Privacy Policy

This Privacy Policy describes how Webinane (“we,” “us,” or “our”) collects, uses, shares, and protects information when you use the NoorNet mobile application (the “App”). By using the App, you agree to the practices described in this policy. If you do not agree, please do not use the App.

1. Who we are

NoorNet is an Islamic lifestyle and community application that provides prayer times, worship tools, masjid (mosque) connectivity, scholar (Allama) content, and related features. We are the data controller for personal information processed through the App, except where third-party services (described below) process data under their own policies.

2. Information we collect

2.1 Information you provide

• Account information: Email address and password when you register with email, or information from your Google account when you sign in with Google (such as name and email address, as provided by Google).
• Profile information: Display name, bio, role (member, Allama, masjid owner, or admin), and optional YouTube channel URL for scholar accounts.
• Masjid registration and applications: Applicant name, position, phone number, masjid name, contact details, address, description, and location coordinates when you apply to register or manage a masjid.
• Scholar events: Event titles, descriptions, dates, times, and location information you enter.
• Donations: Donation amount and selected masjid. Payment card and billing details are collected and processed by Stripe; we do not store your full payment card number on our servers.
• Communications: Information you send when you contact us for support.

2.2 Information collected automatically

• Location: With your permission, we collect precise or approximate location (GPS and network-based) to calculate prayer times, show Qibla direction, display maps, and support masjid or event location features. You may deny location permission; some features may be limited or use a default or manually chosen location.
• Device and app data: Device type, operating system version, app version, and similar technical data needed to run the App, deliver notifications, and maintain security.
• Push notification tokens: Firebase Cloud Messaging (FCM) device tokens used to send prayer schedule updates, scholar video or event alerts, and related notifications.
• Local preferences: Settings stored on your device, such as notification tones, linked masjids or scholars, dhikr counts, dua bookmarks, and prayer schedule preferences.
• Prayer and schedule data: Prayer times may be read from or written to Firebase Realtime Database when masjid schedules are published or synced. Cached prayer data may be stored locally (including Room database and bundled timing data) for offline use.

2.3 Information from third-party services

When you use certain features, the App communicates with third parties that may receive limited data:

• Google / Firebase: Authentication (Google Sign-In), cloud messaging, and realtime database for prayer schedules.
• Supabase: Email authentication, user profiles, masjid and membership data, scholar events, and server functions (including donation setup).
• Stripe: Payment processing for masjid donations.
• Google Maps Platform: Maps, places, and location-related features.
• YouTube / Google APIs: Public scholar channel and video listings when you view Allama content.
• Al-Quran Cloud: Quran text, translations, and audio URLs when you use Quran features.
• Metal price API: Public market data used to estimate Zakat nisab thresholds (not linked to your identity by us).
• Google ML Kit (QR scanner): QR codes are scanned to link masjids or scholars; scanning is handled through Google Play services where available.

3. How we use your information

We use information to:

• Create and manage your account and user role.
• Provide prayer times, alerts, Qibla, Quran, duas, Zakat tools, Ramadan features, and other App functionality.
• Connect you with masjids and scholars (including QR linking and membership).
• Enable masjid owners and admins to publish prayer schedules and review masjid applications.
• Enable scholars to manage profiles, events, and YouTube-linked content.
• Process donations through Stripe on behalf of participating masjids.
• Send push notifications you have enabled (prayer reminders, schedule updates, scholar content).
• Schedule local alarms and reschedule them after device restart.
• Maintain security, prevent abuse, and comply with legal obligations.
• Improve the App and fix errors.

4. Legal bases (where applicable)

If you are in the European Economic Area, United Kingdom, or similar regions, we process personal data based on:

• Contract: To provide the App and features you request.
• Consent: For example, location access, notifications, and optional features where consent is required.
• Legitimate interests: Security, fraud prevention, and improving the service, balanced against your rights.
• Legal obligation: When required by law.

5. How we share information

We do not sell your personal information. We may share information:

• With service providers that help us operate the App (hosting, authentication, payments, maps, messaging), under contracts that limit their use of data.
• With masjids you link to in connection with membership, published schedules, and donations you choose to make.
• With other users only as needed for public or semi-public features (for example, masjid or scholar profile information you or your organization publish).
• For legal reasons if required by law, court order, or to protect rights, safety, and security.
• In a business transfer if we merge, are acquired, or sell assets, subject to this policy.

6. Third-party privacy policies

These providers have their own privacy practices. We encourage you to review them:

• Google Privacy Policy (Sign-In, Maps, ML Kit, YouTube)
• Firebase Privacy and Security
• Supabase Privacy Policy
• Stripe Privacy Policy
• Al-Quran Cloud (API service; see their terms and practices)

7. Data retention

We keep personal information only as long as needed for the purposes in this policy, including while your account is active and for a reasonable period afterward for legal, security, and backup purposes. Local data on your device remains until you clear app data, uninstall the App, or reset preferences. You may request deletion of your account data as described in Section 9.

8. Security

We use technical and organizational measures appropriate to the sensitivity of the data, including encryption in transit (HTTPS/TLS), access controls on backend services, and secure authentication. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

9. Your choices and rights

• Permissions: You can change location and notification permissions in your device settings.
• Account: You can sign out at any time. To delete your account or request access, correction, or deletion of personal data, follow the steps on our account deletion page or contact us using the details below. We will respond as required by applicable law.
• Marketing: The App does not send third-party advertising based on your activity. Push messages relate to App features you use (for example, prayer or scholar updates).

Depending on your location, you may have rights to access, port, rectify, erase, restrict, or object to certain processing, and to lodge a complaint with a supervisory authority.

10. Children’s privacy

The App is not directed at children under 13 (or the minimum age required in your country). We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will take steps to delete it.

11. International transfers

Your information may be processed in countries other than your own, including where our service providers operate (for example, the United States). Where required, we use appropriate safeguards for such transfers.

12. Permissions the App may request

13. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised policy at the same URL and update the “Last updated” date. Material changes may be communicated in the App or by other reasonable means. Continued use after changes means you accept the updated policy.

14. Contact us