Privacy Policy

Effective date: July 29, 2026

Mahdaviat respects your privacy. This policy explains what information the Mahdaviat mobile application and related services may collect, why it is used, how it is protected, and the choices available to you.

Information we collect

• Account information: mobile number used for OTP login and, when supplied, name, email address, date of birth, gender, address, pincode, preferred language, and profile image.
• Content and activity: language preferences, followed Masjids, notification preferences, and interactions with application content.
• Administrator content: authorised Murshids or caretakers may submit Masjid, Dairah, prayer-time, image, and follower-notification information.
• Donation confirmations: purpose, amount, payment method, UTR/reference number, optional screenshot, remarks, and verification status. Payments occur externally; Mahdaviat does not process card or bank credentials.
• Technical information: basic device, network, log, and security information necessary to operate, diagnose, and protect the service.

How we use information

We use information to authenticate users, provide requested features, personalise language and content, show relevant Masjid information and notifications, maintain donation confirmations, respond to support requests, prevent misuse, troubleshoot errors, and comply with legal obligations.

Permissions and uploaded files

When you choose features that require an image or file, the app may request camera or media access. Access is used only for the action you initiate, such as selecting a profile image, Masjid image, notification image, or donation screenshot.

Sharing and service providers

We do not sell personal information. Information may be processed by service providers that support hosting, database storage, OTP delivery, push notifications, analytics, or technical operations. We may also disclose information when required by law, to protect users, or during an organisational transfer subject to appropriate safeguards.

Data retention

Account data is retained while the account is active and for the time reasonably required to provide the service, resolve disputes, prevent fraud, and meet legal obligations. Deletion requests are verified before processing. Some records, including financial confirmation or security records, may be retained where legally required; retained data is restricted to the applicable purpose.

Security

We use reasonable administrative and technical safeguards, authenticated access, validation, and access controls. No internet or storage system is completely secure, so absolute security cannot be guaranteed.

Your choices and rights

You may review or update available profile information in the app. You may also request deletion of your account and associated data through our Account Deletion page. We may ask you to verify ownership using the registered mobile number before acting on a request.

Children's privacy

Mahdaviat is not intended to knowingly collect personal information from children under 13 without appropriate consent. A parent or guardian who believes a child supplied personal information may submit a deletion request.

Changes to this policy

We may update this policy as the service changes. The effective date above will be revised when material changes are published.

Contact

For privacy questions, use the Contact Us option in the Mahdaviat app or submit a request through the Account Deletion page.