Privacy policy

1. Information we collect

We only collect what the features you actually use require. Depending on how you use UmrahMap, we may collect:

• Account information — name, email, gender, city and preferred language, provided when you create an account (with email/password or Google) and complete onboarding.
• Profile photo — if you sign in with Google, we use the photo already associated with your Google account; UmrahMap doesn't currently support uploading a custom profile photo.
• Content you create — your Umrah ritual progress, Pilgrim Journal entries (including any photos or documents you attach), your personal dua collection, your saved and visited places, your documents checklist, your trip budget details, and your Tasbih counts. This content is synced to your account so it's available across your devices.
• Location — with your permission, your device's approximate or precise location while you use features like prayer times, the Qibla compass, the interactive map, guided navigation, and nearby currency-exchange search. Location is used live for these features; only a general city name (not exact coordinates) may be saved to your profile if you choose "use my location" during onboarding.
• Phone number — only if you choose to enter the Umrah trip giveaway inside the app. We verify it via a one-time SMS code and store it to process and validate your entry, in line with the giveaway's official rules.
• Waitlist email — if you sign up for the waitlist on this website before the app is publicly available.
• Support communications — anything you send us directly, e.g. by emailing us.

2. Information we do NOT collect

We designed UmrahMap to collect as little as possible. We do not collect or process:

• Payment card details — donations are processed entirely on Stripe's own hosted checkout page; UmrahMap never sees or stores your card information.
• Advertising identifiers — UmrahMap shows no ads and contains no advertising SDKs.
• Precise health, biometric, or financial account data.
• Data via analytics or crash-reporting SDKs — we do not currently use Firebase Analytics, Crashlytics, or any similar tracking tool inside the app.

3. How we use your information

We use the information above to:

• Create and secure your account, and let you sign in across devices.
• Sync your ritual progress, journal, duas, saved places and other content so it follows you between devices.
• Power features that need your location, like prayer times, Qibla direction, the map, and nearby-place search.
• Process and verify entries to the Umrah trip giveaway, and contact the winner.
• Send you local, on-device notifications you've opted into (e.g. prayer time reminders) — these are scheduled entirely on your device and never involve sending a push token to our servers.
• Respond to support requests and, if you joined the waitlist, notify you about the app's launch.
• Maintain the security and proper functioning of the Service.

We do not use your information for advertising, and we do not sell it to anyone.

4. Third-party services

Some features rely on trusted third-party services to work. Here's exactly who we share data with and why:

• Firebase / Google Cloud (Authentication, Firestore, Storage) — hosts your account, your synced content, and any photos or documents you attach to your Journal or Documents checklist.
• Google Sign-In — if you choose to sign in with Google, Google shares your name, email and profile photo with us to create your account.
• Google Places & Google Maps — power place search, the interactive map, and nearby-place results; your search queries and approximate location are sent to Google to return results.
• Stripe — processes donations on its own hosted page; we never receive your card details, only confirmation that a donation was made.
• alquran.cloud and mp3quran.net — provide Quran text search and recitation audio streaming; no personal data is sent beyond your search query.
• Google Translate's text-to-speech endpoint — used to read duas aloud; only the dua text itself, not any personal data, is sent.
• exchangerate-api.com — provides live currency exchange rates based on the currency codes you select, with no personal data involved.

Each of these providers processes data under its own privacy policy and terms.

5. Data retention and your rights

You're in control of your information:

• You can sign out at any time, and clear locally cached data from Settings.
• To request deletion of your account and all associated data (profile, synced content, journal photos, and any giveaway entry), email us at support@umrahmap.com from the email address linked to your account. We'll confirm and complete deletion within a reasonable timeframe, except where we must retain limited information to comply with legal obligations or resolve disputes.
• Depending on where you live, you may have additional rights — such as accessing, correcting, or exporting your data — under laws like the GDPR or CCPA. Contact us to exercise these rights.

6. Push notifications

Prayer time and document reminders are scheduled locally on your device using your device's own notification system. UmrahMap does not register or store a push notification token on any server, so we cannot and do not send you remote push notifications.

7. Children's privacy

UmrahMap is intended for adult travelers preparing for Umrah and is not directed at children. We do not knowingly collect information from children under 13 (or the minimum age required in your country). If you believe a child has provided us with personal information, contact us and we'll delete it.

8. Data security

We rely on Firebase/Google Cloud's security infrastructure, including encryption in transit, and restrict access to your data to your own authenticated account through server-side security rules — no other user can read or write your profile, journal, or synced content. No method of transmission or storage is 100% secure, but we work to protect your information using industry-standard practices.

9. International data transfers

Your information is processed on Google Cloud/Firebase infrastructure, which may store and process data in countries other than your own. These providers maintain their own safeguards for international transfers.

10. Changes to this policy

We may update this policy as UmrahMap evolves — for example, when we add features that change what data we collect. We'll update the "last updated" date above and, for material changes, notify you inside the app.

11. Contact us

Questions about this policy or your data? Email us at support@umrahmap.com.