Privacy Policy

Salah360 helps Muslims find nearby Masjids, see their prayer times and stay connected with them. This policy explains what information the Salah360 mobile app and this website collect, why, who it is shared with, and the choices you have.

In short:

• We only collect what we need to run Salah360.
• We never sell your information, and there are no ads or advertising trackers in Salah360.
• Location is optional. Apart from prayer reminders (if you choose), it is used only while you use the app, and it is never stored as a history of where you have been.
• You can delete your account from inside the app at any time.

When you create an account

• Name and email address. If you sign in with Google, we receive your name and email address from your Google account.
• Password, if you sign up with email. It is stored securely by our authentication provider, and we can never see it.
• Address you choose at sign-up (the address, city, country, postal code and its map coordinates).
• Email verification codes. We store these only in a protected (hashed) form, and they expire after a short time.

You can also browse Salah360 as a guest, without an account. Guests don’t give us any account information.

When you use the app

• Location, only if you allow it and only while the app is open. We use it to centre the map, find Masjids and events near you, and work out today’s prayer times and the Qibla direction for where you are.
• Prayer reminders, if you turn them on: your location from when you last used the app, your device’s time zone and language, your reminder settings and the prayer times calculated for you. Our server uses them to send each reminder with the Jamaat time at the Masjid nearest to you. If you also allow location “all the time”, the app reads your location once when each prayer time starts, even if it is closed, so the reminder names the Masjid nearest to where you are then. It is never tracked in between. We keep only the latest location, never a history, and delete it when you turn reminders off or uninstall the app.
• Masjids you follow, so we can show them in My Masjids and send you their updates.
• Preferences, such as your language, theme and prayer calculation setting. Most of these stay on your device. If you are signed in, your language choice is also saved to your account so it follows you to other devices.
• A copy for offline use. So the app opens without a connection, it keeps a copy of what you last saw on your phone: your profile, the Masjids you follow, nearby Masjids and events, and the place you last searched from. This copy never leaves your device, and the part that belongs to your account is removed when you sign out.
• Notification details, if you turn notifications on: a push token, a random ID created when the app is installed, and whether the device is Android or iOS. We also keep a record of the notifications we send, so we can make sure they are delivered.
• Crash reports. If a screen in the app crashes, the app sends the technical details of the error, the app version and your phone’s system version to our own server (linked to your account if you are signed in), so we can fix it. They are deleted automatically after 90 days.
• Reports you send when you report an event, Janazah alert or Masjid: the reason and any details you write. Only the Salah360 team sees them; the Masjid is never told who reported it.
• When you accepted our terms: the time you agreed to the Terms of Service and this Privacy Policy at sign-up.

If you are a Masjid Admin

• Your name, email, and your Masjid’s name and address.
• Verification over WhatsApp. To offer it, we look up your Masjid’s public Google Maps listing for its type and phone number. If you choose it, a WhatsApp message with your Masjid’s name and a one-time confirmation link is sent to that number. The page behind the link shows your name and the Masjid’s name to whoever opens it on that phone. We keep a record of the number the message went to and whether it was confirmed.
• Manual verification. A photo taken at the Masjid and a phone number, which you send instead. These are seen only by the Salah360 team reviewing the request, and are never shown in the app.
• Photos. The app sees only the photos you pick yourself, for a verification request or an event. It can save your Masjid’s QR code image to your gallery, but it cannot read your gallery.
• Everything you publish for your Masjid: prayer times, open or closed status, events (including images and speaker names and photos), and Janazah alerts.

When you visit this website

This website does not use analytics, advertising cookies or tracking. It remembers your theme and language choice in your own browser’s storage, and that information never leaves your device.

• The contact form. When you send us a message from the contact page, your name (if you give it), email address, topic and message are emailed to our support inbox so we can reply. They are not added to the app’s database.
• Shared links and QR codes. When you open a shared Masjid, event or Janazah link, or scan a Masjid’s QR code, the website checks whether your device is an Android phone or an iPhone, only to send you to the right place. It does not store this. A Google Play button on this website tells Google Play that you came from our website and, for a shared link, which Masjid, event or alert the link was for, so we can count installs.
• Technical logs. Like every website and app, our servers receive your IP address and browser or app details with each request, and keep them for a short time in technical logs, to keep the service secure.

We use your information to:

• create and secure your account, and verify your email address;
• show Masjids, prayer times and events near you, and calculate prayer times for your location;
• send the notifications you choose: prayer time changes, events, reminders and Janazah alerts;
• verify Masjid Admins, over WhatsApp or by reviewing their request, so people can trust verified Masjids;
• send important emails, such as verification codes and account deletion confirmations;
• reply to the messages you send us;
• keep Salah360 working, secure and free of abuse.

We do not use your information for advertising, and we do not build marketing profiles.

• Your account is private. Other users can’t see your name, email, address or which Masjids you follow.
• The app shows a Masjid Admin only how many followers their Masjid has, not who they are.
• Masjid information is public to anyone using Salah360: the Masjid’s name, address, prayer times, open status, events and Janazah alerts. A Janazah alert can include the name of the deceased, a family member’s name, a photo, and the time and place of the Janazah. Masjid Admins should publish these only with the family’s permission.

We do not sell or rent your information. We share it only with the services that help us run Salah360, and only what they need:

• Supabase: our database, sign-in and file storage provider.
• Google: Google Sign-In (if you use it), Google Maps for the map, and Google Places for address search and for reading a Masjid’s public listing.
• Meta (WhatsApp): to send the verification message to a Masjid’s phone number, when a Masjid Admin chooses to verify over WhatsApp.
• GoDaddy: the email service our support mailbox runs on. It sends our emails, such as verification codes, and receives the messages sent from the contact form.
• Expo, Google and Apple push services: to deliver notifications to your phone.
• AlAdhan: an Islamic prayer-times service. Your prayer times are normally calculated on your phone itself. Only if that isn’t possible does the app ask AlAdhan, sending it your coordinates.
• Vercel and Oracle Cloud: host this website and our server.

We may also share information if the law requires it, or to protect the safety of Salah360’s users or the public.

We keep your information while you have an account, or for as long as we need it to provide Salah360.

You can delete your account in the app, under Settings. We email you to confirm the request, and you then have 48 hours to change your mind. After that, your profile, follows and saved settings are permanently deleted.

If you are the verified admin of a Masjid, deleting your account also permanently deletes that Masjid, its prayer times, events and Janazah alerts, and every follower’s connection to it.

Location used for a search or a prayer time calculation is not kept on our servers after the request. For prayer reminders, only your latest location is kept, until you turn reminders off or uninstall the app.

A WhatsApp verification link stops working after 10 minutes. Messages you send through the contact form stay in our support mailbox for as long as we need them to help you; ask us and we will delete them.

No longer have the app? See Delete your account to request deletion by email. Crash reports are deleted after 90 days; reports you sent are kept without your name once your account is deleted.

• Location and notifications are optional. You can turn them off at any time in your phone’s settings.
• You can unfollow a Masjid at any time.
• You can use Salah360 as a guest, without an account.
• You can ask us for a copy of your information, ask us to correct it, or ask us to delete it, by writing to support@salah360.net.

We use encrypted connections, access rules in our database that only let people see what they are allowed to see, and hashed passwords and codes. No system is perfectly secure, but we work hard to protect your information, and we will tell you if a problem affects you.

Salah360 is not directed at children under 13, and we do not knowingly collect their personal information. If you think a child has given us personal information, please contact us and we will delete it.

We may update this policy as Salah360 grows. When we do, we will change the date at the top of this page. If a change is significant, we will also let you know, for example in the app or by email.

Questions about your privacy? Write to support@salah360.net, or use the contact page. Salah360 was founded and is run by Talha Abbas.