At Deen Islam, your privacy is sacred.
This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our platform — including our website, mobile services, mosque directory, courses, and donation features. By using the Platform, you consent to the practices described here.
1 Overview
Deen Islam ("we", "us", "our") operates an Islamic community platform that connects Muslims with verified mosques, qualified imams and scholars, educational courses, and charitable donation opportunities.
This policy applies to all users — students, imams, scholars, mosque representatives, donors, and general visitors. It should be read together with our Terms & Conditions.
2 Information We Collect
We collect information in three main ways:
2.1 Information You Provide
- Account details: name, email, phone number, password (hashed), city, country
- Profile information: bio, profile photo, headline, languages spoken
- KYC documents (imams, scholars, mosque reps): government ID, ijazah, certificates, utility bills
- Mosque details: name, address, contact, prayer times, capacity, facilities, photos
- Course content (imams/scholars): lessons, materials, videos, pricing
- Donation details (mosques): admin email, bank/payment information
- Communications: messages, reviews, reports, feedback
2.2 Information Collected Automatically
- Device & browser: IP address, user agent, screen size, OS, browser
- Usage data: pages visited, links clicked, time spent, referral source
- Approximate location (from IP) for regional content and security
- Cookies & session data (see Section 7)
2.3 Information from Third Parties
- Authentication providers (if you sign in via Google, etc.)
- Payment processors (transaction IDs — never full card numbers)
- Public sources used to verify mosque or scholar credentials
3 How We Use Your Data
We use your personal data to:
- Create and manage your account
- Verify your identity (KYC) for imams, scholars, and mosque representatives
- Display public profile information, mosque listings, and course details
- Process donations between donors and mosques (facilitation only — see Terms §8)
- Send service emails (verification, password resets, submission status)
- Improve platform security, detect fraud, and prevent abuse
- Respond to your support requests and reports
- Send optional newsletters or updates (only if you opt in)
- Comply with legal obligations
We never sell, rent, or trade your personal information for marketing purposes.
4 Legal Basis for Processing
Where required by law (e.g., GDPR), we rely on the following legal bases:
| Purpose |
Legal Basis |
| Providing the Platform & managing your account |
Performance of a contract |
| KYC verification for imams, scholars, mosques |
Legal obligation & legitimate interest |
| Security, fraud prevention, abuse detection |
Legitimate interest |
| Marketing emails & newsletters |
Consent (opt-in) |
| Legal compliance (taxes, court orders) |
Legal obligation |
5 Sharing & Disclosure
We only share your data in limited circumstances:
5.1 Public Information
The following may be visible to other users:
- Your name, profile photo, bio, city, country
- If you are an imam/scholar: credentials badges, published courses
- If you are a mosque rep: mosque name, address, contact, prayer times
- Your reviews, ratings, and public comments
5.2 Never Public
- KYC documents (ID, ijazah, certificates)
- Government ID numbers
- Bank / payment details (only shown if admin approves a public donation button — and even then only to donors on the mosque page)
- Email address & phone number (unless you make them public)
- Password (always hashed)
5.3 Trusted Service Providers
We share limited data with:
- Hosting providers (servers where data lives)
- Email providers (to send transactional emails)
- Payment processors (transaction IDs only — never card data)
- Analytics tools (aggregated, non-identifying data)
All providers sign strict data protection agreements.
5.4 Legal Requirements
We may disclose data if required by law, court order, or to protect the safety of users or the public.
6 KYC & Verification Documents
Imams, scholars, and mosque representatives must submit verification documents (KYC). Here is exactly how we handle them:
Your KYC documents are never shown publicly. They are stored on isolated, encrypted storage separate from the public site.
| Document |
Who Can See |
Retention |
| Government ID (front/back) |
Admin team only |
Until account deletion + 30 days |
| Ijazah / Certificates |
Admin team only |
Until account deletion + 30 days |
| Registration certificate (mosques) |
Admin team only |
Until mosque removal + 30 days |
| Utility bill |
Admin team only |
Until mosque removal + 30 days |
Access controls: Only verified admin staff with signed confidentiality agreements can access KYC files. All access is logged.
Encryption: Documents are encrypted at rest and in transit.
7 Cookies & Tracking
We use cookies and similar technologies for:
- Essential cookies — to keep you logged in, prevent CSRF attacks, protect against fraud
- Preference cookies — remember your language, theme (dark mode), and display settings
- Analytics cookies — understand how users interact with the Platform (aggregated)
You can control cookies via your browser settings. Disabling essential cookies may break parts of the Platform.
We do not use third-party advertising cookies or cross-site tracking.
8 Data Security
We use industry-standard security measures to protect your data:
- Encryption: HTTPS/TLS in transit; encryption at rest for sensitive data
- Password hashing: bcrypt / Argon2 — we never store plaintext passwords
- CSRF protection: All forms include anti-CSRF tokens
- Rate limiting: Prevents brute-force and abuse
- Access controls: Role-based access for admin features
- Session security: HttpOnly, Secure, SameSite cookies
- Regular audits: Security reviews and dependency updates
- Backups: Encrypted, off-site, regularly tested
No system is 100% secure. If we ever become aware of a breach affecting your data, we will notify you within 72 hours as required by applicable law.
9 Data Retention
We retain your data only as long as necessary:
| Data Type |
Retention Period |
| Active account data |
While your account is active |
| KYC documents |
30 days after account deletion |
| Reviews & public content |
Until deleted by you or removed for violations |
| Transaction records |
7 years (tax/legal requirement) |
| Security & access logs |
90 days |
| Backups |
Up to 90 days rolling |
10 Your Rights
Depending on your location, you may have the following rights over your personal data:
Right to Access
Request a copy of all personal data we hold about you.
Right to Correct
Update or fix inaccurate information in your account.
Right to Delete
Request deletion of your account and personal data.
Right to Object
Object to certain processing activities (e.g., marketing).
Right to Portability
Receive your data in a portable, machine-readable format.
Right to Restrict
Limit how we process your data in certain circumstances.
To exercise any of these rights, contact us at privacy@deen-islam.com or through our Contact page. We will respond within 30 days.
11 Children's Privacy
Our Platform is not intended for children under 13. We do not knowingly collect personal information from children under 13.
Users aged 13–17 must have parental or guardian consent. If we discover that a child under 13 has created an account, we will promptly delete it.
If you believe we have collected information from a child under 13, please contact us immediately at privacy@deen-islam.com.
12 International Data Transfers
Your data may be stored and processed in countries outside your own, including countries where our servers and service providers operate. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) to protect your data during international transfers.
If you are in the EEA, UK, or Switzerland, your data is protected under GDPR-equivalent standards regardless of where it is stored.
13 Changes to This Policy
We may update this Privacy Policy from time to time. When we make significant changes, we will:
- Update the "Last Updated" date at the top of this page
- Send an email to registered users
- Display a notice on the Platform for 14 days
We encourage you to review this page periodically. Continued use of the Platform after changes means you accept the updated policy.