpo@sukonapp.in, and we do so within 7 days. We do not track or target advertising at children.
11. Contact
Questions or complaints about this policy: dpo@sukonapp.in or grievance@sukonapp.in. See also our Grievance Redressal Policy.
Version history
- 30 October 2026 — added the data map and service-provider list, and named the AI service used by Sukon AI.
- 23 October 2026 — previous version.