Privacy Policy

This policy explains how information is handled for two separate products. Al Muslim is the mobile app. Al-Masjidh is the website at https://almasjidh.com and the mosque office on that website. What we collect depends on which product you use. We do not sell personal data.

1. Who we are

Al Muslim is the app a person uses for prayer times, Qibla, the Quran, duas, hadith, a mosque finder, and, after they follow a mosque, that mosque’s news, janaza notices, and bayans. Al-Masjidh is the public site and the office where a mosque keeps its own records and publishes what followers should see. Privacy questions for either product go to support@almasjidh.com.

2. Information in Al Muslim

This section is only about the mobile app.

2.1 The phone account

A guest session stores an installation id so that device can keep one guest profile. When a person registers, we store the Sri Lankan mobile number, in local and international form, to send a one-time code and to recognise the account. We may also store the name, profile photo, date of birth, gender, marital status, profession, and district the person enters, and whether onboarding is finished. The one-time code is checked and then discarded. We do not keep it as a reusable password.

2.2 The device, sign-in, and alerts

To stay signed in we store a refresh token in hashed form, plus device platform, app version, device model, a push token, the prayer zone chosen for alerts, last-seen time, and the IP address and user agent at sign-in or refresh. Sign-in events may be written to a security log. Notification choices the person makes in the app are saved with the account. The sign-in token on the phone is kept in the device’s secure storage.

2.3 Location and the compass

If the person allows it, Al Muslim uses location to pick a prayer zone, find nearby mosques, and point the Qibla. The zone that results may be saved with the account. We do not build an advertising trail of movements. Qibla also uses the compass while that screen is open. Location can be turned off in the phone settings, and the person can choose a zone by hand.

2.4 Following a mosque, and what the app then shows

When a person follows a mosque, we store that follow on their Al Muslim account. The mosque can then see that this account follows it, and the app can show that mosque’s announcements, janaza notices, and bayans. A listening link for a bayan is created for that signed-in follower and expires. The audio file stays with the mosque’s library. Prayer streaks and personal goals are stored for the person’s own account when they choose to keep them on the server. Quran reading progress and similar tools may stay on the device.

A follow is not a Jamaat membership. The app does not receive the mosque’s ledgers, trustee minutes, staff list, or the full Jamaat roll.

3. Information in Al-Masjidh

This section is only about the website and the mosque office.

3.1 The public website

Public pages can be read without an account. If you use location on the site to find a nearby mosque, that lookup is used to return mosques and a prayer zone. The public mosque directory shows details a mosque publishes for discovery, such as name, address, phone, email, and location. The site may set a cookie to keep a mosque-office session signed in. That cookie is httpOnly. Blocking cookies can stop office sign-in.

3.2 The mosque office account

Mosque staff sign in with a mobile number and a one-time code. That session belongs to the mosque office. It is a different sign-in from the Al Muslim app, even if the number matches a phone that also has the app. We store the office user’s identity, the mosque they are allowed to open, and the session needed to keep them signed in.

3.3 Records the mosque keeps

The office stores what that mosque enters: profile, facilities, and prayer times; announcements; janaza details, including family contact where the mosque provides it; the follower list; the Jamaat roll (name, mobile, address, and the other fields the mosque fills in) and join requests; bayan details and the audio file; sanda, zakat, and collection entries; trustee names and meeting minutes; and staff records. Media such as the mosque cover is stored so the directory and the app can show it.

Those office records are available to the staff of that mosque. Another mosque cannot open them. Followers in Al Muslim receive the announcements, janaza notices, and bayans the mosque publishes for them. They do not receive the ledgers, minutes, staff list, or the Jamaat roll through the app.

4. How information is used

• Run Al Muslim for the person who installed it
• Run the Al-Masjidh website and that mosque’s office
• Send one-time codes for app registration and for mosque-office sign-in
• Show prayer times, Qibla, nearby mosques, Quran tools, and reminders
• Remember a follow, and deliver the news, janaza, and bayans for that follow
• Keep the mosque’s own roll, ledgers, trustees, and staff
• Answer support mail and protect both products
• Meet applicable law

5. Who else receives information

We use providers that host the service, store files, deliver text messages for one-time codes, send push alerts, and provide maps. They process information so those features can work. A mosque’s staff can see the office records of their own mosque, including who follows them in Al Muslim. We may disclose information when the law requires it, to protect people or the products, or as part of a reorganisation of the service.

6. On the phone

Al Muslim keeps some preferences and reading progress on the device so it can work when the network is poor. Removing the app removes that local copy. The account on the server remains until the person deletes it or we remove it under this policy. Deleting the Al Muslim account removes the phone profile, follow, synced prayer tracking, goals, and related app settings where the product supports that. It does not erase a mosque’s own Jamaat roll, ledgers, or bayan library in Al-Masjidh. The mosque keeps those records.

7. How long we keep information

App account data is kept while the account exists and as long as needed for security and legal duties. Mosque-office records are kept while that mosque uses the office and as needed for the mosque’s own operations. We use reasonable technical and organisational measures. No system is perfectly secure. Protect the phone, the office sign-in, and one-time codes.

8. Your choices

• Location and notifications are controlled in Al Muslim and in the phone settings
• The Al Muslim profile can be updated in the app, and the account can be deleted from profile settings
• A follow can be left from the app. That stops the app feed from that mosque
• Jamaat, ledger, and staff questions go to the mosque that holds those records. We can help the mosque office when they write to us
• A request for access or correction can be sent to the email below

9. Children

Neither product is directed at children under 13. We do not knowingly collect personal data from children under 13. Write to us if you believe we have, and we will delete it.

10. Where information is processed

The products are built for people and mosques in Sri Lanka. Hosting and message delivery may process information in other countries. Where that happens, we take steps appropriate to the information and to applicable requirements.

11. Changes

We may update this policy. The new version will appear on this page with a new “Last updated” date. Continuing to use a product after that means you accept the updated policy for that product.

12. Contact

Privacy questions: support@almasjidh.com. This policy is available in Al Muslim at https://almasjidh.com/privacy. See also the Terms of Service and About.