Terms of Service & Privacy (GDPR)

1. Terms of Service

Saalik (“we”, “us”) provides a study-companion application at saalik.app (the “Service”) — curriculum tracking, notebooks, memorisation plans, a personal library, flashcards, and Saalik AI. By creating an account you agree to these Terms; if you don’t agree, don’t use the Service.

Accounts

You must give an email address you control and verify it before your account has access. You’re responsible for what happens under your account, so keep your password to yourself and tell us at salaam@saalik.app if you think someone else has it.

Subscriptions, lifetime access & billing

Access is paid — there is no free tier. Payments are handled by Stripe; we never see or store your card details. Three ways to pay for the Sālik plan:

• Monthly / yearly subscription — billed automatically until you cancel. Cancelling stops future billing; you keep access until the period you already paid for ends.
• Lifetime purchase ($189, one-time) — no further billing, ever, for as long as Saalik operates. See the Saalik AI allowance difference below — it is the one feature that isn’t identical to a subscription.

Ask within 14 days of any payment and we refund it in full, no questions asked — write to salaam@saalik.app. Beyond that window, subscriptions can still be cancelled anytime (no refund for the remainder of the paid period); a lifetime purchase has nothing further to cancel. Prices may change for future purchases; an existing subscription or a completed lifetime purchase is never repriced retroactively.

Acceptable use

Use the Service for your own study, not to resell or share account access, scrape or overload it, upload content you don’t have the right to store, or use Saalik AI to generate anything illegal, abusive, or designed to harm the Service or other people.

Your content

Your notes, uploads and library remain yours. You grant us only the licence needed to store and display them back to you as part of the Service. If you stop paying, nothing is deleted — your content stays exactly as it is, read-only, until you resubscribe or ask us to delete your account.

Disclaimers & liability

The Service is provided “as is”, without warranties of any kind. Saalik AI can make mistakes — it asks before it writes anything, but you’re responsible for reviewing what it produces. To the extent the law allows, our liability to you for any claim is capped at what you paid us in the 12 months before the claim arose.

Termination & governing law

You can delete your account at any time from Settings, or by asking us. We may suspend an account for abuse, non-payment, or a breach of these Terms. These Terms are governed by the laws of the jurisdiction in which Saalik’s operator is established; if that matters for a specific purpose, ask us at salaam@saalik.app and we’ll confirm it in writing.

2. Privacy & GDPR

This section explains what we collect, why, and the rights you have over it under the GDPR and similar laws — whether or not you’re in the EU/UK, we apply the same rules to everyone.

What we collect

• Account data — name, email address, and a hashed (never plain-text) password.
• Your content — courses, notebooks, vocabulary, memorisation plans, library uploads, and Saalik AI conversation threads.
• Billing — handled entirely by Stripe; we store which plan you’re on and Stripe’s customer/subscription IDs, never your card details.
• Technical data — a session cookie to keep you signed in, and, if you enable it, a push-notification subscription for reminders.

We don’t run analytics, advertising, or third-party tracking of any kind — there is nothing on Saalik watching you use it besides the Service itself.

Why we process it (legal basis)

To perform the contract you enter into by creating an account (running the Service, processing payment, emailing you a verification code or a receipt), and, for security and abuse-prevention, our legitimate interest in keeping the Service working for everyone.

Who we share it with

Only the processors that run part of the Service on our behalf, each under their own data-processing terms, and none of them permitted to use your data for their own purposes:

• Stripe — payment processing.
• MongoDB Atlas — database hosting for your account and content.
• Amazon S3 — storage for library files you upload.
• Resend — delivering transactional email (verification codes, receipts).
• Anthropic — powers Saalik AI; a message you send it is processed to generate a reply.

We never sell your data, and never share it with anyone outside this list without telling you first.

International transfers & retention

Some of the above processors operate outside your own country; each does so under standard contractual safeguards. We keep your data for as long as your account exists, plus what a processor like Stripe retains for its own legal/accounting obligations. Deleting your account deletes your content and personal data from our systems, other than what we’re legally required to retain.

Your rights

Write to us and we will act on any of the following within a month:

• Access — a copy of the personal data we hold on you.
• Rectification — correct anything that’s wrong.
• Erasure — delete your account and personal data.
• Portability — an export of your content in a usable format.
• Objection / restriction — object to or limit specific processing.
• Complain — to your local data-protection supervisory authority, if you think we’ve got it wrong.

Cookies

One cookie: a signed, HTTP-only session token that keeps you logged in. No advertising or analytics cookies are set by Saalik.

Children

Saalik is not directed at children under 16. If you believe a child has given us personal data, contact us and we’ll delete it.

Changes to this policy

If we make a material change, we’ll update the effective date above and, where required, tell you directly before it takes effect.