← Home/Privacy Policy

Masjid Fikra Privacy Policy

Last updated: November 12, 2026

This Privacy Policy describes how Fikra LLC ("Fikra", "we", "us") collects, uses, and shares personal information in connection with the Masjid Fikra platform and giving pages (the "Services"). Each masjid using our platform ("Masjid") is an independent organization and is the primary custodian of data about its own donors, members, and staff. Fikra LLC processes that data on the Masjid's behalf.

1. What We Collect

From Masjid staff and administrators

Identity information from our authentication provider (Clerk): email, name, organization membership.
Role and permission assignments within a Masjid.
Technical logs: IP address, user-agent, device metadata, request timestamps.
If you sign our service agreement for a Masjid: your name, your title, your email, your IP address, your browser, and when you signed. We keep these as the record of the agreement, for as long as the Masjid has an account and as long afterwards as we need to show what was agreed.

From donors (on giving pages)

Name.
Email address (optional, used for receipts).
Donation amount and designated fund.
Payment method metadata returned by Stripe (e.g., last four digits of card, brand). We never see, store, or transmit full card numbers or bank account numbers; those are handled by Stripe.

From members and member applicants

Name, contact information, mailing address.
Date of birth.
Shahada date (if applicable, self-reported).
Photo identification (for membership verification).
Family members listed on a household application (optional).
Answers to forms the Masjid publishes (sign-ups, registrations, volunteer documents and consents).

From Masjid board meetings

If a Masjid records a board (Shura) meeting, the audio recording, a written transcript, and a summary of it. Recordings and transcripts are visible only to the people the Masjid allows.
When staff ask the assistant to draft the minutes of a meeting, its transcript is sent to Anthropic so it can write the draft. Anthropic processes it in the United States and does not use it to train its models.

From the assistant

What a staff member types or says to the Masjid Fikra assistant, and its answers. These are kept with the Masjid's account so the conversation can be continued.
When staff use the assistant, what they type to it is sent to Anthropic, the company whose service answers the assistant, so it can answer. Anthropic processes it in the United States and does not use it to train its models. The assistant does not read members' or donors' names, contact details or giving; when a question needs them, it tells staff where to find them in Masjid Fikra.

From our mobile apps

Masjid Fikra offers three apps: Masjid Fikra (for members and donors), Fikra Staff (for Masjid staff), and Masjid Fikra Kiosk (a donation kiosk). They collect only what is listed above, plus:

Camera — only when you choose to use it: to scan a pairing or check-in QR code, or to photograph a receipt or a flyer. Photos are uploaded only when you save them.
Photo library — only the photo you pick, when you pick it.
Push notification token — a device address issued by Apple or Google, so we can tell you when something is waiting for you. You can turn notifications off in your phone's settings.
Kiosk card readers — the kiosk uses Bluetooth, location, and the local network only because Stripe's card-reader software requires them to find and use a reader. Card details go straight to Stripe.

The apps contain no advertising and no tracking, and they do not read your contacts or your location for any other purpose.

From Masjids (organizational data)

Legal name, doing-business-as name, mailing address.
EIN (Employer Identification Number).
IRS 501(c)(3) determination letter (if applicable).
Bank routing details — collected by Stripe during Connect onboarding; Fikra LLC does not store these.
Bank transactions — only if a Masjid connects its bank account to its books (through Plaid) or uploads a bank statement: the transactions on that account, so the Masjid can match them to its records.

2. Why We Collect It

Operate and deliver the Services to Masjids and their donors.
Generate donation receipts and support donor and Masjid tax compliance.
Authenticate users and enforce access controls.
Prevent fraud, abuse, and security incidents.
Respond to support requests.
Comply with applicable law.

3. Legal Bases

Even where not strictly required by US law, we use these bases as a framework:

Contract — processing necessary to deliver the Services the Masjid subscribed to.
Legitimate interest — security, fraud prevention, product improvement, aggregate analytics.
Consent — where applicable, e.g., optional email fields on a donor form.
Legal obligation — retaining donation records to support tax substantiation.

We share personal information only with the service providers required to operate the Services:

Stripe, Inc. — Payment processing and Connect onboarding for each Masjid.
Clerk — Authentication, session management, and identity.
Resend — Transactional email (receipts, password resets, notifications).
Amazon Web Services — Application and database hosting, and storage for documents (e.g., uploaded IRS letters, member photo IDs), in the United States.
Anthropic — The service that answers the Masjid Fikra assistant (staff use only). Receives what staff type to the assistant, and a meeting's transcript when staff ask it to draft the minutes, and processes them in the United States.
Cloudflare — Website delivery, bot protection on public forms, and transcription of meeting recordings.
Expo — Delivery of push notifications to our mobile apps (through Apple and Google).
Sentry — Error reports, so we can find and fix crashes. We do not send donor payment details.
Plaid — Connecting a Masjid's bank account to its books, only if the Masjid chooses to. The Masjid's staff sign in to their bank in Plaid's own window; Plaid sends us the account's transactions, never the bank password.

Each provider is bound by its own privacy and security commitments.

Earlier hosting. Until October 2026 the Services were hosted on Railway. We moved everything to Amazon Web Services, and we are deleting the data held at Railway, including its backups.

We never sell personal data. We never share personal data with advertisers. We never use donor or member information for ad targeting.

We may disclose information when the law requires it. Section 5 says how.

5. Requests from Government and Law Enforcement

We give personal information to a government agency or the police only when we receive valid legal process, such as a subpoena, court order, or warrant. We push back on requests that ask for too much. We tell the affected Masjid before we disclose anything, unless the law forbids it. We disclose only the minimum the request requires. In a real emergency, where someone's life or safety is at immediate risk, we may disclose the minimum needed to prevent harm without waiting for legal process. We keep a log of every request and publish a yearly count.

6. Where Data Is Stored

Primary application data, including uploaded documents, is stored in the United States on Amazon Web Services (the US East region). Stripe may process and store payment data globally per Stripe's own policies. Clerk, Resend, Anthropic, Cloudflare, Expo and Sentry may operate infrastructure in the US and other regions per their policies.

7. How Long We Keep It

Active data — while the Masjid's subscription is active and the user account is in use.
When a Masjid closes its account — the owner closes the account in Settings. For 30 days the Masjid keeps working and the owner can change their mind. After those 30 days, we delete the Masjid's data, including uploaded files, within a further 30 days.
Records of money — gifts, donation receipts, and payments may be kept for up to 7 years, because tax law can require them. This applies even after a Masjid closes its account.
If you delete your own app account — your sign-in is deleted within 30 days. Your Masjid keeps its record of your gifts and membership; to be removed from those, ask your Masjid.
Security logs — typically up to 12 months.

8. Your Rights

Depending on where you live, you may have the right to:

access the personal data we hold about you;
request correction of inaccurate data;
request deletion (subject to legal retention obligations);
request a portable export of your data;
object to or restrict certain processing.

To exercise these rights, email contact@masjidfikra.com. If your data is held on behalf of a specific Masjid, we may direct your request to that Masjid as the data controller.

9. Security

TLS encryption in transit.
Encryption at rest for database and object storage.
Postgres row-level security (RLS) enforces tenant isolation between Masjids.
Least-privilege database roles — application runtime does not run as a superuser.
Secret scanning and branch protection on source repositories.
Zero-trust posture is a stated day-one commitment.

We are working toward formal attestations (e.g., SOC 2) but do not currently hold any such certification.

No online system can be guaranteed secure; we will notify affected users and Masjids promptly in the event of a breach of personal data as required by law.

10. Children

The Services are not directed at children under 13. We do not knowingly collect personal information directly from children. If a membership application lists a minor family member, that information is submitted by a consenting adult applicant on the child's behalf and is handled under the adult applicant's consent. If you believe we have collected information from a child contrary to this policy, contact us and we will delete it.

11. International Users

The Services are operated from the United States and are intended for use by US masjids. If you access the Services from outside the US, you consent to the transfer and processing of your information in the United States.

12. Cookies

We use Clerk session cookies strictly to keep you signed in and secure, and Cloudflare's bot check on some public forms. We do not use advertising cookies, cross-site tracking cookies, or third-party analytics that profile individuals.

Do Not Track. Because we do not track you across other websites, we treat every visitor the same whether or not their browser sends a "Do Not Track" signal.

13. California Residents (CCPA)

California residents have rights under the California Consumer Privacy Act, including the right to know, the right to delete, the right to correct, and the right to non-discrimination for exercising their rights. We do not sell or share personal information as those terms are defined under the CCPA. Californian users may exercise their rights using the contact details below.

14. Changes and Contact

We may update this Privacy Policy from time to time. For material changes we will provide at least 30 days' notice on our site and, where reasonably practical, by email.

Questions: contact@masjidfikra.com.