Privacy Policy

1. What we collect

Only if you create an account (user, mosque manager or administrator):

• Name and email address (required), and a username and phone number if you choose to add them.
• A password, stored only as a one-way hash. If you sign in with Google we receive your Google account identifier, name and email from Google; we never see your Google password.
• Your language, your Home Mosque and favourite mosques, your notification choices, and whether you agreed to WhatsApp messages.
• For mosque managers: the mosque details you enter (name, address, map position, contact numbers, prayer and iqamah times, announcements), the chat messages you exchange with the administrators, and plan and payment records (for example a payment reference or the screenshot you send on WhatsApp).

Collected automatically when you use the app or website:

• Sign-in sessions: IP address and browser or device description, kept so you can stay signed in and so we can detect abuse. The same details appear in our security audit log for important actions.
• Usage counts: the days you opened the app or website and how often, used for our own statistics.
• Push notifications: if you allow them, a device token from Google Firebase Cloud Messaging plus your phone model, Android version, app version and whether notifications are allowed.
• Location: only when you tap the location button, open the map or use the nearby search, the app asks the phone for your location to show mosques near you and centre the map. Your position is sent to our server to answer that request; we do not store it against your account or build a location history.

We do not collect your contacts, photos, files, microphone or camera, and we do not use advertising identifiers.

2. Why we use it

• To run your account, sign you in and keep it secure.
• To show prayer and iqamah times and the mosques you follow, and to send the reminders, messages and announcements you ask for.
• To let managers run their mosque pages, and to let administrators review and support them.
• To keep the service safe (rate limiting, abuse detection, audit log) and to fix problems.
• To meet legal obligations. We do not sell personal data and we do not use it for third-party advertising. Some mosque pages show sponsor notices that we manage ourselves; they do not use your personal data.

3. Who we share it with

Only with service providers that help us run Mosque Prayer, and only what they need:

• Google: Maps and Places (map display and finding mosques), Sign-In (if you choose it) and Firebase Cloud Messaging (push notifications). Google handles that data under its own privacy policy.
• Meta (WhatsApp Business): only if you agreed to WhatsApp messages; your phone number and the message text are sent to deliver them.
• An email provider (Gmail SMTP) to send password-reset and security emails.
• Our hosting provider (Hetzner), where the servers and database run.
• Mosque managers and administrators: your mosque page is public by design (prayer times, address and the contact numbers the manager chose to publish). Administrators can see account and mosque details to review and support them.

We may disclose data if the law requires it.

4. App permissions (Android)

• Location (approximate and precise): optional, only to show nearby mosques and centre the map.
• Notifications: optional, to ring and show messages, approvals, announcements and iqamah reminders.
• Exact alarms and start-up: so iqamah reminders you switch on fire on time and survive a restart.
• Internet: to load prayer times and mosques.

You can change each permission at any time in your phone settings.

5. Cookies and local storage

The website uses only the cookies and browser storage it needs to keep you signed in and remember your language and theme. It does not use advertising or cross-site tracking cookies. The app stores your sign-in and settings on your phone.

6. How long we keep it

Account data is kept while your account exists. Sign-in sessions expire and are removed automatically. When an account is deleted we remove your email address, username, phone number, sign-in links, device tokens, favourites and Home Mosque and blank your name; a few records that must stay consistent (for example audit-log entries and payment records) are kept without those personal details. Backups are overwritten on a rolling basis.

7. Your choices and rights

• Look at and correct your details in your account (website or app).
• Switch notification types or WhatsApp messages off at any time in the app.
• Ask us to delete your account and data: see the account deletion page.
• Ask for a copy of your data, or object to how it is used, using the contact below.

How to delete your account and data

8. Security

Connections use HTTPS, passwords are hashed, sign-in sessions can be revoked, and access is limited by role. No system is perfectly secure; if we learn of a breach affecting you we will tell you as the law requires.

9. Children

Mosque Prayer is a general-audience app and is not directed at children under 13. We do not knowingly collect their personal data; if you believe a child has created an account, contact us and we will delete it.

10. Changes

If we change this policy we will update the date above and, for important changes, tell you in the app or by email.

11. Contact

Questions or requests about your data: ZatGo Innovation, through the Help page or by email at support@mosqueprayer.org.