Contents
MyAlMasjid is a community app built to connect masjids and their members. This Privacy Policy explains, in plain terms, what personal data we collect when you use the app, why we need it, and how we protect it. We take your privacy seriously and comply with India's Digital Personal Data Protection Act 2023 (DPDPA) and the EU General Data Protection Regulation (GDPR).
1. Data We Collect
| Data Type | What We Collect | Why |
|---|---|---|
| Phone Number | Your mobile number entered at registration | One-time password (OTP) authentication via Firebase |
| Name | Full name entered in your profile | Display in the community and masjid dashboard |
| Date of Birth | DOB entered in profile (optional) | Profile completion |
| Profile Photo | Photo you voluntarily upload | Profile display within your masjid community |
| Approximate Location | City-level GPS coordinate (coarse) | Finding nearby masjids |
| Precise Location | Exact GPS coordinate (fine) | Qibla compass direction — processed on-device only, never sent to our servers |
| Device / FCM Token | Firebase Cloud Messaging device token | Sending prayer-time notifications |
| Crash & Diagnostics | Crash stack traces via Firebase Crashlytics | Identifying and fixing bugs |
| Audio (ephemeral) | Live Azan audio streamed by the Imam | Live Azan feature — streamed in real-time via Agora, not recorded or stored |
We do not collect emails, financial information, health data, contacts, racial or ethnic origin, sexual orientation, or political and religious beliefs.
2. How We Use Your Data
- Authenticate your account (phone OTP via Firebase)
- Display your profile within your masjid community
- Send prayer-time and announcement notifications
- Calculate Qibla direction (on-device — data never leaves your phone)
- Find masjids near your approximate location
- Monitor app stability and fix crashes (Firebase Crashlytics)
- Serve contextual advertisements (Google AdMob)
3. Third-Party Services We Use
| Service | Provider | Data Shared |
|---|---|---|
| Firebase Authentication | Google LLC | Phone number |
| Firebase Cloud Messaging | Google LLC | Device FCM token |
| Firebase Storage | Google LLC | Profile photo |
| Firebase Crashlytics | Google LLC | Crash logs, device info |
| Firebase App Check | Google LLC | Device attestation (hardware-backed, no PII) |
| Google AdMob | Google LLC | Device identifier, approximate location (contextual ads) |
| Agora RTC | Agora.io | Live audio stream (ephemeral, not stored) |
Google's Privacy Policy: policies.google.com/privacy. Agora's Privacy Policy: agora.io/privacy-policy.
4. Data Retention
- Account data (name, phone, DOB, photo) — retained while your account is active.
- Prayer notifications — dispatch records deleted automatically after 30 days.
- Crash logs — retained for 90 days by Firebase Crashlytics.
- Live Azan audio — never stored; ephemeral only.
- On account deletion all personal data is permanently erased within 30 days.
5. Your Rights (DPDPA 2023 & GDPR)
6. Children's Privacy
MyAlMasjid is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with their data, please contact us immediately at privacy@myalmasjid.com.
7. Data Security
We implement industry-standard safeguards including:
- Sensitive credentials stored in Android Keystore / iOS Keychain (never in plain storage)
- All data transmitted over HTTPS (TLS 1.2+)
- Firebase App Check (Play Integrity) — prevents unauthorised API access
- Rate limiting and input validation on all API endpoints
8. Advertising (Google AdMob)
We display ads via Google AdMob. Google may use your device identifier and approximate location to serve contextual or personalised ads depending on your consent. EU/EEA/UK users are shown our GDPR consent form on first launch (powered by Google's User Messaging Platform). You can opt out of personalised ads at any time via Settings → Ads → Opt out of Ads Personalisation on your Android device.
9. Changes to This Policy
We may update this Privacy Policy from time to time. The "Effective" date at the top will be revised accordingly. Continued use of the App after changes constitutes your acceptance of the updated policy. Significant changes will be notified via an in-app banner.
10. Contact & Grievance Officer
MyAlMasjid
Data Protection & Grievance Officer