Privacy Policy

Effective date: 3 November 2026 · Last updated: 3 November 2026

This Privacy Policy explains how Al Markaz-ul Sabriya International ("we", "us") collects, uses, shares and protects information when you use the Al Markazul Sabriya mobile app (Android package org.almarkazulsabriya.app, and the iOS app when available) and this website, almarkazulsabriyainternational.org (together, the "Services").

In short: we collect only what the app needs to work. We do not show advertising, we do not use analytics or tracking tools, and we never sell your information. You can delete your account at any time.

1. Who we are

Al Markaz-ul Sabriya International is based in the United Arab Emirates and is responsible for your personal data under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021). Contact us at support@almarkazulsabriyainternational.org.

2. Information we collect

a) Account information (only if you create an account)

First and last name, email address and, if you choose to give it, your mobile number.
Your password. We never store it as written: we keep only a one-way scrambled form (hash) that cannot be turned back into the password.
Your email verification and password-reset codes, which expire after 10 minutes.

You can use most of the app as a guest without an account.

b) Location (only if you allow it)

With your permission, the app reads your device's location to show prayer times, the Qibla direction and your city name. Your location is kept on your phone and is not sent to or stored on our servers. To calculate prayer times and find your city name, the app sends your coordinates to the third-party services listed in section 4. You can turn location access off at any time in your phone's settings; the app keeps working, but prayer times and the Qibla compass need a location.

c) Sign-in and device information

When you sign in, we create sign-in tokens and a random device identifier generated by the app, so we can keep you signed in, sign you out of other devices when you change your password, and detect misuse. Sign-ins expire after 30 days.
On your phone these are kept in the system's secure storage (Android Keystore / iOS Keychain).

d) Activity in the app

Events you mark as "Interested" are stored with your account so organisers know how many people plan to attend.
Your reading progress, audio and video positions, tasbih count and display settings (font and text size) are stored only on your phone. We do not receive them.

e) Technical information

Like any website or online service, our servers automatically record technical logs when the app or website contacts them — for example the date and time, the address requested, the result, and your IP address. We use these logs only to run, secure and fix the Services, and keep them for a limited period.

f) Information we do not collect

We do not collect your contacts, photos, files, microphone, camera, payment details or advertising identifiers, and we do not build advertising or behavioural profiles.

3. How we use your information

To create and manage your account and keep you signed in securely.
To send you verification and password-reset codes by email.
To show content available to your account (some content is only for registered or authorised members).
To show prayer times, the Qibla direction and your city name.
To record your interest in community events.
To keep the Services secure, prevent abuse and fix problems.
To answer your messages and support requests.

We process your information because it is necessary to provide the Services you ask for, with your consent (for example location access, which you can withdraw), and for our legitimate interest in keeping the Services secure.

4. Sharing and third-party services

We do not sell or rent your personal information, and we do not share it for advertising. We share information only as follows:

Service	What it receives	Why
AlAdhan (api.aladhan.com)	Your coordinates and today's date	To calculate prayer times. See aladhan.com.
HeiGIT openrouteservice (api.heigit.org), using OpenStreetMap data	Your coordinates	To find your city name. See their privacy policy.
Email provider (Google)	Your email address and the code being sent	To deliver verification and password-reset emails.
Hosting provider	Data stored on and passing through our servers	To run the Services, under our instructions.

When the app contacts these services, they also see your IP address, as with any internet request. We may also disclose information if required by law, or to protect the rights and safety of our users or others.

5. How long we keep information

Account information: until you delete your account.
Sign-in records: up to 30 days after sign-in, or until you sign out or change your password.
Verification and reset codes: they expire after 10 minutes and are removed when used or replaced.
Server logs: for a limited period needed for security and troubleshooting.
Information on your phone: until you clear the app's data or uninstall the app.

6. Deleting your account

You can permanently delete your account at any time:

In the app: Profile → Security → Delete account.
Without the app: follow the steps on our account deletion page.

Deleting your account removes your name, email address, mobile number, password, sign-ins and event interest from our systems. Copies in routine backups are removed as those backups expire. Records in our security logs keep no link to you.

7. Your rights

Subject to the law that applies to you, including the UAE Personal Data Protection Law, you have the right to:

access the personal data we hold about you and get a copy of it;
correct inaccurate data;
delete your data (see section 6);
object to or restrict certain processing, and withdraw consent (for example by turning off location access);
complain to the relevant data protection authority, such as the UAE Data Office.

To use these rights, email support@almarkazulsabriyainternational.org from the email address of your account. We will reply within 30 days.

8. Security

All communication between the app and our servers is encrypted (HTTPS). Passwords are stored only as hashes, sign-in tokens on your phone are kept in secure storage, and one-time codes stop working after a few wrong attempts. Access to member data is limited to authorised administrators. No method of storage or transmission is completely secure, but we work to protect your information and will act promptly if a problem occurs.

9. International transfers

Our servers and the service providers above may be located outside the United Arab Emirates. When your information is transferred abroad, we take reasonable steps to make sure it remains protected as described in this policy.

10. Children

The Services are intended for a general audience. The library includes a section of children's stories that families can enjoy together, but the Services are not directed at children under 13, and we do not knowingly collect personal information from children under 13. Children should use the app with a parent or guardian, and accounts should be created by an adult. If you believe a child under 13 has given us personal information, contact us and we will delete it.

11. Permissions the app uses

Location (optional): prayer times, Qibla direction and city name.
Internet: to load content and sign you in.
Vibration: gentle feedback for the tasbih counter and the Qibla compass.

12. Changes to this policy

We may update this policy from time to time. We will change the "Last updated" date above and, for significant changes, tell you in the app or on this website.

13. Contact us

Al Markaz-ul Sabriya International, United Arab Emirates
Email: support@almarkazulsabriyainternational.org

This policy is also available in Urdu (اردو). If the versions differ, the English version applies.