Privacy Policy

2. Our core commitment

MyUmmahConnect is designed around data minimization. Concretely:

• ✅ Prayer times are computed directly on your device using the open-source library adhan.js. Your GPS location never leaves your phone.
• ✅ Adhan notifications are scheduled locally (Capacitor LocalNotifications). No server knows when your phone rings.
• ✅ The Qibla compass and the hijri calendar work fully offline.
• ❌ No advertising, no third-party trackers (Google Analytics, Meta Pixel, etc.).

3. Data we collect (and why)

3.1 Collected with your explicit consent

• GPS location — used only to compute the prayer times for your city. Stored locally, never transmitted to our servers.
• Email — only if you subscribe to our newsletter or create a shop account. Stored on Supabase (EU).
• Phone number — optional, used only for shop order SMS notifications.

3.2 Anonymous technical data

• Server logs (IP, user-agent, page visited) — kept for 30 days max on Vercel (our host) for security/debugging. No advertising profiling.

3.3 Premium purchases (if any)

• Payments handled by Stripe. We do not store your card number or banking info.

4. Android permissions requested

• POST_NOTIFICATIONS — send the adhan notification at each prayer time.
• ACCESS_FINE_LOCATION — compute precise prayer times. You can deny it: Paris will be used by default.
• SCHEDULE_EXACT_ALARM — ring the adhan exactly on time.
• RECEIVE_BOOT_COMPLETED — re-schedule notifications after a reboot.
• WAKE_LOCK + VIBRATE — wake the phone and play the adhan.
• CAMERA — used only when you scan a halal barcode. No image is sent to our servers.
• INTERNET — required for the hybrid app and the shop.

5. Sharing with third parties

We never sell your data. We share it only with strictly necessary processors:

• Vercel (US/EU) — web hosting. DPA/SCC compliant.
• Supabase (EU) — database (only if you create an account).
• Stripe (US/EU) — only for Premium or shop payments.
• Google Play / Apple App Store — for app distribution.

6. Your rights (GDPR)

You have the following rights on your personal data:

• Right of access
• Right to rectification
• Right to erasure ("right to be forgotten")
• Right to data portability
• Right to object to processing
• Right to lodge a complaint with the supervisory authority (CNIL in France)

To exercise a right: email contact@alitechsagency.com. We respond within 30 days max.

7. Retention

• Account data: account lifetime + 1 year after deletion.
• Technical logs: 30 days.
• Stripe order history: 10 years (French accounting obligation).
• GPS location: never stored on our servers.

8. Cookies

The website uses only strictly necessary cookies (shop cart, session). No tracking or advertising cookies.

9. Security

HTTPS everywhere, passwords hashed (bcrypt), database encrypted at rest (AES-256). In case of a security incident, we notify the CNIL and affected users within 72 h.

10. Minors

The application is rated for all audiences (PEGI 3). For users under 16, newsletter signup or account creation requires parental consent.

11. Changes

This policy may evolve. Any substantial change will be notified in the app and by email to affected users at least 30 days before its entry into force.

12. Contact

For any question regarding this policy:
Alitechs Agency
Email: contact@alitechsagency.com