Privacy Policy

1. Introduction & Commitment to Privacy

The National Mosque mobile app ("NMA", "we", "us", or "our"), operating under Nigerian Mosque Services, is the official digital companion for the National Mosque, Abuja, Nigeria. We are committed to upholding the trust of worshippers and visitors.

Our core privacy principle is simple: we collect only the data necessary to provide accurate prayer schedules, Qur'anic learning, community participation, and secure donations. We never sell your personal information, and we do not build commercial advertising profiles.

2. Data We Collect & Specific Purposes

In order to deliver our services reliably across mobile devices, we collect the following categories of data:

A. Account Information

When you register an account, we collect your email address, display name, optional profile photo, optional country and city, and your app preferences (such as prayer calculation method, chosen adhan reciter voice, preferred language, and interface theme). This allows your settings and progress to synchronize across devices.

B. Authentication & Sign-In

You can sign in using an email and password, or third-party federated identity through "Continue with Google" or "Continue with Apple". When signing in with Google or Apple, we receive only basic profile information (your verified name and email address). We never receive, see, or store your external account passwords.

C. Location Data (Optional & User-Controlled)

Location access is strictly optional. It is activated only when you manually turn on "My Location", use the Qibla compass, or tap the "Detect Location" button.

Sole Purpose: Your geographical coordinates (latitude and longitude) are transmitted to our calculation service solely to compute astronomical prayer times and the precise angular direction to the Holy Ka'bah in Makkah for your current spot.

No Tracking / No Sharing: Your location coordinates are never shared with other users, advertisers, or unauthorized third parties, and are never used to track your physical movements. You can deny location access at any time and simply select the static Abuja National Mosque timetable or enter your city manually.

D. Worship Activity & Synchronized Progress

To assist your spiritual routine, the app records your daily prayer checkmarks/streaks, Qur'an reading minutes, last-read ayah, saved bookmarks, and habit tracker entries. This data is tied to your encrypted account ID so you can restore your worship journey if you switch devices.

E. Qur'an Recitation Practice & Audio

When you utilize the recitation practice feature, record your voice reciting an Ayah, and tap "Evaluate", your audio snippet is securely transmitted to our backend server and then to our artificial intelligence provider (OpenAI) for transcription, acoustic matching, and Tajweed scoring.

Strict Confidentiality: Your recitation audio is used solely to generate your immediate score and phonetic feedback. It is never published, made public, or sold.

F. Zameel AI Assistant Queries

When you converse with Zameel AI, the textual prompts you submit are processed by our AI provider (OpenAI) to return informative, contextual answers on Islamic ethics, history, and daily supplications.

Important Safety Guidance: Please do not enter sensitive personal identification, private secrets, medical history, or payment numbers into chat queries with Zameel AI.

G. Donations & Zakat Payments

Financial donations (Sadaqah, Zakat, Mosque maintenance fund) are processed directly by Paystack, a PCI-DSS certified payment gateway.

We never receive, process, or store your debit/credit card numbers, CVV codes, or bank account PINs. We retain only a financial transaction ledger record (amount, payment reference ID, timestamp, transaction status, and selected cause) for reconciliation, accounting transparency, and producing your tax/charity receipt.

H. Push Notifications & Tokens

If you grant notification permissions, we store an anonymous device push token (via Expo) alongside your notification preferences (such as adhan alarms, Khutbah announcements, and community alerts) to deliver timely reminders to your phone.

I. Community Submissions

When you voluntarily submit community forms, we collect the details you provide:

• Volunteer Sign-Up: Name, phone number, email, and preferred volunteer division.
• Janazah (Funeral) Assistance Request: Deceased name, next of kin contact phone number, and burial arrangements.
• Mosque QR Check-in: Timestamped record of attendance for official National Mosque congregational events.

3. Device Permissions Used

The mobile app requests device permissions strictly when needed to support a feature you choose to use:

4. Third-Party Service Providers

We engage vetted third-party infrastructure providers to operate specific parts of the app. Each provider is bound by confidentiality and data protection obligations:

• Supabase Inc. (PostgreSQL Database, Authentication & Edge Infrastructure) — Stores user account records, preferences, and encrypted metadata.
  Supabase Privacy Policy →
• Paystack Payments Limited (Payment Gateway) — Securely handles debit cards, USSD, and bank transfers for donations.
  Paystack Privacy Policy →
• OpenAI, LLC (Artificial Intelligence & Speech Transcription) — Powers the Zameel AI responses and recitation speech evaluation.
  OpenAI Privacy Policy →
• Quran Foundation (Qur'anic Content & Audio) — Provides verified Uthmani Qur'an text, verse breakdowns, and reciter audio.
  Quran Foundation Information →
• YouTube / Google LLC (Live Streaming Video) — Delivers embedded Friday Jumu'ah Khutbah and educational lectures from the National Mosque live channel.
  Google & YouTube Privacy Policy →
• Google LLC & Apple Inc. (Single Sign-On Services) — Manages federated login credentials.
  Apple Privacy Policy →
• Expo / 650 Industries, Inc. (Push Notification Delivery) — Transmits device push tokens and notifications to Apple APNs and Google FCM.
  Expo Privacy Policy →

5. No Sale or Commercial Exploitation of Data

We explicitly state that:

• We do not sell, rent, lease, or monetize your personal information or worship records to any third party or data broker under any circumstances.
• We do not build advertising profiles or engage in behavioral tracking across other applications or websites.
• We do not include third-party commercial advertising networks in the mobile app.

6. Data Security & Retention

We implement stringent technical and organizational security controls:

• Encryption in Transit: All communications between the mobile app, backend APIs, and third parties are encrypted using modern Transport Layer Security (TLS 1.3 / HTTPS).
• Device Secure Storage: Authentication tokens and sensitive keys are stored in hardware-backed secure storage on your mobile device (iOS Keychain and Android Keystore).
• Retention Periods: Account information and worship bookmarks are kept as long as your account remains active. Audio recordings submitted for recitation evaluation are processed ephemerally and not retained long-term. Donation ledger entries are maintained in accordance with Nigerian statutory accounting and charitable audit requirements.

7. Your Rights & How to Delete Your Data

Under the Nigeria Data Protection Act (NDPA) and international frameworks (including GDPR where applicable), you have the right to access, correct, export, or permanently erase your personal data.

You can exercise these rights directly at any time:

• In-App Self-Service: Open the app → go to Profile → Settings → Privacy & Security → tap "Download My Data" to export your history, or tap "Delete Account" to irreversibly erase your account and all associated records.
• Web Deletion Request: If you no longer have the app installed, you can submit an immediate web deletion request at our dedicated portal: nigeriamosqueservices.app/delete-account.
• Direct Email: You can contact our Data Privacy Desk at privacy@nigeriamosqueservices.app. Requests are verified and fulfilled within 7 business days.

8. Children's Privacy

The National Mosque mobile app is intended for general audiences and worshippers. It is not directed to children under the age of 13. We do not knowingly collect personal data from children under 13 without verifiable parental or guardian consent. If we become aware that a child under 13 has provided personal details without consent, we will promptly delete the data from our systems.

9. International Data Transfers

While the National Mosque is based in Abuja, Nigeria, our cloud infrastructure providers (such as Supabase, OpenAI, and Expo) utilize distributed global data centers. Whenever personal information is transferred across national borders, we ensure adequate security measures and standard contractual clauses are in place in compliance with the Nigeria Data Protection Commission (NDPC) guidelines and applicable data protection regulations.

10. Updates to This Policy

We may periodically update this Privacy Policy to reflect app enhancements or legal requirements. When changes are made, we will update the "Effective Date" at the top of this page and post a prominent notice inside the mobile app. Continued use of the application following notification constitutes acknowledgement of the updated terms.

11. Contact Our Privacy Office

If you have questions, inquiries, or concerns regarding your privacy or data protection practices, please contact: