Osymandias LLC ("we", "us", or "our") operates the Jamia mobile application and the jamiaapp.com website (collectively, the "Service") under the brand name "Jamia". This Privacy Policy explains what information we collect, how we use it, and the rights you have over it. By using Jamia you agree to this policy.
Questions? Contact us at support@jamiaapp.com
At a Glance, Data We Collect
Apple App Store and Google Play require us to disclose the categories of data our app collects. The table below maps to Apple's App Privacy "nutrition label" categories and matches exactly what is declared in our iOS Privacy Manifest.
| Category | What | Purpose | Linked to You |
|---|---|---|---|
| Contact Info | Name, email, phone number; addresses you enter for sick-visit requests or business listings | Account creation, support & core app features | Yes |
| Identifiers | User ID, device push token | Authentication & notifications | Yes |
| Location | Your current location while you use a nearby search (used for that search, not stored); an approximate home area, rounded to roughly 1km, which is stored | Nearby masjids, businesses, jobs, and community alerts | Yes |
| Photos | Profile photo, masjid/business photos, uploaded content images | Core app features | Yes |
| User Content | Posts, job/business listings, business likes | Core app features | Yes |
| Sensitive data | Prayer-tracking activity, sick-visit reports (see §2) | Features you explicitly opt into | Yes |
| Purchase History | Subscription and donation transaction records (not card numbers) | Accounting, receipts, entitlements | Yes |
| Diagnostics | Crash logs and error reports (device model, OS version, app version, the error itself) | Finding and fixing bugs | No |
We do not use any analytics or advertising SDK. We use one crash-reporting service, Sentry, to diagnose errors (see §4). We do not collect browsing history or government ID documents, and we never store your exact GPS coordinates.
1. Information We Collect
Information you provide directly
- Account details, full name, email address, phone number, and password when you register.
- Profile information, gender, city, profile photo, and Islamic practice details (prayer method, madhab) used for prayer times and community verification.
- Date of birth, collected once during onboarding to confirm you meet Jamia's 13+ minimum age, and to confirm you are 18 or older before you can request a nikah appointment or book a sick visit.
- Career profile, job title, skills, and employment history, provided only if you choose to use the jobs feature.
- Business listings and likes, business name, description, location, photos, and contact details if you list a halal business, plus the businesses you like. Your likes are visible only to you; other members see just the total number of likes on a business. Written reviews and star ratings from earlier versions of the app are no longer shown or collected; we keep them only for dispute and legal-record purposes, and they are deleted when your account is deleted.
- Payment information, we do not store card numbers. Payments are processed by Stripe. We retain transaction records (amount, date, type) for accounting purposes.
- Donations, amount, date, and the masjid you donated to. Donation funds are transferred directly to the masjid via Stripe Connect; Jamia never holds your funds.
- Support communications, emails or messages you send to support@jamiaapp.com.
Information collected automatically
- Location, with your permission and only while you use the app. When you search for nearby masjids, businesses, or jobs, your device's current location is sent with that search so results can be sorted by distance; it is used for that request only and not stored. Separately, we store an approximate home area, rounded on your device to roughly 1km, to calculate prayer times and send community alerts (janazah/sick-visit posts within a set radius). We never store your exact GPS coordinates. A sick-visit request is different: if you post one, the address you enter is shown only as an approximate area until someone books a visit, at which point the exact address is revealed to that booker — see §7 of the Terms of Service for the safety and liability terms that apply to that exchange.
- Device information, device type, operating system version, and a push notification token used to deliver prayer time alerts and community notifications.
- Diagnostics, if the app or website crashes or hits an error, a crash report (device model, operating system and app version, and technical details of the error) is sent to Sentry so we can fix it. Crash reports are not linked to your name or account, and we do not record your screen or sessions.
We do not use any analytics tooling, so there is nothing to track you with.
2. Sensitive (Special Category) Data
Some Jamia features involve data that UK/EU GDPR classifies as "special category" data — information revealing religious belief or concerning health. We only collect this if you choose to use the relevant feature, and the app asks for your explicit, separate consent (distinct from general Terms acceptance) the first time you use each one:
- Prayer tracking, if you use the prayer tracker, we store which prayers you've marked as completed. This reveals aspects of your religious practice.
- Sick-visit reporting, if you or a masjid admin submits a sick-visit request on your behalf, we store the fact that you (or a named individual) are unwell, along with a coarse location, so nearby community members can be notified. This is health-adjacent data.
The lawful basis for processing this data is your explicit consent, which you can withdraw at any time by discontinuing use of the relevant feature and deleting associated content where the app allows it, or by contacting support@jamiaapp.com.
3. How We Use Your Information
- To create and manage your account and provide the Service.
- To process subscription payments and donations through our payment processors.
- To send prayer time notifications, community announcements, and service updates you have opted in to.
- To verify masjid membership and grant access to verified-only features.
- To respond to your support requests.
- To detect and prevent fraud, abuse, and violations of our Terms of Service.
4. Third Parties We Share Data With
We share the minimum necessary data with the following service providers, each bound by their own privacy policies and data processing agreements. This list reflects every third-party service Jamia uses — we do not use any analytics, advertising, SMS, or email-delivery vendor beyond what's listed here:
- Sentry, crash and error reporting for the app and website. Receives technical crash details (device model, OS and app version, the error and where it happened), not your name, email, or account. sentry.io/privacy
- Supabase, our database, authentication, and file-storage provider. Stores your account data, profile, and content. supabase.com/privacy
- Stripe (including Stripe Connect), payment and donation processing. Receives payment card details, billing name, and transaction amounts. Jamia never sees or stores your raw card number. For donations, Stripe Connect transfers funds directly to the receiving masjid. stripe.com/privacy
- RevenueCat, subscription management for App Store and Google Play subscriptions. Receives your app user ID and subscription status. revenuecat.com/privacy
- Mapbox, address geocoding for masjid and business locations (converting a typed address into map coordinates). Receives the address text you or a masjid/business admin enters. mapbox.com/legal/privacy
- Backblaze B2 & Cloudflare, storage and content delivery for public images you or a masjid/business upload (profile photos, masjid photos, listing images). backblaze.com/company/privacy.html , cloudflare.com/privacypolicy
- Expo / Apple / Google, push notification delivery. Your device push token is shared with Apple (iOS) or Google (Android) to deliver notifications. Neither company can read notification content without your device key.
Previously collected, now deleted
Jamia previously offered an identity-verification step that collected a short verification video. This feature was discontinued and the associated data has been deleted. We no longer collect or store verification videos.
5. Data Retention
- Your account and profile data is retained until you delete your account.
- After deletion, personal data is purged within 30 days (a 30-day window during which logging back in reactivates your account, after which deletion is permanent). Anonymised aggregate statistics may be retained indefinitely.
- Legal hold: if your account (or your masjid) is placed under legal hold — for example, during an active dispute investigation, litigation, or a lawful government request — we retain the relevant data beyond the schedules in this section, and decline a deletion request, for as long as the hold remains in place. A legal hold is set only by a platform administrator and is lifted, and normal deletion resumes, once the matter concludes.
- Financial records (donation and subscription history) are retained for 7 years as required by tax and accounting law.
- Community-alert posts (janazah, sick-visit) are automatically removed on a shorter schedule tied to the event, typically within days to a few weeks — see the relevant in-app feature for specifics.
- Backup copies may persist for up to 90 days before being overwritten.
6. Your Rights
All users
- Access, request a copy of the data we hold about you.
- Correction, update inaccurate data via your in-app profile settings.
- Deletion, delete your account in app via Settings → Privacy → Delete my account, or email support@jamiaapp.com. We will complete deletion within 30 days.
- Data portability, request a machine-readable export of your data by emailing support@jamiaapp.com with the subject "Data Export Request". We aim to fulfil export and access requests within 30 days (and no later than the legal deadlines below).
UK & EU users, UK GDPR / EU GDPR
The lawful basis for processing your data is: performance of a contract (providing the Service), legitimate interests (security, fraud prevention), consent (special-category data described in §2, optional notifications). You have the right to object to processing based on legitimate interests, to withdraw consent at any time, and to lodge a complaint with your supervisory authority (the Information Commissioner's Office (ICO) in the UK; your national data protection authority in the EU — in France, the CNIL; in Germany, the supervisory authority of your federal state). We respond to access, correction, deletion, and portability requests without undue delay and in any case within one month, as required by GDPR Article 12.
California and other US state users, CCPA/CPRA
If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), gives you the right to know what personal information we collect, the right to delete it, the right to correct it, and the right to opt out of the sale or "sharing" of personal information and of targeted advertising and profiling. Residents of other US states with similar privacy laws have equivalent rights under those laws. We do not sell or share personal information, and we do not use it for targeted advertising or automated profiling. We will respond to a verifiable consumer request within 45 days (extendable by a further 45 days where permitted). To exercise your rights, email support@jamiaapp.com.
Canadian users, PIPEDA
If you are located in Canada, we process your personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA). You have the right to access the personal information we hold about you, to request correction of inaccurate information, and to withdraw your consent to our processing of it at any time, subject to legal or contractual restrictions and reasonable notice. If you have a concern about how we handle your personal information that we have not resolved to your satisfaction, you may contact the Office of the Privacy Commissioner of Canada. To exercise your rights, email support@jamiaapp.com.
Australian users, Privacy Act 1988
If you are located in Australia, we handle your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). You have the right to access the personal information we hold about you, to request correction of inaccurate information, and to make a complaint about how we have handled your personal information. If you are not satisfied with our response to a complaint, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au. To exercise your rights, email support@jamiaapp.com.
New Zealand users, Privacy Act 2020
If you are located in New Zealand, we handle your personal information in accordance with the Privacy Act 2020. Under the Information Privacy Principles (IPPs), you have the right to access the personal information we hold about you and to request correction of inaccurate information. If you have a concern about how we have handled your personal information that we have not resolved to your satisfaction, you may make a complaint to the Office of the Privacy Commissioner at privacy.org.nz. To exercise your rights, email support@jamiaapp.com.
7. Children's Privacy
Jamia requires every account to enter a date of birth during onboarding and blocks account creation for anyone who self-declares an age under 13, both in the app and, as a backstop, at the database level. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided personal information, we will delete it promptly. Contact us at support@jamiaapp.com if you believe a child's data has been collected.
Some features are restricted to users who are 18 years of age or older: requesting a nikah appointment and booking a sick visit. We use the date of birth you provided to enforce this restriction and block access for under-18 users. See our Child Safety Standards for full detail on enforcement.
8. Security
We use industry-standard security measures including encryption in transit (TLS), encryption at rest, and row-level security policies on our database. Access to production data is restricted to authorised personnel only. However, no system is perfectly secure and we cannot guarantee absolute security.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via in-app notification or email at least 14 days before the change takes effect. The "Last updated" date at the top of this page indicates when the policy was last revised.
10. Contact
For privacy-related questions, requests, or complaints, contact us at:
Privacy enquiries
support@jamiaapp.com