Privacy Policy

Masjidfy provides apps and websites for mosques and Islamic centres. Each mosque is the data controller for its community's information; Masjidfy acts as data processor on the mosque's behalf, and as controller only for platform accounts and billing.

What we collect

• Account details: name, email, optional phone number, password (stored only as a one-way hash).
• Your choices: default mosque, notification preferences, saved items, event and class registrations.
• Donations: amount, campaign, Gift Aid declaration and postcode if you choose Gift Aid. Card details are handled entirely by Stripe and never reach our servers.
• Confidential support requests: the message and contact details you provide, visible only to authorised staff at your mosque.
• Device push token and basic usage counts (e.g. offer views) — no advertising trackers.

Why we use it (lawful bases)

• To provide the service you ask for (contract).
• To process donations and Gift Aid (legal obligation / legitimate interests).
• To send notifications you opt into (consent — change any time in Settings).
• To keep the service secure and prevent abuse (legitimate interests).

Special category data

Using a mosque app may indicate religious belief. We process this only to provide the service, under the not-for-profit body condition (Article 9(2)(d) UK GDPR) on behalf of your mosque, and never share it for marketing.

Sharing

We use carefully selected processors: Stripe (payments), our cloud hosting provider (UK/EU regions), Apple/Google/Expo (push delivery) and our email provider. We never sell personal data.

Retention

Account data is kept while your account is active. Donation records are kept for 6 years for accounting and HMRC Gift Aid requirements, then deleted. Registrations are deleted 12 months after the event.

Your rights

You can access, correct, export or delete your data at any time from Account → Privacy & your data, or by contacting your mosque. You may complain to the Information Commissioner's Office (ico.org.uk).