Privacy Policy
Last updated 21 October 2026
1. Who we are
Ayah+ is a pay-per-view streaming service for Islamic cinema, operated by Just Lucid FZE, a company registered in the Sharjah Research, Technology and Innovation Park (SRTI Park) Free Zone, Sharjah, United Arab Emirates ("Ayah+", "we", "us"). We are the controller of the personal information described in this policy.
This policy applies when you use the Ayah+ website (ayahplus.com and help.ayahplus.com). When our mobile and TV apps launch, it will apply to them too, and we will update it to describe anything they add. It explains what we collect, why, who we share it with, and the choices you have.
Questions or requests: legal@ayahplus.com.
2. Information we collect
We collect only what we need to sell, stream and support films.
| Category | Examples | Source |
|---|---|---|
| Account | Your name and email address. We don't use passwords — you sign in with a one-time code sent to your email. | You |
| Sign-in and device | The type of browser and device you sign in with, when you signed in, and the IP address of the request — so we can keep your account on one device at a time and protect it. | Your device |
| Purchases | Titles you bought, price, currency, date, receipt and refund status | You, Stripe |
| Payment | Card details are entered directly with Stripe and never reach Ayah+. We receive a payment reference and a link to Stripe's receipt. | Stripe |
| Viewing | Your watchlist, where you stopped in each title, and playback quality data such as errors and buffering | Your device, Mux |
| Prayer-time settings (optional) | The city you choose — or, if you select Use my location, your approximate location rounded to about 1 km — plus your calculation method and reminder preferences | You |
| Support | Messages and attachments you send us | You |
We do not collect special categories of data (such as religious beliefs) on purpose. Watching a film on Ayah+, or turning on prayer-time reminders, is not treated by us as a statement of your faith, and we do not profile users on that basis.
3. How we use it
| Purpose | Legal basis (where the law requires one) |
|---|---|
| Create and run your account and sign you in | Contract |
| Keep your account on one device at a time and protect it from misuse | Contract; legitimate interests |
| Process purchases, pre-orders and refunds | Contract |
| Stream films, remember where you stopped, and release pre-orders at the premiere | Contract |
| Show prayer times and reminders, if you turn them on | Your request (turn it off at any time) |
| Prevent fraud, piracy, account sharing and payment disputes | Legitimate interests; legal obligation |
| Measure and improve playback quality | Legitimate interests |
| Send service messages (sign-in codes, receipts, security and policy notices) | Contract; legal obligation |
| Keep tax, accounting and legal records | Legal obligation |
We do not sell your personal information, and we do not use it for advertising. We don't send marketing emails; if we start, we will ask for your consent first.
4. Who we share it with
We share personal information only with the service providers below, and only as much as each needs. They may use it only to provide their service to us.
| Provider | What they do for us | Where data is processed |
|---|---|---|
| Supabase | Database, sign-in and file storage | India |
| Vercel | Website hosting | United States and a worldwide network |
| Cloudflare | Domain name and email forwarding | Worldwide network |
| Mux | Video hosting, streaming and playback quality data | United States |
| Stripe | Payments, receipts and fraud prevention | United States and other countries |
| Resend | Sending sign-in codes by email | European Union (Ireland) |
| Google (Gmail) | Our support inbox | United States and other countries |
We may also share information with:
- Filmmakers whose titles you buy, who may receive sales totals per title, territory and date — never your name, email or payment details.
- Authorities and advisers when the law requires it, to enforce our terms, or to protect users, filmmakers or Ayah+.
- A buyer or successor if Ayah+ is merged, sold or restructured. This policy will continue to apply to your information.
5. Cookies and similar technologies
We use only what the service needs to work:
- Sign-in: keeps you signed in to your account.
- Payments: Stripe sets cookies on the checkout page to prevent fraud.
- On your device: small notes such as whether you signed out on purpose.
We don't use advertising or cross-site tracking cookies, and our playback quality measurement runs without cookies. Because everything we use is essential, we don't show a cookie banner. If that ever changes, we will ask for your consent first. See our Cookie Policy.
6. International transfers, retention and security
Transfers. We are based in the UAE. Our providers store and process data in India, the United States, the European Union and other countries (see section 4). When data leaves your country, we rely on safeguards the law recognises, such as standard contractual clauses or the provider's own transfer mechanisms.
Retention. We keep information only as long as we need it:
| Data | How long |
|---|---|
| Account, watchlist, viewing progress and prayer-time settings | While your account is open; deleted when you delete your account |
| Purchase records | 5 years after the transaction, for tax and accounting. After you delete your account they are kept without your name or email. |
| Sign-in history | 13 months (we keep your most recent sign-in while your account is open) |
| Unfinished checkouts | 30 days |
| Support messages | 2 years after the conversation ends |
| Playback quality data | Up to 13 months |
Security. We use encryption in transit, one-time sign-in codes instead of passwords, access controls and signed playback URLs. No system is completely secure; if a breach affects you, we will notify you and the authorities as the law requires.
7. Your rights
Depending on where you live (for example under the UAE Personal Data Protection Law, the EU and UK GDPR, or US state privacy laws), you can ask us to:
- see a copy of your personal information
- correct it
- delete it, unless we must keep it by law (such as purchase records)
- send it to you or another service in a portable format
- stop or limit certain uses, including any processing based on legitimate interests
You can download a copy of your data or delete your account yourself in Account → Your data. For anything else, email legal@ayahplus.com. We will verify your identity and reply within 30 days. If you are unhappy with our answer, you can complain to your local data protection authority.
8. Children
Ayah+ accounts are for people aged 18 or older, because accounts make purchases. Children may watch under a parent's account and supervision. We do not knowingly collect information from children; if we learn we have, we will delete it.
9. Changes to this policy
We will post any update here and change the date at the top. If a change is significant, we will tell you by email or on Ayah+ before it takes effect.
10. Contact
Just Lucid FZE, SRTI Park Free Zone, Sharjah, United Arab Emirates Email: legal@ayahplus.com