Privacy Policy · Worship A-Z

Worship A-Z Privacy Policy

Effective date: September 4, 2026 · Version 1.0

Worship A-Z is designed, built, and operated by Barro Services LLC ("we," "us," or "our"). This policy explains what the Worship A-Z iOS app, its administrator console, and related services (the "Service") collect, how it is used, and the promises we make. The plain-language covenant comes first; the formal sections that follow say the same things precisely.

Our covenant

We will never sell your data — not to advertisers, not to data brokers, not to anyone, not ever. There are no ads in Worship A-Z and no third-party advertising or tracking code inside the app.
Location is yours to give, and it disappears. The app works fully with location off. If you turn it on, the check at your masjid happens on your own phone. A check-in is one event, visible only to verified same-gender members of your own masjid, and it is deleted when it expires. We keep no history of where you have been.
Brothers' and sisters' spaces are completely separate. Our servers never send one space's information to the other. Sisters' photos are optional and never leave the sisters' space.
Every profile field is optional. Your profile can be as thin as a first name. Each field has its own visibility control.
You can leave with everything. Export all your data, or delete your account and its data, at any time, in the app.

1. Information we collect

Account basics. Your email address (used for sign-in codes and security notices), a display name, and your declared community space (brothers or sisters), used only to place you in the correct space.

Optional profile fields you choose to add. Photo, profession or skill, region or heritage, languages, neighborhood (coarse, never an exact address), a short bio, and skills you volunteer. Leaving any or all of these blank never limits the app.

Masjid affiliation. Your chosen home masjid, masjids you follow, and your membership approval status set by that masjid's administrators.

Presence events (only if you opt in). The fact that you checked in at a specific masjid and when the check-in expires. Distance evaluation runs on your device; a manual check-in sends one coordinate for immediate validation and it is discarded. We never receive a stream of your coordinates.

Messages, posts, and community activity. What you write in channels and direct messages, community points, volunteer sign-ups, and reports you file, stored to deliver those features. Direct messages are same-space only.

Device sensors, on the device. The Qibla compass uses the compass, GPS, and motion sensors; the dhikr counter uses haptics and on-device speech synthesis; the accessibility options use VoiceOver. None of these readings are sent to our servers.

Donations. If a masjid enables donations, payments are processed by a payment provider. We receive confirmation and receipt data, never your full card number.

Technical minimum. A push-notification device token (if you allow notifications), app version, and crash reports without behavioral profiling. Crash and hang reports come from Apple's MetricKit at most once a day and contain the app's own stack trace, device model and iOS version — never your messages, location or names — and you can switch them off under Help & support. When you write to Help & support we keep your message, the email you choose for the reply, and the app version. We use no third-party advertising or analytics SDKs.

Administrator console. Administrators and imams who use the web console are additionally identified by their approved role and the masjid they administer. Every administrative action is recorded in an audit log for the safety of members.

2. What we never do

Sell, rent, or trade your personal information — to anyone, for any purpose.
Show advertising, or embed advertisers' or data brokers' code.
Store a history of your location or your presence at any masjid.
Reveal any member of one community space to the other, including in search, counts, or notifications.
Use your data to train advertising or profiling systems.

3. Who can see what

Profile fields you enable: verified same-space members of your masjid, or the narrower audience you pick per field.
Check-in ("at the masjid"): verified same-space members of that masjid, until it expires.
Channel posts: members of that channel (announcements: the whole masjid; social channels: one space).
Your account details: you, and the masjid administrators who approved your membership (name and status only).
Membership card: shows your name, masjid, and card number; its QR code reveals the card number only.

4. How we use information

To run the Service: sign you in, place you in the correct community space, deliver messages and notifications you have opted into, show presence to the members you have allowed, calculate distances on your device, keep the community safe through moderation and audit logs, and respond to your requests. We use it for no other purpose.

5. Service providers

We use a small number of providers to run the Service — cloud hosting and database, push notifications (Apple), email delivery for sign-in codes, and payment processing (Stripe, for donations to masaajid and only when you choose to give; Stripe receives the Apple Pay token, the amount and, unless you give anonymously, your name and receipt email) — each under contracts that limit them to providing the service to us. They are processors, not partners: none may use your data for their own purposes. We will list them by name at worshipaz.com/providers and keep that list current.

6. Retention and deletion

Check-ins are deleted at expiry. If you delete your account, your profile, memberships, check-ins, and messages you authored are deleted from production systems immediately and from backups within 30 days. Records a masjid must keep (for example, donation receipts required for tax purposes) are retained by the payment provider under its own policy. Audit-log entries about administrative actions are retained for the safety of members but are minimized to the action, the time, and the acting administrator. If a pilot ends without adoption, all pilot data is deleted.

7. Children

Worship A-Z is for adults 18 and older. We do not knowingly collect personal information from anyone under 18; if we learn that we have, we delete it. Parents and guardians who believe a minor has created an account can contact us at privacy@worshipaz.com.

8. Security

Data is encrypted in transit and at rest. The community-space partition and masjid membership rules are enforced in the backend (row-level security), not by the app on your phone. Access by our staff is limited, logged, and used only to operate the Service or act on a safety report.

9. Your rights and choices

Wherever you live, we honor these on request and in the app: access and export of your data; correction; deletion; and withdrawal of any opt-in (like location or notifications) at any time. Residents of states with privacy laws (including Virginia, Maryland, and the District of Columbia's applicable rules) and of the European Economic Area or United Kingdom may have additional rights; we will honor any verified request under them. Since we never sell or share data for advertising, there is nothing to opt out of on that front. Contact: privacy@worshipaz.com (interim: mbarrom@gmail.com).

10. Government and legal requests

We know our community's history with surveillance. We will require valid legal process for any request, narrow it where the law allows, notify affected members unless legally barred from doing so, and publish an annual transparency report counting the requests we receive — including a report of zero.

11. International use

The Service is operated from the United States. If you use it from elsewhere, your information is processed in the United States under this policy.

12. Changes

If we change this policy, we will say so in the app before the change takes effect, in plain language, and update the effective date above. No change will ever weaken the covenant at the top of this document; those five promises are permanent terms of the Service.

13. Contact

Barro Services LLC

Email: privacy@worshipaz.com (interim: mbarrom@gmail.com)

This document was prepared for review by a licensed attorney before public distribution. It is not legal advice.