Musalla Network Privacy Policy

Musalla Network is a product of AZT Worldwide Pty Ltd. This is Musalla Network’s product-specific privacy notice, and it should be read alongside AZT Worldwide’s group-wide Privacy Policy, which applies to all websites, mobile applications, software products, online platforms, digital services, and related technologies owned, operated, published, licensed, or managed by AZT Worldwide Pty Ltd. Where this policy describes Musalla Network’s own data practices in more detail, this policy governs for Musalla Network specifically.

1. Scope of this policy

This policy covers every surface of Musalla Network:

• the mobile app on iOS and Android (application ID com.aztlabs.musalla.network)
• the Android TV signage app used for hall prayer-time displays
• the web app (the same codebase running in a browser)
• the website at musallanetwork.com, including its public musalla pages and contact form

2. Information we collect

a) Location (guest & signed-in)

If you allow location access — always “When In Use”, never background/“Always” — we use your coordinates on-device to calculate Adhan (prayer times) for your area and the Qibla direction. To show a readable place name (for example “Auburn” rather than just a city), your coordinates or search text are sent to Photon, a third-party geocoding service operated by Komoot (photon.komoot.io). When you use “Find a musalla near me”, your coordinates are sent to our backend for that search only and are not stored. We do not store your location on our servers. You can deny location permission at any time and search for a suburb manually instead.

b) Compass / motion sensor

The Qibla tab reads your device’s magnetometer so the on-screen compass can point toward the Ka’aba. This heading is used for display only and never leaves your device.

c) Account information (optional sign-in)

Signing in is optional and passwordless: we send a one-time 6-digit code to your email address, and there is no password to create or store. Sign-in emails are delivered by Resend. If you sign in, we store (via our backend provider, Supabase) your email address, a unique account ID, the name you provide, and up to five followed musallas with your alert preferences for each.

d) Push notifications

If you turn on alerts for a musalla you follow, we store your device’s push notification token, its platform (Android or iOS) and when it was last used, so we can notify you when that musalla changes a prayer time or posts an announcement. Notifications are delivered through Firebase Cloud Messaging (Google) and, on iPhone, Apple Push Notification service. Tokens unused for 60 days are deleted, and signing out removes your device’s token. Prayer-time reminders for your own location are scheduled on your device and involve no server.

e) Musalla / venue admin data

If you register and manage a musalla (a prayer space) in the app, we store what you enter to run it: the venue’s name, address and location, prayer-calculation method and madhab, Iqamah rules, Jumuah times, facilities and announcements, and the record linking your account to that venue as an admin. Addresses are looked up using Mapbox, with Photon as a fallback.

f) Prayer-hall displays (Android TV)

An Android TV display gets a randomly generated device identifier (kept on that TV only) and a short-lived pairing code so an admin can link it to a venue. We store that device identifier, its pairing status, and a periodic “last seen” heartbeat — this is device data, not data about the people in the hall.

g) Biometric step-up

Creating or editing a venue, or pairing a display, first asks you to confirm with Face ID, fingerprint, or your device passcode/PIN (on web, a fresh email code instead). This check happens entirely on your device through Apple’s or Google’s own biometric APIs — we never receive, see, or store any biometric data ourselves.

h) Information that stays on your device only

Some things are stored locally on your device and never sent to our servers: your last-used or searched location and your five most recent suburb searches, your prayer-calculation preferences (method, madhab, high-latitude rule, Hijri date offset), and your prayer reminder settings. If you aren’t signed in, the musallas you follow are also kept only on your device. An Android TV display also caches recent prayer timetables, so it can keep showing correct times through a network drop. Uninstalling the app removes all of this.

i) Website contact form (musallanetwork.com)

If you send us a message through the contact form on our website, we receive your name, email address, subject and message by email, delivered through our email provider, Resend. We use it only to reply to you.

j) Automatically collected / technical data

Like virtually every app and website, our hosting and infrastructure providers (Vercel for the website, Firebase Hosting for the web app, Supabase for the backend) automatically log standard technical information for security and reliability, such as IP address, device or browser type, app version, and request timestamps. Musalla Network contains no advertising, analytics or crash-reporting tools, and does not use your device’s advertising ID.

3. How we use information

We use the information above to:

• provide Adhan, Qibla, Hijri calendar, and monthly-calendar features
• operate optional sign-in, followed musallas and venue admin tools
• send the musalla alerts you turn on
• keep Android TV displays paired, synced, and showing correct prayer times
• respond to messages and support requests
• authenticate users and secure access (including the biometric step-up)
• meet legal, tax, and compliance obligations

4. Sharing and directory features

Musalla directory data (a venue’s name, address, prayer times, facilities and announcements) is intentionally public in the app and on musallanetwork.com, so people can find and follow real prayer spaces. If you register and administer a musalla, the venue information you enter is visible to anyone. Your personal account details — your email address and the musallas you follow — are never made public.

5. Third-party services

We share information only as needed to run the service, with these providers:

Provider	Purpose
Supabase	Database, authentication, and backend infrastructure
Photon / Komoot	Turning coordinates or search text into a place name
Mapbox	Address lookup and map tiles when admins place a musalla’s pin
OpenStreetMap	Fallback map tiles for placing a musalla’s pin
Firebase (Google)	Delivering push notifications (Firebase Cloud Messaging) and hosting the web app
Apple Push Notification service	Delivering push notifications to iPhones
Resend	Delivering sign-in emails, and website contact-form emails to us
Vercel	Website hosting
Apple App Store / Google Play	App distribution — governed by their own privacy policies

6. How we share information

We do not sell personal information. We may share information with the service providers listed in Section 5, professional advisers, and government or law enforcement bodies where legally required, or with a purchaser in the event of a merger, acquisition, or sale of assets — in which case this policy would continue to apply to your information. We do not share personal information for third-party advertising.

7. Data retention

We retain personal information only for as long as reasonably necessary to provide the service, maintain accounts, meet legal, tax, and compliance obligations, resolve disputes, and enforce our agreements. In practice: account data (email, name, followed musallas, alert preferences) until you delete your account; push notification tokens until you sign out, delete your account, or 60 days without use; venue/admin data for as long as that venue stays part of the network — a musalla deleted by its owner is permanently removed after 10 days; contact-form emails as needed to reply and for our own records.

8. Security

We maintain secure hosting environments, encrypted connections (HTTPS/TLS) throughout, access controls, authentication protections, and database access rules (Postgres Row Level Security) that restrict venue-editing rights to verified admins only. No method of internet transmission or storage is completely secure, and we can’t guarantee absolute security.

9. International users

Information may be stored or processed in Australia or other countries where our business or service providers operate (for example, Supabase, Google/Firebase, Mapbox, Resend, and Vercel’s infrastructure).

10. Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of your personal information, withdraw consent, object to certain processing, or close your account — for example under Australia’s Privacy Act 1988 and the Australian Privacy Principles, the EU/UK GDPR, or US state privacy laws. To exercise any of these, email admin@musallanetwork.com; we will respond within a reasonable time and may need to verify your identity first.

You can also, at any time: deny location permission and search for a suburb instead; turn off musalla alerts or sign out; delete your account; or delete the app to remove everything stored on your device.

Deleting your account

You can delete your account at any time in the Android or iOS app under More → Profile card → Delete account, or by emailing admin@musallanetwork.com. Deleting your account permanently removes your email address, name, followed musallas, alert preferences and push notification tokens. Your account is deleted overnight; if you sign back in before then, you can choose to keep it. If you own a musalla, you’ll be asked to transfer it to another admin or delete it first.

11. Children’s privacy

Musalla Network is not directed to children under 13 years of age (or a higher minimum age where required by local law), and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

12. App Store and platform compliance

Musalla Network is distributed through the Apple App Store and Google Play. Your use of those platforms to obtain the app is also subject to Apple’s and Google’s own privacy terms and practices.

13. Changes to this policy

We may update this policy as the app and website evolve. We’ll update the “Last updated” date above, and for material changes we’ll give additional notice where appropriate. Your continued use of Musalla Network after changes become effective constitutes acceptance of the revised policy.

14. Contact us

AZT Worldwide Pty Ltd
Email: admin@musallanetwork.com
Musalla Network: musallanetwork.com
Group privacy policy: aztonline.com/privacy-policy