1. Who We Are (Data Fiduciary)
Muslim Tracker (“we”, “us”, or “our”) is the Data Fiduciary as defined under the Digital Personal Data Protection Act, 2023 (“DPDP Act”). We operate the website muslimtracker.in and the Progressive Web App available on it.
Contact: support@muslimtracker.in
2. Data We Collect and Why
| Data | Purpose | Legal Basis |
|---|
| Name, email address | Create and identify your account | Consent (§ 6) |
| Phone number (+91) | Unique identity per mosque account | Consent (§ 6) |
| Profile photo (optional) | Display your avatar in the community | Consent (§ 6) |
| Location (coarse, on request) | Find nearby mosques and calculate Qibla direction | Consent (§ 6) |
| Device push tokens | Send Salah time and announcement reminders | Consent (§ 6) |
| Community posts and reactions | Operate the mosque community feed | Consent (§ 6) |
| Usage analytics (anonymised) | Understand feature usage to improve the app | Consent (§ 6) |
We do not sell your personal data to any third party.
3. How We Collect Your Data
- Google OAuth: When you sign in with Google, we receive your name, email address, and profile photo from Google's authentication service.
- Forms you fill: Phone number, name edits, mosque submissions, Imam requests, and feedback.
- Automatically: Device push notification tokens, anonymised analytics events (page views, feature usage) via Google Analytics (GA4) and Umami — only if you consent.
- Location: Your browser asks for permission each time; we never store precise GPS coordinates — only the city/country used to find nearby mosques.
4. Third-Party Services
- Supabase (AWS, Singapore): Database and file storage. Your data is stored on servers in ap-southeast-1 (Singapore).
- Google OAuth / Google Analytics (USA): Authentication and anonymised usage analytics (if consent given).
- Umami Cloud (EU): Cookie-free, GDPR-compliant page analytics (if consent given).
- Vercel (USA): Application hosting and global CDN delivery.
Cross-border transfers (to Singapore, USA, EU) are carried out subject to appropriate safeguards. The Government of India's approved country list under the DPDP Act is awaited; we will update our practices accordingly once notified.
5. Data Retention
- Your account and associated data are retained for as long as your account exists.
- When you delete your account, all personal data (profile, posts, reactions, notifications, push tokens) is permanently erased within 30 days.
- Anonymised analytics data has no personal identifiers and is retained indefinitely.
6. Your Rights Under the DPDP Act 2023
- Right to access (§ 11): You may request a summary of the personal data we process about you.
- Right to correction and erasure (§ 12): You can update your name, phone, and avatar in-app at any time. You can permanently delete your account from the Profile tab → “Delete my account”.
- Right to grievance redressal (§ 13): You can raise a complaint with our Grievance Officer (see Section 9). We will respond within 48 hours.
- Right to nominate (§ 14): You may nominate another individual to exercise your rights in the event of your death or incapacity. Write to us at privacy@muslimtracker.in.
- Right to withdraw consent: You may withdraw analytics consent at any time in the cookie settings banner. For complete withdrawal, delete your account.
7. Young Users & Children's Privacy
Muslim Tracker is a family and community-oriented app designed to help Muslims of all ages track prayer times, connect with their local mosque, and read the Quran. We do not engage in behavioral profiling, targeted advertising, or tracking that could harm young users.
We encourage parents and guardians to guide younger children when using community features such as the feed. If a parent or guardian wishes to review or delete information submitted by their child, they can contact our Grievance Officer at privacy@muslimtracker.in.
8. Data Security
- All connections to Muslim Tracker use HTTPS/TLS encryption.
- Passwords are never stored — authentication is handled by Google OAuth.
- Database access is restricted by Row-Level Security policies.
- API endpoints use server-side session validation and rate limiting.
- In the event of a personal data breach, we will notify the Data Protection Board of India and affected users without undue delay, and in any case within 72 hours of becoming aware.
9. Grievance Officer
In accordance with § 13 of the DPDP Act 2023, you may contact our Grievance Officer for any complaint or query relating to your personal data:
Grievance Officer — Muslim Tracker
Email: privacy@muslimtracker.in
Response time: within 48 hours on business days.
If you are not satisfied with our response, you may escalate your complaint to the Data Protection Board of India once it is constituted under the DPDP Act.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top. For material changes, we will notify you via a banner in the app. Continued use of Muslim Tracker after any update constitutes acceptance of the revised policy.
Muslim Tracker · support@muslimtracker.in
© 2026 Muslim Tracker. All rights reserved.