Privacy Policy

1 Introduction

Safa Ride ("we", "us", or "our") operates the Safa Ride mobile application and website. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Service. We are deeply committed to your privacy and handle your data with care and respect, consistent with the Islamic values of trust and responsibility upon which Safa Ride is founded.

2 Information We Collect

We collect the following categories of information:

Information you provide directly:

• Name and profile photo when you create an account.
• Email address used for authentication and notifications.
• Phone number (optional) for account verification and contact purposes.
• Home or pickup address (optional) to help coordinate rides.
• Messages and notes you send within the platform.

Information collected automatically:

• Device push notification tokens (FCM) when you enable notifications.
• Authentication tokens issued by Firebase (Google/Apple sign-in).
• Basic app usage logs for debugging and service improvement (no analytics SDKs are used).

3 How We Use Your Information

We use the information we collect to:

• Create and manage your account and authenticate your identity.
• Connect you with other community members for ride coordination.
• Send you push notifications and emails about ride requests, approvals, and community updates (you may opt out of these in your account settings).
• Allow mosque administrators to manage their community effectively.
• Respond to your support requests.
• Improve the reliability and features of the Service.

We do not sell your personal information to any third party. We do not use your data for advertising.

4 Privacy Controls & Your Choices

You are in control of your personal information. Within the app settings, you can:

• Phone number visibility: Keep your phone number private (default) or make it visible to other mosque members. Mosque admins and super admins will always be able to see it to help coordinate rides.
• Address visibility: Keep your address private (default) or make it visible to members of your mosque. Mosque admins and super admins retain access regardless of this setting.
• Email notifications: Enable or disable promotional and administrative email notifications.
• Push notifications: Enable or disable push notifications for ride and community updates.
• SMS notifications: Disabled by default; can be enabled if SMS service is available in your region.

5 Sharing Your Information

We share your information only in the following limited circumstances:

• Within your mosque community: Your name and profile photo are visible to verified members of your mosque. Phone and address are visible only if you enable those settings (or to admins as described above).
• Service providers: We use Firebase (Google) for authentication and push notifications, and Amazon Web Services (AWS) for email delivery via SMTP. These providers process data only as necessary to provide their services and under strict data protection agreements.
• Legal requirements: We may disclose information if required by law or in response to valid legal process.
• Safety: We may share information to protect the rights, property, or safety of Safa Ride, our users, or the public.

6 Data Retention & Account Deletion

We retain your personal information for as long as your account is active or as needed to provide you with the Service. If you decide to close your account, we offer a simple, self-service way to delete all your personal data permanently from our systems.

How to Delete Your Data: You can permanently delete your account and all associated personal data directly within the Safa Ride mobile application by navigating to Settings → Delete Account. When you confirm deletion, all core data (including your name, email, phone number, address, memberships, ride history, and direct messages) is immediately and permanently removed from our active databases. This action cannot be undone.

Alternatively, you may request deletion of your account and associated personal data at any time by emailing us at support@safaride.org. We will process emailed deletion requests within 30 days. Certain minimal transaction logs or records may be retained for a limited period only if required to comply with legal obligations or resolve disputes.

7 Data Security

We implement reasonable technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encrypted connections (HTTPS/TLS), hashed credentials, and access controls. However, no method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security.

8 Children's Privacy

Safa Ride is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately and we will delete it promptly.

9 Child Sexual Abuse and Exploitation (CSAE)

We have a zero-tolerance policy regarding child sexual abuse and exploitation (CSAE). CSAE refers to child sexual abuse and exploitation, including content or behavior that sexually exploits, abuses, or endangers children. This includes, for example, grooming a child for sexual exploitation, sextorting a child, trafficking of a child for sex, or otherwise sexually exploiting a child.

We are committed to maintaining a safe environment for our community. Any reports or indicators of CSAE will result in immediate termination of the offending user's account, a permanent ban from the Service, and reporting to the National Center for Missing & Exploited Children (NCMEC) and relevant law enforcement authorities.

If you encounter or suspect any CSAE activity on our platform, please contact us immediately at support@safaride.org.

10 Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing any information.

11 Your Rights

Depending on your location, you may have certain rights regarding your personal data, including:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data (subject to legal obligations).
• Portability: Request your data in a structured, machine-readable format.
• Opt-out: Opt out of certain data processing activities via your account settings.

To exercise any of these rights, please contact us at support@safaride.org.

12 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will update the "Effective Date" at the top of this page and, where appropriate, notify you via email or in-app notification. Your continued use of the Service after changes take effect constitutes your acceptance of the updated policy.