Privacy
What All Masjids keeps about you, why, and what you can do about it.
Draft for review: this notice describes what All Masjids does today. The parts in square brackets are still to be confirmed.
Who We Are
All Masjids is run by [legal name of the organisation], [address]. We decide how the information described here is used, so we are its “controller” under UK data protection law. You can reach us at our contact page.
Using the App
You don’t need an account. The masjids you follow, your reminders, your settings and the timetables are kept on your own phone, not with us.
- Your location is used only if you allow it, to find masjids, Jumu‘ah times and announcements near you. It’s sent with each of those searches. We don’t store it, but our server logs record every request, including its address, and keep them for no more than [14 days].
- A random code made up by your phone is sent when the app fetches announcements, so it can show which replies (for example “I’ll attend”) are yours. When you reply we keep only a scrambled form of the code, so each phone counts once. It isn’t linked to your name or number.
- Reminders are set up on your phone. We don’t send push notifications and don’t keep a list of who has reminders.
Giving
If you give to a masjid, we keep your name, email address, the gifts you make and, if you choose Gift Aid, your home address and your Gift Aid declaration, because HMRC requires the masjid to keep them. Card payments are handled by our payment provider, [name]; we never see or store your card number. The masjid you give to can see your gifts and Gift Aid details so it can claim Gift Aid and thank you.
To see your giving you sign in with a code we email you. We keep Gift Aid records for [six years after the claim, as HMRC requires].
Masjid Committees
Committee members who sign in to manage a masjid give us their name, email address and, when they claim a masjid, a phone number and their role. We use these to run the masjid’s account, to check claims, and to email them about their masjid (for example when a screen goes offline). We keep every published version of a masjid’s timetable, and a record of changes made by All Masjids staff.
Janazah announcements can include the name of the person who has passed away and their family’s details. A masjid posts them only with the family’s consent, which it records with the announcement, and they come down the day after the salah.
Masjid Screens
A screen paired with a masjid has a code that lets it fetch that masjid’s times. We record when each screen last checked in, so the masjid can be told if it goes offline. Screens don’t collect anything about the people in the masjid.
Cookies
This website and the app use no advertising or tracking cookies. Our pages set two cookies that keep the site working and secure: a session cookie and a security token. When you sign in to the masjid portal or to see your giving, the session cookie keeps you signed in. The portal also remembers your sidebar and appearance choices in cookies.
Services We Use
- Email: [email provider] sends our emails, such as sign-in codes and alerts.
- Payments: [payment provider] processes card payments for donations.
- Anthropic (Claude): reads the timetable files a masjid uploads, and writes a first draft of an announcement when a committee member asks it to. A person checks everything before it is published.
- postcodes.io: finds where a masjid is from the postcode a committee member types.
- Hosting: [hosting provider, location of the servers].
Where Masjid Listings Come From
Many masjid listings start from OpenStreetMap (© OpenStreetMap contributors, Open Database Licence). They hold a masjid’s name and location, not information about people.
Your Rights
You can ask to see the information we hold about you, to correct it, or to delete it (Gift Aid records the law requires us to keep excepted). Contact us and we’ll reply within a month. If you’re unhappy with how we handle your information, you can complain to the Information Commissioner’s Office at ico.org.uk.
Last updated: [date].