Privacy Policy

This policy covers the Royyaa mobile app, the Royyaa website, and the admin portal your masjid's team uses. Royyaa operates all three.

There are two kinds of account, and they are separate records. A member account is the personal account you create in the app. A staff account belongs to someone who administers a masjid in the portal. Being one does not make you the other.

Each masjid decides what it publishes and who on its team has access. For the information a masjid holds about you as one of its congregants, that masjid is responsible alongside us.

What you give us

• Account: your name, email address and password. Passwords are stored hashed by our authentication provider; nobody at Royyaa can read yours.
• Profile, all optional: photo, phone number, date of birth or age, and gender. These exist because masajid run age-restricted and gender-specific programmes; leave them blank and the app still works.
• Your masajid: which ones you have joined and which is your home masjid.
• Family members you add: name, relationship, optional date of birth, email and phone, so you can RSVP or buy tickets on their behalf.
• Anything you send us: support messages, aid requests, and the details you enter with them.

What using the app produces

• Event activity: RSVPs, tickets, check-ins and attendance.
• Giving records: amount, campaign, date, whether it was anonymous or recurring, and a receipt reference. Your card number never reaches us — see Payments.
• Membership records: your tier at a masjid and dues paid, where your masjid runs membership.
• Notification tokens: a device identifier from Apple or Google so we can deliver push notifications, plus your per-masjid notification preferences.
• Paired displays: see Prayer displays.

• To run the service: show your masjid's prayer times, events and campaigns, and keep your RSVPs, tickets and giving history attached to you.
• To process payments and send receipts.
• To send notifications you have asked for, such as event reminders and announcements from your masjid.
• To let your masjid administer its own community — see below.
• To keep the service secure, debug faults, and meet legal and accounting obligations.

We do not use your information to build advertising profiles, and we do not make automated decisions about you that have legal effects.

Joining a masjid in the app means its administrators can see you as one of their members. Specifically, they can see your name, the contact and profile details you chose to fill in, your membership and dues status, your RSVPs and attendance at their events, and your contributions to their campaigns.

Marking a gift anonymoushides your name from public supporter lists in the app. It does not hide the gift from the masjid's own financial records, which they need for accounting and receipts.

A masjid only ever sees your activity with that masjid. Joining two does not let either see what you do at the other.

We use a small number of providers to run Royyaa. They process data on our instructions and for no purpose of their own.

• Supabase — accounts, database and file storage.
• Vercel — hosting for the website and the app's API.
• Stripe — payments (see below).
• Google Firebase Cloud Messaging — delivery of push notifications. We use Firebase for that and nothing else.
• Google Maps and Places — masjid search and maps.
• Resend — transactional email such as receipts and invitations.

We may also disclose information if the law requires it, or to protect the rights and safety of our users — and, if Royyaa is ever acquired or merged, to the acquirer under this same policy.

Payments run through Stripe. Card numbers go from your device to Stripe directly: they never touch Royyaa's servers and we never store them. What we keep is the record of the transaction — amount, date, what it was for, and Stripe's reference to it.

Stripe handles your payment details as an independent controller under its own privacy policy. If you save a card for future giving, Stripe holds it and gives us only a token that means “that customer's saved card”.

Notifications

Push notifications require your permission, asked for by your phone. Decline and everything else still works. You can turn categories off per masjid in the app, or switch notifications off entirely in your phone's settings.

Location

The app asks for your location only to sort masajid by distance when you are searching for one. It is used on the spot and is not stored on our servers or shared. Decline it and you can still search by name or city.

If you pair a Royyaa prayer display, we store what is needed to keep it showing the right times: a hardware identifier, the name you give it, its firmware version, the Wi-Fi network name and signal strength it reports, its battery level, and when it last synced.

The display holds prayer times, not personal data. It never receives your giving history, your RSVPs or your contact details. Deleting the device in the app, or deleting your account, revokes its credentials and it stops syncing.

Royyaa accounts are for people aged 13 and over. We do not knowingly let a child create their own account.

A parent or guardian can add a child as a family member on their own account, to RSVP or buy tickets for them. That record belongs to the adult who created it: they can edit or delete it at any time, and it is deleted with their account. Only add details you are comfortable sharing with the masajid you attend.

If you believe a child has created an account of their own, write to us and we will remove it.

Your profile and activity stay for as long as your account exists. Records of money that has moved are kept even after you leave, because a masjid's books have to balance and receipts have to be reproducible — but they are unlinked from you first, as described next.

You can delete your account from inside the app: Profile → Edit profile → Delete account. It happens immediately. There is no queue and no email to send.

Deleting removes:

• your profile and contact details;
• your masjid memberships and dues records;
• your RSVPs, tickets and attendance;
• the family members you added;
• any aid requests you submitted;
• your paired displays and their credentials;
• your notification tokens and preferences;
• your sign-in itself.

And it cancels any recurring giving before it removes anything.

• See and correct: your profile is editable in the app; your giving history is under Profile.
• Delete: as above, from inside the app.
• Notifications: per category, per masjid, or off entirely.
• Location: refusable, and revocable in your phone's settings.
• Anonymity: any gift can be marked anonymous before you give it.

Depending on where you live you may have further rights — to a copy of your data, to restrict how it is used, or to complain to a regulator. Write to us at hello@royyaa.com and we will help.

Traffic is encrypted in transit. Access to the database is restricted per-user by row-level security, so one member cannot read another member's records, and staff see only their own masjid. Device credentials and pairing codes are stored only as hashes. No system is perfect, and we will tell you promptly if something happens that affects you.

If this policy changes in a way that matters, we will update the date at the top and, for significant changes, tell you in the app before they take effect.

Questions about privacy, or a request about your data: hello@royyaa.com.