Privacy Policy

Ummah Media Group LLC, operating MasjidConnect (masjidconnect.app). Last updated: September 10, 2026.

We built MasjidConnect so a masjid can run its prayer times, announcements and screens in one place — without selling anyone's data to do it. This page says, in plain language, what we collect, why, and what we will never do with it. Where our protections are ordinary rather than extraordinary, we say so instead of hiding behind the word “secure.”

1. What we collect, and why

Your account. To register a masjid or sign in, you give us your name, email address, and a password (hashed using industry-standard methods — never stored in plain text). You can also sign in with UmmahPass, in which case your identity is your UmmahPass account and we never see that password.

The register-masjid form. Name and email address — used to create your account and let our team review and approve your claim.

The suggest-a-masjid form.Your name, and the masjid's name, address, city, state, postal code, country, phone and website — used only to consider the suggestion and, where needed, to reach you about it.

The demo form. Name, email address, and (optionally) a masjid name. The form tells you what the email is for before you submit: so someone from our team can follow up. It is not added to any mailing list.

Payments.Donations are processed by UmmahCauses, a separate UMG service with its own privacy policy — MasjidConnect does not see or store card numbers. Advertiser payments and masjid payouts go through Stripe; we keep the records Stripe gives us (amount, date, and what it was for) so we can honour receipts and accounting. Stripe's own policy governs the data they process.

Web-push subscriptions. Only if you turn notifications on. Stored so we can deliver to your device, removed when you turn them off.

Server logs. Like every website, our servers log requests (IP address, page, time, browser type) for security, abuse prevention and debugging. Kept for a limited period, then deleted.

Local storage on your device. We store a small amount locally — your sign-in token, your push subscription, and a few preferences like your feed scope — so the site works without asking you to sign in on every page.

2. What we will never do

Each of these is verified against the live product:

We never sell your data — not to advertisers, not to data brokers, not to anyone.

We never run third-party ad trackers or analytics. MasjidConnect's analytics is self-hosted Matomo on our own servers (section 3). No Google Analytics, no Meta pixel, no ad-network cookies.

We never build prayer trackers, worship streaks, or “religious scores.”Nothing in the product measures or scores anyone's worship.

We never sell or share donor data. Who gives to which masjid stays between the donor and that masjid. Donation money and donation identity are walled off from advertising.

We never fake activity.Counts you see on the site are real, or they are clearly labelled “Example” — including the dashboard and earnings figures shown in the marketing mockups.

We never target ads at a person.Ads on masjid screens are approved by the masjid and matched to campaign settings, not to an individual's profile. We do not build per-person profiles or cross-site tracking. We count ad views, not people.

We never expose a masjid's follower list. Masjid staff see aggregate counts, never an identifiable member list. Following a masjid is a private act; we treat it that way.

3. Analytics — self-hosted, first-party

We measure our own site with Matomo running on our own servers(analytics.ummahmediagroup.com). Nothing about your visit is sent to Google, Meta, or any analytics company. We use it to answer questions like “is this page broken?” and “what do people actually use?”. The signage screens that run on a masjid's TV do not send analytics at all.

4. Advertising

Advertising is how MasjidConnect stays free for masjids. Ads appear on masjid screens, and each masjid approves what shows on its own screens — and can remove any advertiser at any time. Advertisers are matched to campaigns by targeting they choose, never by a profile of any individual visitor. We report proof-of-play (an ad actually rendering) to advertisers; we deliberately do not build per-person tracking.

5. Payments — Stripe processes, we don't hold cards

Stripe handles card data for advertiser payments and masjid payouts. We never see or store your card number. We keep transaction records to honour receipts and meet accounting obligations. Stripe's privacy policy governs the data they process.

6. Security — the honest version

We use standard protections: firewalled services, automatic security patching, and brute-force login blocking. Stored data is protected by access controls and server security rather than disk-level encryption — closing that gap is on our roadmap. If a breach affects your personal information, we will notify affected users as required by law.

7. Data retention and deletion

We keep your data while your account is active. You can ask us to delete your account and data at any time by emailing the address in section 13. This is handled by a person on our team, so allow a few business days. We keep payment records as long as tax and accounting law requires, and records needed to prevent abuse for as long as needed to keep the community safe.

8. Legal process

We may disclose information without your consent when required by law — for example, in response to a valid subpoena or court order, or where necessary to protect a person's safety, prevent fraud, or protect our legal rights.

9. Business transfers

If Ummah Media Group is ever involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will require any successor to honour this policy, including everything in the “what we will never do” section.

10. Children

MasjidConnect is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has created an account, contact us and we will delete it.

11. Third parties we rely on

The short list of outside services that touch your data, and why:

Stripe— processes advertiser payments and masjid payouts; we don't hold card numbers.

UmmahPass — provides optional single sign-in; your identity and password live with UmmahPass.

UmmahCauses — processes donations; a separate UMG service with its own privacy policy.

UmmahArmy— powers the volunteer-missions feature; when a masjid uses it, the masjid's mission data lives with UmmahArmy.

Matomo (self-hosted) — our own analytics, on our own servers.

Deliberately absent from this list: Google Analytics, Meta/Facebook, TikTok, ad-tech data brokers, or any tracker used to build an ad-targeting profile of you.

12. Changes to this policy

If we change this policy, we will post the new version here with a new date. For meaningful changes we will tell you before they take effect, except where an immediate change is required for security or legal-compliance reasons.

13. Contact

Questions, requests, or concerns — including deleting your account or asking what data we hold: salaam@ummah.city.

Ummah Media Group LLC · MasjidConnect