Privacy Policy

My Mosque is a mosque management platform operated by Homemade Designs, a registered business in Karimganj, Assam, India. For the purposes of this Privacy Policy, Homemade Designs acting under the My Mosque brand is the data fiduciary — meaning we determine the purpose and means of processing your personal data, as defined under the Digital Personal Data Protection Act, 2023 (DPDP Act).

This Privacy Policy applies to three categories of users:

• Mosque Administrators — individuals who register a mosque on the platform, manage the mosque account, and use administrative features.
• Mosque Members — individuals whose information is entered into the platform by a mosque administrator, or who register themselves as members.
• Visitors — individuals who visit www.mymosque.in without creating an account.

3.1 Information You Provide Directly

• Mosque information: name, address, district, state, country, and preferred language.
• Administrator information: full name, mobile number, email address, and password (encrypted).
• Member information: names, mobile numbers, email addresses, and membership categories.
• Donation records: donor names, amounts, dates, types (Sadaqah, Zakat, General Fund), and payment methods.
• Expense records: payee names, amounts, categories, dates, and payment references.
• Staff and payroll information: staff names, roles, salary amounts, and payment details.
• Madrasa and education records: student names, class details, and attendance where applicable.

3.2 Information We Collect Automatically

• Device information: device type, operating system, and app version.
• Usage data: pages visited, features used, and time spent on the platform.
• Log data: IP address, browser type, and access timestamps.
• Crash reports: error logs to help us fix technical issues.

3.3 Information We Do NOT Collect

• Payment card details — all payment processing is handled by Razorpay and Paytm (PCI-DSS compliant). We never store card numbers.
• Government ID numbers such as Aadhaar or PAN of mosque members.
• Biometric data of any kind.
• Background location data — location is only used if you explicitly allow it for prayer time calculation, and only while the app is in use.

Under India's Digital Personal Data Protection Act, 2023, we process your personal data on the following lawful bases:

• Consent: You provide explicit consent when registering on the platform. You may withdraw consent at any time by contacting us or deleting your account.
• Contractual necessity: We process data necessary to provide the services you have subscribed to.
• Legitimate interests: We process usage and log data to improve the platform and ensure security, provided this does not override your privacy rights.
• Legal compliance: We process data as required by applicable Indian laws and regulations.

We do not sell your personal data to anyone. We share data only in the following limited circumstances.

6.1 Service Providers

6.2 Legal Requirements

We may disclose your information if required to do so by law, court order, or government authority, or if we believe in good faith that disclosure is necessary to protect our rights or investigate fraud.

6.3 Business Transfer

If My Mosque or Homemade Designs is involved in a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will notify you before your data is transferred and becomes subject to a different privacy policy.

My Mosque acts as a data processor for this information. We do not use mosque-specific data for any purpose other than providing the platform services to that mosque.

Mosque administrators are responsible for ensuring they have appropriate consent from their members to enter and store member information on the platform.

• Active accounts: All data is retained for the duration of your subscription.
• Free Plan after expiry: Data is retained for 30 days after the Free Plan expires, then permanently deleted.
• Paid Plan after cancellation: Data is retained for 90 days after cancellation, then permanently deleted.
• Deleted accounts: All personal data is permanently deleted within 30 days of an account deletion request, except where retention is required by law.
• Financial records: GST invoices and payment records are retained for 7 years as required by Indian tax law.
• Log data: Server logs are retained for 90 days for security and debugging purposes.

We implement appropriate technical and organisational measures to protect your personal data:

• All data transmitted between your device and our servers is encrypted using HTTPS/TLS.
• Passwords are stored using industry-standard one-way hashing — we cannot see your password.
• Access to production data is restricted to authorised personnel only.
• Regular security assessments are conducted on the platform infrastructure.
• Payment data is handled exclusively by Razorpay and Paytm — we never store payment card details.

In the event of a data breach that is likely to result in a risk to your rights, we will notify you and the Data Protection Board of India within 72 hours of becoming aware of the breach, as required by the DPDP Act 2023.

Under the Digital Personal Data Protection Act, 2023, you have the following rights as a Data Principal:

• Right to access: Request a summary of your personal data we hold and how it is being processed.
• Right to correction: Request correction of inaccurate or incomplete personal data.
• Right to erasure: Request deletion of your personal data where it is no longer necessary, subject to legal retention requirements.
• Right to withdraw consent: Withdraw your consent for data processing at any time. Withdrawal does not affect the lawfulness of prior processing.
• Right to grievance redressal: Raise a grievance with us regarding our data processing practices.
• Right to nominate: Nominate another individual to exercise your rights on your behalf in the event of your death or incapacity.

My Mosque is designed for mosque administrators and adult community members. We do not knowingly collect personal data from children under the age of 18 without verifiable parental consent.

Madrasa and Maktab modules within the platform may contain records of students who are minors. Mosque administrators using these features are responsible for obtaining appropriate parental consent before entering student information. My Mosque processes such data solely to provide the educational management feature.

• Essential cookies: Required for the website and platform to function. Cannot be disabled.
• Analytics cookies: Help us understand how visitors use the website. These are anonymised and do not identify individual users. You may opt out through your browser settings.
• No advertising cookies: We do not use cookies to track you across other websites or serve targeted advertisements.

The My Mosque mobile application does not use cookies. It uses Firebase device tokens for push notifications only, which you can disable through your device settings.

The My Mosque platform may contain links to third-party websites or services such as payment gateways, WhatsApp, or government portals. This Privacy Policy does not apply to those third-party services. We encourage you to read the privacy policies of any third-party services you access through our platform.

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you by:

• Email to your registered email address.
• In-app notification on the My Mosque dashboard.
• Updated policy on www.mymosque.in/privacy-policy with a revised effective date.

Your continued use of the platform after the effective date constitutes acceptance of the revised policy.

This Privacy Policy is governed by and construed in accordance with the laws of India, including the Digital Personal Data Protection Act, 2023, and the Information Technology Act, 2000. Any disputes arising from this policy shall be subject to the exclusive jurisdiction of the courts of Karimganj, Assam, India.

For any privacy-related queries, data rights requests, or grievances, contact us at: