Privacy Policy

What we collect

When you create an account we store your email address. When you place an order we store your order details, the shipping address, and a phone number you provide at checkout. The phone number is used only as a delivery contact for the shipping carrier, we do not use it for marketing or send you text messages. If you contact us, we keep the message and the email you send it from. We never see or store your full payment card details. Those are handled directly by our payment processor.

The app and your sign

To show prayer times, the app needs your location. When you set your city, we store that city and its coordinates, your timezone, and your calculation preferences, along with which prayers you have marked as complete each day. This is tied to your app account, which can be anonymous or, if you choose, linked to an email so you can restore it. Your sign is paired to this account and receives only its display status. We send your location to Google to turn a place into accurate prayer times. You can change or clear your location any time in the app, and deleting your account removes your settings and prayer history.

Your app account is identified by an id the app generates on your device, and your sign carries a serial number. We use these to attach your settings and prayer history to the right account and to send the right status to the right sign. The app contains no advertising or tracking software and does not use an advertising identifier.

Bluetooth and Wi-Fi setup

Setting up a sign uses Bluetooth. The app sends your Wi-Fi network name and password straight to the sign over that Bluetooth connection so it can get online. Those credentials never reach our servers, and we never store them. On Android the setup screen can list the Wi-Fi networks around you so you can pick one instead of typing it. That list is read on your phone and stays on your phone.

Android requires location and nearby-device permissions before an app is allowed to scan for Bluetooth or Wi-Fi devices, which is why the app asks for them during setup. We do not use those scans to work out where you are, and the results are not sent to us.

Crash reports and diagnostics

When the app hits an error it sends a crash report to Sentry so we can find and fix the bug. A report contains the error and where it happened in our code, along with your device model, operating system version, and app version. We have turned off the settings that would attach your IP address or account details, so crash reports are not linked back to you. If you write to us from the help screen, your message reaches us with the app version and platform attached so we can reproduce the problem, plus your email address if you give us one to reply to.

There is no analytics or usage-tracking software in the app. The product analytics listed below run on this website only.

Sensitive data

Your prayer records reflect your religious practice, so we treat them as sensitive. We use them only to show your status in the app and on your sign. We never sell or share this data, and we never use it for advertising. You can remove it at any time by clearing your history or deleting your account.

How we use it

We use your data to create and secure your account, process and ship your orders, send transactional email (verification codes, password resets, and order confirmations), and respond to support requests. We do not sell your personal data, and we do not use it for third-party advertising.

Who processes it

We rely on a small number of service providers to run the store:

• Stripe: payment processing and the checkout/shipping-address form.
• Amazon Web Services: hosting, account sign-in (Amazon Cognito), and data storage, in the United States.
• Amazon SES: delivery of transactional email.
• EasyPost and the shipping carrier: shipping labels and delivery tracking, which receive the recipient name, address, and phone number your order ships to.
• PostHog: privacy-friendly product analytics on this website only, so we can see how the store is used and improve it. First-party only, no advertising or cross-site tracking, in the United States.
• Google: place search and time zone lookups that turn your location into accurate prayer times. Your search text and coordinates are sent from our servers, not from the app, so your app account is not passed along.
• Sentry: app crash reports and diagnostics, so we can find and fix bugs.

Where your data is processed

Mudawem is a United States service. We process and store your data in the United States, including with the service providers listed above.

How we protect it

We use reasonable technical and organizational measures to protect your data, including encryption in transit, access controls, and established hosting and storage providers. Payment details go straight to Stripe over an encrypted connection and are never stored on our servers. No method of transmission or storage is completely secure, but we work to keep your data safe.

Cookies & local storage

We keep your cart and your sign-in session in your browser's local storage, and our product analytics (PostHog) stores an anonymous id there as well. We do not use cookies for any of this, and we do not use advertising or cross-site tracking cookies. Payment and fraud-prevention cookies are set by Stripe only on the checkout page, and are required to take a payment.

Your rights

You can access your order history from your account at any time. You can delete your store account and personal data yourself from the Account page (“Delete account”). When you do, we remove your login, your customer record, and your payment-processor profile, and we strip personal details from past orders. Order records themselves may be retained in anonymized form to meet accounting and tax obligations.

Your app account is separate from your store account, and it has its own delete. Open the app, go to Settings, and choose “Delete account”. That erases your settings, your prayer history, and your email address from our servers, and returns any paired sign to its unpaired state. If you no longer have the app installed, email us and we will do it for you. We keep your app account, settings, and prayer history until it is deleted. You can also email us to exercise any data right. Step-by-step instructions for both accounts are on the delete your account page.

Depending on your state, you may have further rights, such as to access, correct, or delete your data, or to receive a copy of it, and in California to limit the use of sensitive information. In all cases, we do not sell or share your personal information and do not use it for targeted advertising. Email us to exercise any of these and we will respond within the time the law allows.

Changes to this policy

We may update this policy from time to time. When we do, we will post the new version here and update the effective date above. If the changes are significant, we will make a reasonable effort to let you know.

Children

Neither the store nor the app is directed to children, and we do not knowingly collect data from anyone under 13.

Contact

Questions about this policy or your data? Email support@mudawem.com.