Official Policy • UK GDPR & App Store Compliant

Privacy Policy

This Privacy Policy explains how Masjid At-Taqwa (operated under the Horton Bank Education Centre) collects, uses, protects, and handles your personal data across our official website (https://masjidat-taqwa.co.uk) and our official iOS and Android mobile applications.

Effective Date: September 30, 2026•Jurisdiction: United Kingdom (UK GDPR & DPA 2018)•App Store Version: 1.0.0+
1

Overview & Trust (Amanah)

At Masjid At-Taqwa, we view the stewardship of your personal information as a solemn trust (Amanah). Whether you visit our community centre, access our website, donate towards the mosque renovation, enrol your child in our Madrasah or Mini Mutaqeens, or install our mobile application on iOS or Android, we are committed to safeguarding your privacy with the utmost transparency and care.

Core Commitment: We do not sell, rent, monetize, or trade your personal data to commercial data brokers, marketing agencies, or unauthorized third parties under any circumstances.

2

Who We Are (Data Controller)

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the data controller is:

Masjid At-Taqwa / Horton Bank Education Centre

Masjid At-Taqwa, 807 Great Horton Rd, Bradford, BD7 4AG, United Kingdom

info@masjidat-taqwa.co.uk

+447306379935

3

Information We Collect via Web Services

When you interact with our website (https://masjidat-taqwa.co.uk), we may collect and process information you voluntarily provide:

Donations & Gift Aid

Donor name, email address, postal address, donation amount, and Gift Aid declaration details (required for HMRC auditing). Card payments are encrypted and securely processed by Stripe; payment card numbers are never stored on our servers.

Madrasah Enrolments

Child’s full name, date of birth, previous Islamic schooling, emergency contact numbers, and dietary/medical notes for student safety and safeguarding during class hours.

Nikah (Marriage) Services

Bride and Groom identities, addresses, Wali and witness information, and verification documents to solemnize and register Islamic marriage contracts according to Shariah and UK legal standards.

Ask the Imam Q&A Portal

User account credentials (salted & hashed passwords), inquiries submitted for religious guidance, and optional document/photo attachments submitted directly to the scholars.

4

Mobile App Data & Device Permissions (iOS & Android)

Our Flutter mobile application is designed to be lightweight, respectful, and privacy-first. Below is an itemized breakdown of how the app interacts with your device:

Location Services (Precise & Coarse Location)
On-Device / Ephemeral

Purpose: Required only to calculate local prayer and Jama'at countdowns, accurately point the Qibla compass toward the Kaaba in Mecca, and optionally discover nearby mosques.

🛡️ Privacy Protection: Your geographic location is computed locally on your phone. We do not log, track, record, or transmit your physical coordinates or movement history to any centralized database.

Local & Push Notifications
User-Configurable

Purpose: Delivers daily Adhan reminders, Iqamah alerts, upcoming community events (e.g. 2 days prior and day-of notices for Khatam al-Quran, Eid, or lectures), and urgent mosque updates.

🔔 User Control: You can enable, customize sounds, or completely disable notifications at any time inside the app settings or via iOS/Android system settings.

iOS Live Activities & Dynamic Island (ActivityKit)
iOS 16.1+

Purpose: Presents a dynamic, glanceable countdown to the next Salah on your Lock Screen and Dynamic Island.

🔒 Privacy Protection: Updates are scheduled locally from the verified prayer timetable timestamps; no background telemetry or surveillance occurs.

Camera & Photo Library Access
Explicit Consent Only

Purpose: Requested solely when you explicitly tap to upload an attachment for an "Ask the Imam" question, a profile avatar, or an admin override picture.

📷 Scope: The app only accesses the specific file or photograph you intentionally select through the system file picker. We never scan or browse your gallery in the background.

On-Device Storage & Local Database (SQLite)
Sandboxed Local Storage

Purpose: Saves your personal devotional progress offline, including Quran reading bookmarks, Qaza (missed prayer) counters, Tasbih tallies, Ramadan daily checklists, and downloaded Quran audio recitations.

💾 Private & Local: This devotional data remains encrypted in your device’s sandboxed storage unless you explicitly choose to sync with an authenticated portal account.

5

Lawful Bases for Processing (UK GDPR)

We only process your personal data when we have an explicit lawful basis under Article 6 and Article 9 of the UK GDPR:

  • Consent: For push notifications, optional audio downloads, and voluntary religious inquiries in the Ask Imam portal.
  • Contractual & Educational Necessity: For processing Madrasah admissions, fee administration, and solemnizing Nikah marriage agreements.
  • Legal Obligation: For maintaining financial records for HMRC Gift Aid compliance, charity accounting, and child safeguarding standards under UK law.
  • Legitimate Interests: For maintaining the operational security of our servers, preventing fraud, and ensuring reliable delivery of prayer schedules.
6

Third-Party Service Providers

We work with reputable, industry-standard technology vendors to host our infrastructure, each bound by strict data processing agreements:

Stripe Payments (UK/EU)

PCI-DSS Level 1 certified gateway handling online card donations and recurring subscriptions.

Cloud Database & Storage (Supabase/Netlify)

Securely encrypted cloud databases storing timetable schedules, gallery pictures, and portal records.

Apple Inc. & Google LLC

Operating system notification dispatch services (APNs and FCM) delivering Adhan alerts to your device.

eMasjid Live

Streaming audio transmission server for listening to live Friday sermons and mosque broadcasts.

7

Data Security & Retention

We implement robust administrative, physical, and technical safeguards to prevent unauthorized access, loss, or disclosure:

  • Transport Encryption: All communications between your browser, mobile app, and our backend are encrypted via modern Transport Layer Security (HTTPS / TLS 1.3).
  • Authentication Security: Passwords are cryptographically hashed using industry-standard bcrypt before storage.
  • Retention Schedules: Inactive inquiry submissions and temporary upload chunks are automatically pruned. Gift Aid and financial records are retained for 6 years in accordance with UK tax legislation.
8

Children’s Privacy & Safeguarding (Madrasah)

We take special care regarding children under the age of 16. Our mobile app is family-friendly and rated 4+ on the App Store. When parents enrol children into Madrasah At-Taqwa or Mini Mutaqeens:

  • We only collect student details provided directly by a parent or legal guardian.
  • Medical and allergy details are treated as Special Category Data and accessed solely by designated safeguarding staff to ensure student safety on premises.
  • Photographs or student achievements are published only where explicit parental photography consent has been granted.
9

Your Legal Rights Under UK GDPR

As a resident of the United Kingdom and data subject, you hold fundamental rights:

• Right of Access: Request a copy of all personal information we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete records.
• Right to Erasure: Request permanent deletion of your data ("Right to be Forgotten").
• Right to Restrict & Object: Restrict or object to specific processing of your data.
10

Account & Data Deletion Instructions

In compliance with Apple App Store Guideline 5.1.1(v) and UK GDPR, you have the right to permanently delete your account and all associated personal data at any time.

Method A: Direct In-App Deletion

  1. Open the Masjid At-Taqwa mobile app.
  2. Navigate to Settings or tap your Profile Avatar.
  3. Scroll down and tap "Delete Account & Data".
  4. Confirm your request. Your profile, Ask Imam questions, bookmarks, and private records will be purged immediately from active servers.

Method B: Email Request

If you cannot access your device or wish to request full deletion of web-based records, send an email to info@masjidat-taqwa.co.uk with the subject line "Account and Data Deletion Request" from your registered email address. We will verify and process your deletion within 30 calendar days.

11

Apple App Store & Google Play Privacy Disclosures

For complete clarity when reviewing our listing on the Apple App Store or Google Play Store:

CategoryCollected?Linked to Identity?Primary Purpose
Location (Precise/Coarse)EphemeralNo (Not Linked)Qibla compass & local prayer times
Contact Info (Email/Name)Only if signed inYes (Linked)Ask Imam portal & account login
User Content (Questions/Photos)VoluntaryYes (Linked)Religious inquiries submitted to Imams
Tracking Across Other AppsNeverNoWe do not track users across 3rd-party apps
Diagnostics / Crash LogsAnonymousNo (Not Linked)App performance & bug resolution
12

Cookies & Web Tracking Technologies

Our website utilizes strictly necessary and functional cookies to ensure secure navigation, authenticate admin and portal logins, and protect against Cross-Site Request Forgery (CSRF). We do not deploy intrusive advertising pixels (e.g. Meta Pixel, TikTok tracking, or commercial retargeting cookies).

13

Contact Us & Supervisory Authority (ICO)

If you have questions, wish to exercise any of your data protection rights, or have inquiries regarding this policy, please reach out to our administration team:

Data Protection Officer / Board of Trustees

Entity: Masjid At-Taqwa (Horton Bank Education Centre)

Address: Masjid At-Taqwa, 807 Great Horton Rd, Bradford, BD7 4AG, UK

Email: info@masjidat-taqwa.co.uk

Phone: +447306379935

You also have the statutory right to lodge a complaint with the UK supervisory authority, the Information Commissioner's Office (ICO), at ico.org.uk or by telephone on 0303 123 1113.

Ask ImamDonate