Privacy Policy, Jamia

[LEGAL_ENTITY_NAME] ("we", "us", or "our") operates the Jamia mobile application and the jamiaapp.com website (collectively, the "Service") under the brand name "Jamia". This Privacy Policy explains what information we collect, how we use it, and the rights you have over it. By using Jamia you agree to this policy.

Questions? Contact us at support@jamiaapp.com

At a Glance, Data We Collect

Apple App Store and Google Play require us to disclose the categories of data our app collects. The table below maps to Apple's App Privacy "nutrition label" categories and matches exactly what is declared in our iOS Privacy Manifest.

Category	What	Purpose	Linked to You
Contact Info	Name, email, phone number	Account creation & support	Yes
Identifiers	User ID, device push token	Authentication & notifications	Yes
Location	Coarse location (rounded to roughly 1km before it ever leaves your device)	Nearby masjids, jobs, and community alerts	Yes
Photos	Profile photo, masjid/business photos, uploaded content images	Core app features	Yes
User Content	Posts, reviews, job/business listings, marriage profile answers	Core app features	Yes
Sensitive data	Prayer-tracking activity, sick-visit reports (see §2)	Features you explicitly opt into	Yes
Purchase History	Subscription and donation transaction records (not card numbers)	Accounting, receipts, entitlements	Yes

We do not use any analytics, crash-reporting, or advertising SDK of any kind, and we do not collect browsing history, precise/exact location, or government ID documents.

1. Information We Collect

Information you provide directly

Account details, full name, email address, phone number, and password when you register.
Profile information, gender, city, profile photo, and Islamic practice details (prayer method, madhab) used for community verification and the marriage feature.
Date of birth, collected once during onboarding to confirm you meet Jamia's 13+ minimum age, and again if you access the marriage feature to confirm you are 18 or older.
Marriage questionnaire, detailed answers about deen, lifestyle, family preferences, and — if you choose to provide it — your wali's (guardian's) name and phone number. See §2 for how your wali's information is handled.
Career profile, job title, skills, and employment history, provided only if you choose to use the jobs feature.
Business listings and reviews, business name, description, location, photos, contact details if you list a halal business, and any review you post about another business.
Payment information, we do not store card numbers. Payments are processed by Stripe. We retain transaction records (amount, date, type) for accounting purposes.
Donations, amount, date, and the masjid you donated to. Donation funds are transferred directly to the masjid via Stripe Connect; Jamia never holds your funds.
Support communications, emails or messages you send to support@jamiaapp.com.

Information collected automatically

Location, with your permission, we read your device's GPS location on-device and round it to roughly 1km of precision before it is ever sent to our servers. We use this coarse location to show nearby masjids, jobs, and community alerts (janazah/sick-visit posts within a set radius). We never transmit or store your exact GPS coordinates.
Device information, device type, operating system version, and a push notification token used to deliver prayer time alerts and community notifications.

We do not use any analytics or crash-reporting tooling, so there is nothing to opt out of on that front — we simply don't collect it.

2. Sensitive (Special Category) Data

Some Jamia features involve data that UK/EU GDPR classifies as "special category" data — information revealing religious belief or concerning health. We only collect this if you choose to use the relevant feature, and the app asks for your explicit, separate consent (distinct from general Terms acceptance) the first time you use each one:

Prayer tracking, if you use the prayer tracker, we store which prayers you've marked as completed. This reveals aspects of your religious practice.
Sick-visit reporting, if you or a masjid admin submits a sick-visit request on your behalf, we store the fact that you (or a named individual) are unwell, along with a coarse location, so nearby community members can be notified. This is health-adjacent data.
Marriage profile, your marriage questionnaire includes religious-practice questions (madhab, prayer, fasting).

The lawful basis for processing this data is your explicit consent, which you can withdraw at any time by discontinuing use of the relevant feature and deleting associated content where the app allows it, or by contacting support@jamiaapp.com.

Your wali's information (marriage feature)

If you choose to provide your wali's name and phone number in the marriage feature, that information is shared with a matched user once mutual interest is confirmed. Your wali is not a Jamia user and has not agreed to this Privacy Policy — we process their name and phone number based on your instruction and legitimate interest in enabling the marriage feature you asked to use, on the basis that you have confirmed to us you have your wali's permission to share it. If you are a wali and want your information removed, contact support@jamiaapp.com.

3. How We Use Your Information

To create and manage your account and provide the Service.
To match you with compatible Muslim marriage candidates (marriage feature subscribers only).
To process subscription payments and donations through our payment processors.
To send prayer time notifications, community announcements, and service updates you have opted in to.
To verify masjid membership and grant access to verified-only features.
To respond to your support requests.
To detect and prevent fraud, abuse, and violations of our Terms of Service.

We do not use your data for advertising, sell it to third parties, use it to train AI models, or run it through any analytics platform.

4. Third Parties We Share Data With

We share the minimum necessary data with the following service providers, each bound by their own privacy policies and data processing agreements. This list reflects every third-party service Jamia uses — we do not use any analytics, advertising, SMS, or email-delivery vendor beyond what's listed here:

Supabase, our database, authentication, and file-storage provider. Stores your account data, profile, and content. supabase.com/privacy
Stripe (including Stripe Connect), payment and donation processing. Receives payment card details, billing name, and transaction amounts. Jamia never sees or stores your raw card number. For donations, Stripe Connect transfers funds directly to the receiving masjid. stripe.com/privacy
RevenueCat, subscription management for App Store and Google Play subscriptions. Receives your app user ID and subscription status. revenuecat.com/privacy
Mapbox, address geocoding for masjid and business locations (converting a typed address into map coordinates). Receives the address text you or a masjid/business admin enters. mapbox.com/legal/privacy
Backblaze B2 & Cloudflare, storage and content delivery for public images you or a masjid/business upload (profile photos, masjid photos, listing images). backblaze.com/company/privacy.html , cloudflare.com/privacypolicy
Expo / Apple / Google, push notification delivery. Your device push token is shared with Apple (iOS) or Google (Android) to deliver notifications. Neither company can read notification content without your device key.

Previously collected, now deleted

Jamia previously offered an identity-verification step that collected a short verification video. This feature was discontinued and the associated data has been deleted. We no longer collect or store verification videos.

5. Data Retention

Your account and profile data is retained until you delete your account.
After deletion, personal data is purged within 30 days (a 30-day window during which logging back in reactivates your account, after which deletion is permanent). Anonymised aggregate statistics may be retained indefinitely.
Financial records (donation and subscription history) are retained for 7 years as required by tax and accounting law.
Community-alert posts (janazah, sick-visit) are automatically removed on a shorter schedule tied to the event, typically within days to a few weeks — see the relevant in-app feature for specifics.
Backup copies may persist for up to 90 days before being overwritten.

6. Your Rights

All users

Access, request a copy of the data we hold about you.
Correction, update inaccurate data via your in-app profile settings.
Deletion, delete your account in app via Settings → Privacy → Delete my account, or email support@jamiaapp.com. We will complete deletion within 30 days.
Data portability, request a machine-readable export of your data by emailing support@jamiaapp.com with the subject "Data Export Request". We aim to fulfil export and access requests within 30 days (and no later than the legal deadlines below).

UK & EU users, UK GDPR / EU GDPR

The lawful basis for processing your data is: performance of a contract (providing the Service), legitimate interests (security, fraud prevention), consent (special-category data described in §2, optional notifications), and, for a wali's contact information, your instruction and our legitimate interest in providing the feature you requested. You have the right to object to processing based on legitimate interests, to withdraw consent at any time, and to lodge a complaint with your supervisory authority (the Information Commissioner's Office (ICO) in the UK; your national data protection authority in the EU — in France, the CNIL; in Germany, the supervisory authority of your federal state). We respond to access, correction, deletion, and portability requests without undue delay and in any case within one month, as required by GDPR Article 12.

California and other US state users

Depending on your state, you may have the right to know what personal information we collect, the right to delete it, the right to correct it, and the right to opt out of the sale or "sharing" of personal information and of targeted advertising and profiling. We do not sell or share personal information, and we do not use it for targeted advertising or automated profiling. We will respond to a verifiable request within 45 days (extendable by a further 45 days where permitted). To exercise your rights, email support@jamiaapp.com.

7. Children's Privacy

Jamia requires every account to enter a date of birth during onboarding and blocks account creation for anyone who self-declares an age under 13, both in the app and, as a backstop, at the database level. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided personal information, we will delete it promptly. Contact us at support@jamiaapp.com if you believe a child's data has been collected.

The Jamia marriage and matchmaking feature is separately restricted to users who are 18 years of age or older. We collect date of birth to enforce this restriction and block access for under-18 users. On iOS, the entire Jamia app is rated 17+ by the App Store due to the presence of a matchmaking feature. On Google Play, the app is rated Teen (13+) with the marriage feature independently gated at 18+. See our Child Safety Standards for full detail on enforcement.

8. Security

We use industry-standard security measures including encryption in transit (TLS), encryption at rest, and row-level security policies on our database. Access to production data is restricted to authorised personnel only. However, no system is perfectly secure and we cannot guarantee absolute security.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via in-app notification or email at least 14 days before the change takes effect. The "Last updated" date at the top of this page indicates when the policy was last revised.

10. Contact

For privacy-related questions, requests, or complaints, contact us at:

Privacy enquiries

support@jamiaapp.com