WaqfTech is committed to protecting user privacy and stewarding personal data with technical integrity. This Privacy Policy explains what data we collect, how we use and safeguard it, and how you can exercise your rights across waqftech.org and all endowed digital waqf platforms and applications operated by WaqfTech, including Manara (manara.waqf.app on web and Android), Muhaffiz, Baheth, Atheer, Moeen, Ramez, Konoz, Kashef, Halqa, Khetma, Taddabour, and Athan.
1. Information We Collect
We collect only the minimum information required to operate our endowed digital services and deliver educational and technical tools:
- Account and Learning Data: On interactive and educational platforms such as Manara and Halqa, we collect your name, email address, optional phone number and country, course enrollments, lesson progress, quiz submissions, and issued certificates.
- Google OAuth / Google Sign-In Data: When you sign in or link your account with Google on web or Android, we receive only basic OpenID Connect identity claims: your unique Google subject identifier (sub), verified email address, display name, and profile picture URL. We use these claims solely to authenticate your session and unify your learning account across web and mobile. We never request or access Gmail, Google Drive, Contacts, Calendar, or any other restricted Google user data.
- Contribution Intake Submissions: When you submit the form on /contribute, we collect your name, email address, contribution category, and message.
- Security and Anti-Abuse Telemetry: Ephemeral rate-limiting counters, Cloudflare Turnstile verification tokens, and cryptographic session tokens.
2. How We Use and Share Information
We use collected information strictly to provide and maintain our digital waqf services, synchronize learning progress across devices, issue verifiable completion certificates, respond to contributor inquiries, and protect against automated abuse.
WaqfTech never sells, rents, or monetizes user data, and runs zero third-party advertising networks or behavioral trackers.
3. Infrastructure and Data Security
WaqfTech services run on Cloudflare infrastructure (Cloudflare Workers, D1 databases, and R2 storage). All traffic is encrypted in transit via TLS, passwords are hashed using scrypt, and authentication tokens are signed with RS256 asymmetric keys.
4. Your Rights and Account Deletion
You may inspect, update, unlink Google Sign-In, or permanently delete your account and personal data at any time through the in-app profile settings (Delete Account / DELETE /api/mobile/auth/account) or by emailing us at salam@waqftech.org.
5. Contact Us
For any privacy questions or data requests, please contact WaqfTech at salam@waqftech.org.
Direct contact: salam@waqftech.org · Terms of Service · Waqf-DPL