Privacy policy

Information you give us.

• Account details when you sign up: name, email address, phone number and country.
• Things you create: RSVP invitations and responses, saved items, Tasbeeh counts, reviews, and business listings (business name, logo, description, contact details, address, photos and products).
• Your name, email address and city if you join the waitlist, along with the device details listed below and the referring page or campaign that brought you, or your name and email if you send us a message.
• Anything you include when you contact us for support.

Information collected automatically.

• Device information: a device identifier, model, manufacturer, operating system and version, app version, IP address and browser user agent.
• Location, only if you allow it. We use it to calculate Namaz times and the Qibla direction and to show nearby Mazaars, Musafirkhanas, masjids and businesses. You can turn location access off at any time in your device settings, and enter a city manually instead.
• Usage information, such as which features and content you open, used to count views and improve the Services.
• A push notification token, if you allow notifications, so we can send reminders such as Namaz times and Miqaats.
• Cookies and similar storage on the web, used to keep you signed in, remember your preferences and measure how the site is used (Google Analytics for Firebase). We don’t use advertising cookies, and advertising and Google Signals features are turned off.

Payments. If a business buys a paid plan, payments are processed by Stripe. We receive the payment status, amount and a transaction reference; we never see or store full card numbers.

• To provide the Services: calendar, Namaz times, Qibla, PDFs, RSVPs, listings and the marketplace.
• To create and secure your account, and to keep the Services safe from fraud and abuse.
• To send reminders and notifications you have turned on.
• To reply to your messages and send important service updates.
• To understand how the Services are used so we can fix problems and improve them.
• To review and verify business listings and moderate reviews and posts.
• To meet legal obligations and enforce our terms.

Where laws such as the GDPR apply, we rely on performing our contract with you, our legitimate interest in running and improving the Services, your consent (for location and notifications, which you can withdraw at any time), and legal obligations.

We don’t sell or rent your personal information. We share it only:

• With service providers who run parts of the Services for us, under contracts that limit how they use it: Supabase (database, authentication and storage), Vercel (web hosting), Stripe (payments), Google (Firebase Analytics and Performance Monitoring, to understand usage and fix problems), and Apple and Google (app distribution and push notifications).
• Publicly, when you choose to. Business listings, reviews, posts and RSVP pages you share are visible to the people you share them with or to everyone, depending on what they are.
• For legal reasons, when required by law or to protect the rights, safety and property of our users, the public or My Bohra.
• In a business transfer, if My Bohra is merged or acquired, in which case this policy continues to apply to your information.

We keep your information for as long as your account is active or as needed to provide the Services. When you delete your account, we delete or anonymise your personal information within 30 days, except where we must keep it longer for legal, tax or fraud-prevention reasons. Device records are removed with your account.

• Turn location and notifications on or off in your device settings.
• View and edit your profile and business details in the app or dashboard.
• Unsubscribe from emails using the link in any email.
• Ask us for a copy of your information, to correct it, to delete it, or to object to or restrict how we use it. Depending on where you live, you may also have the right to data portability and to complain to your local data protection authority.

You can delete your account from the app’s settings. You can also email iamhussaindev@gmail.com from the address on your account with the subject “Delete my account”, and we’ll delete your account and associated data within 30 days and confirm by email.

We protect your information with encryption in transit, row-level access controls in our database, and limited staff access. No system is perfectly secure, so please use a strong password and tell us right away if you think your account has been compromised.

The Services are not directed to children under 13, and we don’t knowingly collect personal information from them. Core tools work without an account, so children can use them with a parent. If you believe a child has given us personal information, contact us and we’ll delete it.

Our service providers may store and process information in countries other than yours, including the United States and India. Where required, we use safeguards such as standard contractual clauses to protect it.

We may update this policy from time to time. We’ll change the date at the top, and if the changes are significant we’ll let you know in the app or by email before they take effect.

Questions or requests about your privacy? Email iamhussaindev@gmail.com.