Privacy Policy

1. Introduction

Welcome to Ijtima ("we", "us", "our"). Ijtima is a mobile application and website designed to be your complete companion for the annual gathering — providing schedules, programmes, live updates, and community features in one place.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Ijtima mobile application (available on the Google Play Store) and our website at ijtima.org(collectively, the "Service"). Please read this policy carefully. By using the Service, you agree to the collection and use of information in accordance with this policy.

If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.

2. Information We Collect

2.1 Information You Provide Directly

We may collect the following information when you voluntarily provide it:

• Account Information: Name, email address, and profile details when you create an account or register for events.
• Communication Data: Messages, feedback, and correspondence you send to us through the app or website.
• Event Preferences: Programme selections, schedule bookmarks, and notification preferences you set within the app.
• Donation Information: If you make donations through the Service, we collect payment-related details such as your name, email, billing address, and payment method information. Payment card details are processed securely by our third-party payment processor (Stripe) and are never stored on our servers.

2.2 Information Collected Automatically

When you use our Service, we may automatically collect certain information, including:

• Device Information: Device type, operating system version, unique device identifiers, and mobile network information.
• Usage Data: Pages viewed, features used, time spent on the app, crash reports, and performance data.
• Log Data: IP address, browser type, access times, and referring URLs when you visit our website.

2.3 Information from Third-Party Services

If you choose to link or sign in through a third-party service (such as Google Sign-In), we may receive your name, email address, and profile picture as permitted by that service's privacy settings.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Provide and maintain the Service: Deliver schedules, programmes, live updates, and community features.
• Personalise your experience: Customise content, programme recommendations, and notification preferences.
• Process transactions: Handle donations, generate receipts, and manage recurring payment plans.
• Send notifications: Deliver push notifications about schedule changes, programme updates, and event reminders (with your consent).
• Improve our Service: Analyse usage patterns, fix bugs, and develop new features.
• Communicate with you: Respond to your enquiries, provide support, and send administrative messages.
• Ensure security: Detect, prevent, and address fraud, abuse, and technical issues.
• Comply with legal obligations: Meet regulatory requirements including Gift Aid record-keeping where applicable.

4. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: We share data with trusted third-party service providers who assist us in operating the Service, including:
  • Stripe — for secure payment processing
  • Google Firebase / Analytics — for app analytics, crash reporting, and push notifications
  • Cloud hosting providers — for data storage and server infrastructure
• Legal Requirements: We may disclose your information if required to do so by law or in response to valid legal requests by public authorities.
• Protection of Rights: We may disclose information to protect our rights, privacy, safety, or property, or that of our users or the public.
• With Your Consent: We may share your information for any other purpose with your explicit consent.

5. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically:

• Account data is retained for as long as your account is active. You may request deletion at any time.
• Transaction records (including donation history) are retained for up to 7 years to comply with financial and tax regulations.
• Usage and analytics data is retained in aggregated, anonymised form and may be kept indefinitely for statistical purposes.
• Communication records are retained for up to 2 years after your last interaction.

6. Data Security

We implement appropriate technical and organisational security measures to protect your personal information, including:

• Encryption of data in transit using TLS/SSL protocols.
• Encryption of sensitive data at rest.
• Regular security assessments and vulnerability testing.
• Access controls and authentication for administrative systems.
• Secure payment processing through PCI DSS-compliant providers.

While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

7. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data, subject to legal retention requirements.
• Data Portability: Request your data in a structured, commonly used, and machine-readable format.
• Withdraw Consent: Withdraw consent for data processing where consent is the legal basis.
• Opt-Out of Notifications:Manage or disable push notifications through your device settings or the app's notification preferences.
• Account Deletion: Request complete deletion of your account and associated data by contacting us at the email below.

To exercise any of these rights, please contact us at privacy@ijtima.org.

8. Children's Privacy

Our Service is intended for a general audience and is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal data from a child under 13 without parental consent, we will take steps to delete that information promptly.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@ijtima.org so we can take appropriate action.

9. Google Play Store Data Safety

In accordance with Google Play's data safety requirements, we provide the following disclosures about data collection and handling in the Ijtima mobile app:

9.1 Data Collected

9.2 Data Handling Practices

• Data encrypted in transit: Yes — all data is transmitted over HTTPS/TLS.
• Data encrypted at rest: Yes — sensitive data is encrypted at rest on our servers.
• Data deletion: You can request deletion of your data by contacting us at privacy@ijtima.org. We will process deletion requests within 30 days.
• Data not sold: We do not sell your personal data to third parties.
• Independent security review: Our payment processing is handled by Stripe, which maintains PCI DSS Level 1 certification.

9.3 Permissions

The Ijtima app may request the following device permissions:

• Internet access: Required for loading schedules, live updates, and processing payments.
• Push notifications: Optional — used for schedule reminders and event updates. You can disable these at any time in your device settings.
• Storage access: Used for caching schedule data for offline viewing.

10. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your experience. For detailed information about the cookies we use and your choices, please refer to our Cookie Policy.

The types of cookies we use include:

• Essential cookies: Required for the website to function properly (e.g., session management, payment processing).
• Analytics cookies: Help us understand how visitors interact with our website.
• Preference cookies: Remember your settings and preferences.

11. Third-Party Links

Our Service may contain links to third-party websites, services, or applications that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. We encourage you to review the privacy policy of every site you visit.

12. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country. We take appropriate safeguards to ensure that your personal data remains protected in accordance with this Privacy Policy when transferred internationally.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top. For significant changes, we may also send you a notification through the app or via email.

You are advised to review this Privacy Policy periodically for any changes. Changes are effective when they are posted on this page.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: privacy@ijtima.org
• General enquiries: info@ijtima.org

We will respond to your request within 30 days of receiving it.