Privacy Policy

Effective 20 September 2026

MasjidMapper helps you find masjids and prayer times near you. Trust is the whole point of the product, so this policy is written to be read: what we collect, why, where it goes, and how to get it back or removed. If anything here is unclear, write to info@masjidmapper.com.

1. Who we are

MasjidMapper is operated from Toronto, Ontario, Canada. For anything in this policy, the contact is info@masjidmapper.com.

2. What we collect, and why

2.1 Using the app without an account

Most of the app works as a guest. In that mode we handle:

• Your location, only if you grant the permission. The app uses it on your device to centre the map and sort masjids by distance, and sends the coordinates to our servers to answer that request. We do not store those coordinates against you and we do not build a location history. The app does not use location in the background. You can instead choose a city by hand, or deny the permission and browse the map.
• Prayer settings such as calculation method, Asr preference and reminder choices. These stay on your device.
• Crash reports and usage statistics through Firebase Crashlytics and Firebase Analytics, both provided by Google. These tell us that the app opened, which screens were used, and what went wrong when it crashed. They include device information (model, operating system version, app version) and an identifier Google assigns to the app on your device, which on Android may be the advertising ID. We use this only to fix bugs and understand which features are used. It is never used for advertising.
• Map requests. The map is drawn by Mapbox. When tiles load, your device sends Mapbox the usual web request information (your IP address and the map area being viewed). Mapbox's handling of that is described in the Mapbox privacy policy.
• Server logs. Like any web service, our servers record requests, including the IP address and the coordinates or search text in the request. These logs exist for security and debugging and are kept for no longer than 30 days.

2.2 If you sign in

Signing in is optional. It is required only to follow a masjid, receive its announcements, claim a masjid you run, or make an attributed suggestion. The only sign-in method is Google Sign-In. When you sign in we store:

• Your Google account identifier, email address, display name and profile photo URL, as Google provides them.
• Your language preference and notification settings.
• The masjids you follow and which one you mark as home.
• A push-notification token for each device you sign in on, so announcements from masjids you follow can reach that device.
• Suggestions and corrections you submit about masjid details, and any missing masjid you report, attributed to your account.
• Photos you upload, until they are removed.
• If you claim a masjid: the claim itself, the proof you attach (for example a letter on the masjid's letterhead), and, once approved, your role as an administrator of that masjid. Announcements you post as an administrator are attributed to the masjid, not to you personally, and are public.
• When your account was created and when you last signed in.

2.3 If you report a problem

You can report a problem from inside the app, with or without an account. A report holds what you write, and, only if you choose to include them, a screenshot of the screen you were on and an email address for us to reply to. The app also attaches its version, your device model and operating system version, your language, and the screen you were on; if you are signed in, the report is linked to your account. Reports go only to our founders, who use them to fix problems. They are never public. If a report leads to a bug being tracked, the tracked issue does not include your email address. Deleting your account removes your email address and screenshot from any report you sent; the rest stays, detached from you.

2.4 What we do not do

• We do not show advertising, and we do not use any of this data for advertising.
• We do not sell, rent or trade personal information.
• We do not track your location in the background or keep a record of where you have been.
• We do not read your contacts, photos (beyond ones you choose to upload), messages or other apps.

3. Who else sees data

We use a small number of providers to run the service. They process data on our instructions and only for the purposes above:

• Google Cloud hosts our servers, database and uploaded files.
• Google (Firebase) delivers push notifications and provides the crash reporting and analytics described above.
• Google Sign-In authenticates you. Google's own handling of your account is governed by Google's privacy policy.
• Mapbox serves the map.

Beyond these providers, personal information is shared only with your direction (for example, a suggestion you make is shown to the masjid's administrators for review, attributed as "community-submitted"), or where the law requires it.

4. Where data is stored

Our servers and database run on Google Cloud in the United States. Data you provide is therefore stored and processed outside Canada, and may be subject to the laws of that jurisdiction. Firebase and Mapbox data is processed on their infrastructure, which may also be outside Canada.

5. How long we keep it

• Account data is kept for as long as your account exists.
• Server request logs are kept for no longer than 30 days.
• Crash and analytics data is kept by Firebase for no longer than 14 months.
• Push tokens for a device are removed when you sign out on that device or delete your account.

6. Your rights: review, export, delete

You can, at any time:

• Review everything stored against your account.
• Export it as a machine-readable file.
• Delete your account. See how to delete your account.

In the app, open Settings, then Privacy and data. There you can review what is stored, export it as a JSON file, and delete your account. Deletion takes effect straight away and signs you out on every device.

If you cannot use the app, email info@masjidmapper.com from the address you signed in with. We will confirm the request with you and act on it within 30 days.

When an account is deleted we remove the account, its follows, push tokens and claims. Suggestions you made about masjid details, and photos you uploaded of a masjid, are kept but detached from you, so they can no longer be linked to your identity. This is so that a correction the community relies on does not disappear when one contributor leaves. Masjid information you verified as an administrator belongs to the masjid and stays with it.

If you are not satisfied with how we handle a request, you may complain to the Office of the Privacy Commissioner of Canada.

7. Permissions the app asks for

• Location (while using the app): to find masjids near you. Optional.
• Notifications: for prayer reminders you set and announcements from masjids you follow. Optional.
• Photos: only when you choose to upload one. Optional.

8. Children

The app is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has created an account, email us and we will delete it.

9. Security

Data travels over encrypted connections. Access to production systems is limited to the people who run the service. No system is perfectly secure, and if a breach affects your personal information we will tell you.

10. Changes to this policy

When this policy changes, the new version is published here with a new effective date. Material changes will also be announced in the app.