Privacy Policy

Masjidfy is a free platform that connects people with their local mosques. This page explains what personal information we handle, why, who we share it with, and the choices you have. We try to collect as little as we can.

Who is responsible for your data

Masjidfy is the controller of your account, the security records described below, and the public mosque directory. When a mosque has claimed its page, that mosque is the controller for community information it collects through the platform (for example event or class registrations), and Masjidfy acts as its processor. You can reach us at Hello@masjidfy.com.

What we collect

• Account details: your name, email address, optional phone number, and your password (stored only as a one-way hash — we can never see it).
• Sign-up and security records: when and how an account was created (website, iOS or Android), sign-in successes and failures (with a reason such as “wrong password”), password-reset, email-confirmation and account-management actions, and a technical request ID. These records never contain passwords, and we do not record your IP address in them.
• Sign-in sessions: while you are signed in we keep your IP address and browser/device type to protect your account. They are removed when you sign out or shortly after your session expires.
• Your choices: mosques you follow, default mosque, notification preferences, saved items, and event or class registrations.
• Location: only if you tap “near me”. Your device shares your position so we can show nearby mosques; we do not store it.
• Donations: amount, campaign, and Gift Aid details if you choose Gift Aid. Card details are handled entirely by Stripe and never reach our servers.
• Support requests and reports: what you tell us when you contact a mosque or report a mistake in a listing.
• Push notifications: a device token so we can deliver notifications you have opted into.
• Basic usage counts: for example how many times an offer is viewed. We do not use advertising trackers or third-party analytics.

The mosque directory

Many mosque listings come from public sources — OpenStreetMap contributors (ODbL) and the Charity Commission for England and Wales (Open Government Licence). These describe organisations, not individuals. If a listing is wrong, or you run a mosque and want it corrected or removed, use Report a mistake on its About page. Prayer times shown for mosques that have not claimed their page are calculated, not confirmed by the mosque.

Sponsored promotions

Businesses can pay to show a promotion on Masjidfy; these are always labelled Sponsored, and a mosque showing one does not endorse the business. To tell advertisers how their promotion performed we count views and clicks. We do this without storing your IP address or device details: each visit is turned into a scrambled code that changes every day, which we use only to avoid counting the same person more than once in 30 minutes. Businesses see totals, never who you are. You can report a promotion from its page; if you are signed in, your report is linked to your account so we can follow up.

Emails we send

A welcome and email-confirmation message when you sign up, password-reset emails when you ask for one, and notifications you have opted into. We do not send marketing unless you tick the box to receive it, and you can withdraw that at any time.

Why we use your information

• To provide the service you asked for (contract).
• To keep accounts and the platform secure, prevent abuse and fix problems (legitimate interests).
• To process donations and Gift Aid (legal obligation / legitimate interests).
• To send notifications and any marketing you choose to receive (consent).

Religious belief

Following a mosque can reveal religious belief, which is special category data. We use it only to provide the service you asked for, never for advertising, and we do not sell or share it for marketing.

Who we share it with

We do not sell personal data. We use these providers to run the service: Vercel (hosting), Neon (database), Resend (email), Stripe (payments), Apple, Google and Expo (push notifications), and postcodes.io (postcode lookups). When a page shows a map or uses our fonts, your browser contacts OpenStreetMap, Cloudflare (cdnjs) and Google Fonts directly, which means they can see your IP address. Where a provider is outside the UK, we rely on approved safeguards such as the UK addendum to standard contractual clauses.

How long we keep it

• Account details: while your account exists. Deleting your account removes them.
• Failed sign-in records: 90 days. Successful sign-in records: 365 days. Other account-security records: 730 days. If you delete your account, the details are stripped from these records.
• Donation records: 6 years, for accounting and Gift Aid rules, then deleted. When you delete your account they are anonymised.
• Promotion view and click counts (the scrambled visit codes): deleted after 13 months. Promotion complaints and the history of what was done to each promotion are kept as a record of our decisions.
• Event registrations: deleted 12 months after the event. Class registrations: deleted 12 months after you registered.

Your rights

You can see, correct, export or delete your information from Account → Privacy & your data, or by emailing us. You can also object to or restrict some uses and withdraw consent at any time. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk.

Children

Masjidfy is not aimed at children under 13, and we do not knowingly create accounts for them.

Changes

If we change this policy in a way that matters, we will update the date above and, where appropriate, tell you.