Privacy and deletion

الخصوصية وحذف البيانات لتجربة سديرة مسجد

Effective 12 October 2026. This notice covers Sedira Masjid, Android package ae.sedira.sandbox.masjid, and the connected mosque trial at sedira.ae/masjid. Owner: Sami Husain AlMarzooqi. Privacy contact: appsupport@sedira.ae.

For children and parents

This is a closed proof-of-concept pilot. A parent or responsible adult should supervise the invitation and explain what is recorded before a child uses it. Use a made-up nickname. We do not ask children for their real name, email, date of birth, phone number, photograph, or precise GPS location. No age-selection screen is used; the participant experience is designed for children.

التجربة بإشراف ولي الأمر أو شخص بالغ مسؤول. استخدم اسمًا مستعارًا. تُحفظ تسجيلات الحضور وتقدّم الصلوات لدى سديرة، ويمكن لمنظّم المسجد الاطلاع على الحضور المرتبط بالاسم المستعار.

What is stored and why

When an adult pairs a phone, the service creates a random participant identifier and a private access token. We store the nickname, linked mosque, pairing date, prayer dates, manually marked prayers, verified QR check-ins, session identifiers and times, and encouragement-point totals. These records make the closed trial and progress view work and prevent duplicate points. Mosque attendance and prayer records can reveal religious practice and an association with a mosque even though GPS is not collected.

The private phone token is protected in the app’s private storage. The server stores its cryptographic hash rather than the token itself. The organiser’s private code is also stored as a hash. Web organiser sign-in uses an HttpOnly session cookie; the guest website uses a cookie to avoid duplicate check-ins. These are functional cookies.

Camera and device permissions

The camera is used only when you choose to scan a QR code and grant Android camera permission. QR decoding happens on the device. Camera images and video are not uploaded or retained by the app. The decoded invitation or attendance token is sent to Sedira to validate it. The app does not request microphone, contacts, advertising identifier, health, or GPS permissions.

Who can see the data

The paired phone can view its own prayer progress. The mosque organiser can see paired nicknames and session check-ins and can revoke a device’s access. Other children cannot browse another child’s profile. There is no public leaderboard, messaging, advertising, sale of data, or marketing analytics in this pilot.

The website and API run on Sites infrastructure and Cloudflare hosting and database services. Those providers process requests and stored data to operate the service. Network requests necessarily expose an IP address to hosting providers, which may maintain operational and security logs. The application uses hashed, time-limited network buckets to throttle repeated authentication requests. Transfers may be processed outside the UAE; no UAE-only hosting claim is made. Google Play separately processes installation and testing information under its own policies.

Security and retention

App traffic uses HTTPS. Invitations are single-use and expire after 24 hours. Phone access expires after 90 days or when revoked; organiser sessions expire after seven days. Expiring or revoking access does not itself delete saved prayer records. Pilot records remain until you delete the participant profile or an authorised deletion request is completed. Provider logs and backups may persist according to provider retention; we do not promise immediate deletion from those systems.

Delete a participant profile

In the Android app, use the profile deletion option and confirm. It removes that participant’s stored prayer progress and linked check-ins from the active application database, revokes access, and clears the local profile. If you no longer have the phone, a parent or organiser can email appsupport@sedira.ae with the mosque name and nickname and request deletion. Do not email private access codes. We may ask the organiser to verify the request without collecting a child’s identity document.

يمكن حذف ملف المشارك من خيار حذف الملف داخل التطبيق. إذا لم يعد الهاتف متاحًا، يمكن لولي الأمر أو منظّم المسجد طلب الحذف عبر البريد الموضّح، دون إرسال رموز الدخول الخاصة.

What the trial does not prove

A valid QR scan records access to a live mosque session code. It does not prove that a person prayed or was physically present, and a code can be shared while valid. Test sessions are marked as demonstrations. Pearls are encouragement points only; they do not measure religious reward. This project is not an official government application.

Changes

If the trial’s collection or purpose changes, this notice and the app’s relevant disclosures will be updated before using the changed features.