Masjid Fikra Privacy Policy

Last updated: May 1, 2026

This Privacy Policy describes how Fikra LLC ("Fikra", "we", "us") collects, uses, and shares personal information in connection with the Masjid Fikra platform and giving pages (the "Services"). Each masjid using our platform ("Masjid") is an independent organization and is the primary custodian of data about its own donors, members, and staff. Fikra LLC processes that data on the Masjid's behalf.

1. What We Collect

From Masjid staff and administrators

• Identity information from our authentication provider (Clerk): email, name, organization membership.
• Role and permission assignments within a Masjid.
• Technical logs: IP address, user-agent, device metadata, request timestamps.

From donors (on giving pages)

• Name.
• Email address (optional, used for receipts).
• Donation amount and designated fund.
• Payment method metadata returned by Stripe (e.g., last four digits of card, brand). We never see, store, or transmit full card numbers or bank account numbers; those are handled by Stripe.

From members and member applicants

• Name, contact information, mailing address.
• Date of birth.
• Shahada date (if applicable, self-reported).
• Photo identification (for membership verification).
• Family members listed on a household application (optional).
• Answers to forms the Masjid publishes (sign-ups, registrations, volunteer documents and consents).

From Masjid board meetings

• If a Masjid records a board (Shura) meeting, the audio recording, a written transcript, and a summary of it. Recordings and transcripts are visible only to the people the Masjid allows.

From the assistant

• What a staff member types or says to the Masjid Fikra assistant, and its answers. These are kept with the Masjid's account so the conversation can be continued.

From our mobile apps

Masjid Fikra offers three apps: Masjid Fikra (for members and donors), Fikra Staff (for Masjid staff), and Masjid Fikra Kiosk (a donation kiosk). They collect only what is listed above, plus:

• Camera — only when you choose to use it: to scan a pairing or check-in QR code, or to photograph a receipt or a flyer. Photos are uploaded only when you save them.
• Photo library — only the photo you pick, when you pick it.
• Push notification token — a device address issued by Apple or Google, so we can tell you when something is waiting for you. You can turn notifications off in your phone's settings.
• Kiosk card readers — the kiosk uses Bluetooth, location, and the local network only because Stripe's card-reader software requires them to find and use a reader. Card details go straight to Stripe.

The apps contain no advertising and no tracking, and they do not read your contacts or your location for any other purpose.

From Masjids (organizational data)

• Legal name, doing-business-as name, mailing address.
• EIN (Employer Identification Number).
• IRS 501(c)(3) determination letter (if applicable).
• Bank routing details — collected by Stripe during Connect onboarding; Fikra LLC does not store these.

2. Why We Collect It

• Operate and deliver the Services to Masjids and their donors.
• Generate donation receipts and support donor and Masjid tax compliance.
• Authenticate users and enforce access controls.
• Prevent fraud, abuse, and security incidents.
• Respond to support requests.
• Comply with applicable law.

3. Legal Bases

Even where not strictly required by US law, we use these bases as a framework:

• Contract — processing necessary to deliver the Services the Masjid subscribed to.
• Legitimate interest — security, fraud prevention, product improvement, aggregate analytics.
• Consent — where applicable, e.g., optional email fields on a donor form.
• Legal obligation — retaining donation records to support tax substantiation.

4. Who We Share With

We share personal information only with the service providers required to operate the Services:

| Provider | Purpose | | ---------------- | ------------------------------------------------------------------------------------------ | | Stripe, Inc. | Payment processing and Connect onboarding for each Masjid. | | Clerk | Authentication, session management, and identity. | | Resend | Transactional email (receipts, password resets, notifications). | | Tigris | S3-compatible object storage for documents (e.g., uploaded IRS letters, member photo IDs). | | Railway | Application and database hosting. | | Anthropic | The AI model behind the Masjid Fikra assistant (staff use only). | | Cloudflare | Website delivery, bot protection on public forms, and transcription of meeting recordings. | | Square | Payment processing, only for a Masjid that chooses Square instead of Stripe. | | Expo | Delivery of push notifications to our mobile apps (through Apple and Google). | | Sentry | Error reports, so we can find and fix crashes. We do not send donor payment details. |

Each provider is bound by its own privacy and security commitments.

We never sell personal data. We never share personal data with advertisers. We never use donor or member information for ad targeting.

We may disclose information if required by law, valid legal process, or to protect the rights, safety, or property of Fikra LLC, our users, or the public.

5. Where Data Is Stored

Primary application data is stored in the United States (Railway, Tigris). Stripe may process and store payment data globally per Stripe's own policies. Clerk, Resend, Anthropic, Cloudflare, Expo and Sentry may operate infrastructure in the US and other regions per their policies.

6. How Long We Keep It

• Active data — while the Masjid's subscription is active and the user account is in use.
• After termination — up to 60 days of soft-deletion for operational recovery, then hard-deletion, except where law requires longer retention.
• Donation receipts and supporting records — retained for up to 7 years to support IRS-recognized donor substantiation and the Masjid's own records.
• Security logs — typically up to 12 months.

7. Your Rights

Depending on where you live, you may have the right to:

• access the personal data we hold about you;
• request correction of inaccurate data;
• request deletion (subject to legal retention obligations);
• request a portable export of your data;
• object to or restrict certain processing.

To exercise these rights, email [email protected]. If your data is held on behalf of a specific Masjid, we may direct your request to that Masjid as the data controller.

8. Security

• TLS encryption in transit.
• Encryption at rest for database and object storage.
• Postgres row-level security (RLS) enforces tenant isolation between Masjids.
• Least-privilege database roles — application runtime does not run as a superuser.
• Secret scanning and branch protection on source repositories.
• Zero-trust posture is a stated day-one commitment.

We are working toward formal attestations (e.g., SOC 2) but do not currently hold any such certification.

No online system can be guaranteed secure; we will notify affected users and Masjids promptly in the event of a breach of personal data as required by law.

9. Children

The Services are not directed at children under 13. We do not knowingly collect personal information directly from children. If a membership application lists a minor family member, that information is submitted by a consenting adult applicant on the child's behalf and is handled under the adult applicant's consent. If you believe we have collected information from a child contrary to this policy, contact us and we will delete it.

10. International Users

The Services are operated from the United States and are intended for use by US masjids. If you access the Services from outside the US, you consent to the transfer and processing of your information in the United States.

11. Cookies

We use Clerk session cookies strictly to keep you signed in and secure, and Cloudflare's bot check on some public forms. We do not use advertising cookies, cross-site tracking cookies, or third-party analytics that profile individuals.

12. California Residents (CCPA)

California residents have rights under the California Consumer Privacy Act, including the right to know, the right to delete, the right to correct, and the right to non-discrimination for exercising their rights. We do not sell or share personal information as those terms are defined under the CCPA. Californian users may exercise their rights using the contact details below.

13. Changes and Contact

We may update this Privacy Policy from time to time. For material changes we will provide at least 30 days' notice on our site and, where reasonably practical, by email.

Questions: [email protected].