Privacy Policy

Shabaka al-Masajid is a free, non-profit community platform that connects masjids with the volunteers who serve them. Its founder runs it as sadaqah jariyah (a continuing charity) from Warangal, Telangana, India, and it is not part of any company.

Shabaka al-Masajid decides why and how the personal information described here is used, so it is responsible for it (the "data fiduciary" under India's Digital Personal Data Protection Act, 2023, also called the "data controller"). For any question or request about your information, write to contact@shabakaalmasajid.com.

• Account information: your name, email address and language, when you confirmed that you are 18 or older and accepted this policy, and when you last used your account. You sign in with Google, or with your email and a password. Your password is kept only as a secure one-way code (a hash) by our sign-in service, Supabase Auth, never in readable form; if you sign in with Google, we hold no password at all, and Google shares your name, email address, profile picture link and Google account ID with us. A mobile number only if you choose to add one.
• Sign-in records: when you sign in, our sign-in service records the time, your IP address and your browser or device, to keep accounts safe. The time and IP address are kept for up to 13 months, also after you delete your account.
• Masjid information: the masjid's name, address, map location, prayer times, facilities and events. When a trustee registers a masjid, we also ask for their name, their role at the masjid and their mobile number, so that our team can call them to check the masjid before it is listed. Only our team sees these.
• Photos: up to three photos of a masjid, and photos of its prayer-time board, added by the masjid's managers. Before a photo is sent, your phone makes it smaller and removes its hidden details, such as where and when it was taken and the camera used. A masjid photo becomes public only after our team has checked it and the masjid is listed. Board photos are never public: only our team and that masjid's managers see them.
• Volunteer information: your area, city and skills, your mobile number (if you add one) and whether you use WhatsApp on it, the masjids you follow, and the events you say you are interested in or going to.
• Sign-ups and messages: the name, email, optional phone number, area, masjid name and any message you enter in the "Leave your details" or Contact forms. Both forms reach our email inbox, and "Leave your details" sign-ups are also stored in our database (Supabase, Mumbai region, India). Only our small admin team can see them, and we use them only to get in touch with you and to help you get started. We delete them whenever you ask: write to contact@shabakaalmasajid.com.
• People our team adds: volunteers we meet in person or on the phone, or who offer to help through "Leave your details" (we then copy their sign-up details into our volunteer list), and masjid trustees who confirm a masjid's details for its listing. With their permission, our team records what they tell us: their name, phone number or email, area, skills (or their role at the masjid), the masjid they help and a short note. We use it only to stay in touch with them and to check masjid details. It is stored in the same database, only our small admin team can see it, and it is never shown publicly. We delete it whenever they ask (write to contact@shabakaalmasajid.com), or 12 months after we were last in touch.
• Usage data: basic information about pages visited and features used, to help us improve the platform.
• Notification data: the notices shown under the bell and your choices for them and, if you turn on notifications on a device, the address and keys your browser gives us for sending notices to that device.

• To create and manage your account securely.
• To show masjids and their prayer times on the public map.
• To connect volunteers with the masjids they follow.
• To check that a masjid and its trustee are genuine before the masjid is listed, and to remind a masjid's managers each week to check that its prayer times are still right.
• To send notifications about events, updates and reminders you have chosen to receive.
• To translate the text of events into the site's other languages, to suggest how a masjid's name is spelled in them and, when a masjid's manager asks for it, to read the prayer times from a photo of the masjid's board, so that a person can check them before they are saved.
• To send account emails, such as confirming your email address or resetting your password.
• To respond to your questions and support requests.

If you choose "Continue with Google", Google shares your name, email address, profile picture link and Google account ID with us. We ask Google only for these basic profile details, never for your contacts, files, calendar or anything else in your Google account.

• We use your name, email address and Google account ID only to create your account, recognise you when you sign in and contact you about your account. We don't use your profile picture.
• We never sell this information and never use it for advertising. We share it only with the service providers that run the platform for us (see "Information sharing" below): Supabase stores it.
• You can remove it at any time by deleting your account. You can also remove our access in your Google Account settings.

Shabaka al-Masajid's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We never sell, trade or rent your personal information. We share limited information only in these cases:

• Public map: the name, address, location, prayer times, facilities, events and approved photos of listed masjids are public. Personal information about users is never shown publicly.
• Within a masjid: a masjid's managers see only how many people follow it, never who. If you turn on "Ready to help" for a masjid, its managers see your name, mobile number, area, city and skills; if you say you are interested in or going to one of its events, they see your name, area, city and skills for that event. Nobody else sees your mobile number, and you can turn "Ready to help" off at any time.
• Our team: our small admin team can see an account's name, area, city, skills and language, when it joined and was last active, the masjids it follows or manages and where it is ready to help, to run the platform and help masjids find volunteers. It never sees the mobile number saved with an account, and none of this is shown publicly.
• Service providers: we use trusted providers who process data only to run the platform for us: Cloudflare (hosting, the bot check, email forwarding, and Workers AI, which translates event text, suggests how masjid names are spelled and reads board photos), Supabase (database, sign-in and photo storage), Resend (account emails and notices by email), the push services of browser makers (Google, Apple, Mozilla or Microsoft, depending on your browser), which carry notifications to your device in encrypted form, and Google (Gmail, the inbox where Contact and "Leave your details" messages arrive, Google sign-in, and opening a Google Maps link you paste, to find the masjid's location). Some of them may process data outside India.
• Fonts, program files, maps and the Google button: our pages load fonts from Google Fonts, program files from jsDelivr and map images from OpenFreeMap, and our sign-in pages load the "Continue with Google" button from Google. Like any website, these services see your device's IP address. OpenFreeMap also sees which part of the map you are looking at, and if you are signed in to Google in your browser, Google can tell that you opened our sign-in page. Your Google account details reach us only if you choose "Continue with Google".
• Legal requirements: we may disclose information if the law requires it or to protect the safety of our users.

• No advertising or tracking cookies. We count visits with Cloudflare Web Analytics, which does not use cookies.
• Kept in your browser: your language, your light or dark choice and, while you are signed in, your sign-in session. Signing out removes the session.
• Your location: if you use "Near me" or "Next jamat", your location is used only on your phone, to sort masjids by distance. It is never sent to us or stored by us.

• See the personal data we hold about you.
• Correct data that is wrong or incomplete.
• Delete your account and personal data, on your account page or by asking us.
• Withdraw your consent for optional processing at any time.