RAHYAAB — PRIVACY POLICY
Effective Date: 21 August 2026
Last Updated: 21 August 2026
This Privacy Policy explains how RAHYAAB ("RAHYAAB", "we", "us", or "our") collects, uses, stores, shares, protects, and deletes personal data when you use the RAHYAAB mobile application, website, and related services.
RAHYAAB is operated by:
Operator: RAHYAAB Foundation
Privacy and Support Email: contact@rahyaab.org
Website: https://rahyaab.org
This Privacy Policy applies to users, donors, Masjid representatives, and other individuals interacting with RAHYAAB.
1. OUR PRIVACY PRINCIPLES
RAHYAAB seeks to:
- collect only information reasonably required for legitimate purposes;
- explain why information is collected;
- protect sensitive information;
- limit unnecessary sharing;
- provide users appropriate control over their information;
- keep information only as long as reasonably required;
- and comply with applicable Indian data-protection requirements.
2. INFORMATION WE MAY COLLECT
The exact information collected depends on which RAHYAAB features you use.
A. Account Information
If you create an account, we may collect:
- full name;
- mobile number;
- email address;
- profile information;
- account identifier;
- authentication information or authentication-provider identifier.
We do not need to store your third-party account password when authentication is performed through an external identity provider.
B. Location Information
If you grant location permission, RAHYAAB may process:
- approximate location;
- precise device location;
- latitude and longitude;
- location required to identify nearby Masjids or events.
Location may be used for:
- finding nearby Masjids;
- calculating distance;
- location-based search;
- relevant prayer information;
- navigation;
- Qibla-related functionality;
- and other location-dependent services.
You can disable location access through Android device settings.
Some features may stop working correctly if location access is denied.
C. Search and App Activity
We may process information about how you use the service, such as:
- Masjid searches;
- search locations;
- bookmarked Masjids;
- selected filters;
- viewed Masjid pages;
- events viewed or saved;
- donation interactions;
- language preference;
- app settings;
- and feature interactions.
This helps provide requested functionality, remember preferences, prevent abuse, and improve the service.
D. Donation Information
If you make a donation, we may collect or generate:
- donor name;
- mobile number;
- email;
- address where required;
- donation amount;
- donation purpose;
- beneficiary Masjid;
- donation ID;
- receipt number;
- payment-provider order ID;
- transaction reference;
- payment status;
- refund status;
- settlement-related reference;
- date and time;
- and donation history.
If you choose an anonymous-donation option, RAHYAAB may hide your identity from appropriate public or beneficiary-facing displays where supported.
"Anonymous" does not necessarily mean that no personal information is processed internally.
Information may still need to be processed for:
- payment processing;
- security;
- anti-fraud purposes;
- legal compliance;
- accounting;
- tax requirements;
- dispute handling;
- or regulatory obligations.
E. PAN AND COMPLIANCE INFORMATION
For certain donations, receipts, beneficiary onboarding, or regulatory/compliance requirements, we may request:
- Permanent Account Number (PAN);
- legal name;
- address;
- identity information;
- tax information;
- or related documentation.
Such information is collected only where reasonably necessary for an applicable purpose.
Access to PAN and similar sensitive information should be restricted to authorized systems and personnel.
F. Payment Information
Payments may be processed through third-party payment providers such as Cashfree Payments or another approved payment provider.
RAHYAAB may receive payment-related information such as:
- provider payment ID;
- payment status;
- method category;
- transaction reference;
- refund reference;
- settlement status;
- and reconciliation information.
RAHYAAB does not intend to store sensitive payment-authentication information such as:
- complete card number;
- CVV;
- UPI PIN;
- online banking password;
- OTP entered on the payment-provider interface.
Those credentials are handled by the relevant payment/banking provider.
G. Masjid Representative Information
If you register, claim, verify, or manage a Masjid, we may collect:
- name of authorized representative;
- mobile number;
- email;
- designation;
- identity verification information;
- Masjid/trust/society information;
- registration documents;
- PAN;
- bank account information;
- IFSC;
- cancelled cheque or bank proof;
- tax registrations;
- authorization documentation;
- payment-provider vendor identifiers;
- and verification status.
Bank account information shown in normal administrative interfaces should be masked where full display is unnecessary.
H. User-Submitted Content
If you suggest or update a Masjid, we may receive:
- Masjid name;
- address;
- location;
- images;
- contact information;
- prayer/Jamaat timings;
- facilities;
- events;
- descriptions;
- corrections;
- and accompanying notes.
I. Device and Technical Information
RAHYAAB and its infrastructure providers may automatically process technical information such as:
- device type;
- operating-system version;
- app version;
- IP address;
- device or app identifiers where permitted;
- crash data;
- timestamps;
- network information;
- security events;
- and diagnostic information.
This information may be used for:
- service operation;
- troubleshooting;
- security;
- fraud prevention;
- performance;
- and reliability.
J. Notifications
If you enable push notifications, we may process:
- notification token;
- notification preferences;
- relevant account or Masjid subscriptions;
- and delivery information.
This may be used for:
- Masjid announcements;
- event updates;
- prayer-related alerts;
- donation confirmations;
- receipts;
- refund updates;
- account-security notices;
- and other selected notifications.
3. WHY WE USE PERSONAL DATA
Depending on the feature, we may process information to:
Provide RAHYAAB Services
Including:
- finding nearby Masjids;
- displaying relevant Masjid information;
- calculating distance;
- operating bookmarks;
- providing events;
- providing Qibla functionality;
- processing accounts;
- and remembering preferences.
Process Donations
Including:
- creating donation orders;
- sending transactions to the payment provider;
- identifying the selected Masjid;
- recording payment status;
- facilitating allocation and settlement;
- generating receipts;
- processing refunds;
- and reconciling transactions.
Verify Masjids
Including:
- reviewing Masjid information;
- verifying authorized representatives;
- validating financial onboarding;
- helping prevent fraudulent fundraising.
Security and Fraud Prevention
Including:
- authentication;
- abuse detection;
- payment-risk checks;
- webhook verification;
- duplicate-transaction prevention;
- audit logs;
- security investigations.
Communications
Including:
- transaction confirmations;
- receipts;
- account notices;
- security messages;
- responses to support requests;
- selected Masjid announcements;
- and optional notifications.
Legal and Compliance Requirements
Including:
- record-keeping;
- accounting;
- tax requirements;
- payment-provider requirements;
- responding to lawful requests;
- fraud investigation;
- and dispute resolution.
Improve RAHYAAB
Including:
- fixing errors;
- understanding feature usage;
- improving performance;
- and developing new features.
Where practical, aggregated or de-identified information should be used for analytics rather than directly identifying information.
4. LEGAL BASIS AND CONSENT
RAHYAAB processes personal data only for lawful purposes.
Depending on applicable law and circumstances, processing may occur based on:
- your consent;
- your request to provide a service;
- performance of a transaction initiated by you;
- compliance with legal obligations;
- legitimate uses recognized under applicable law;
- fraud/security requirements;
- or another lawful basis.
Where consent is required, you may withdraw that consent through available app controls or by contacting us.
Withdrawal does not automatically invalidate processing lawfully undertaken before withdrawal and may not require deletion of records that must lawfully be retained.
5. LOCATION PERMISSION
RAHYAAB will request Android location permission where needed for location-dependent features.
Where possible, users may alternatively search for a city, area, address, or Masjid manually.
We do not intend to continuously track your location in the background unless a specific feature clearly requires it, you are informed about it, and the necessary permission has been obtained.
If background location is not essential to RAHYAAB's implementation, it should not be requested.
6. CAMERA, PHOTOS AND FILES
If RAHYAAB allows users or Masjid administrators to upload photographs or documents, the app may request access to:
- camera;
- selected photographs;
- or selected files.
Access should be limited to the functionality requested by the user.
RAHYAAB should use modern Android photo/file selectors where practical instead of requesting broad storage access.
7. HOW PAYMENT DATA IS HANDLED
RAHYAAB may integrate with an authorized third-party payment provider.
The payment provider may independently process information necessary to:
- authorize payment;
- detect fraud;
- comply with KYC/payment rules;
- process refunds;
- allocate amounts;
- settle beneficiaries;
- and reconcile transactions.
Payment-provider processing is also governed by the provider's applicable privacy notices and terms.
RAHYAAB does not control information independently collected by your bank, UPI application, card issuer, payment network, or other financial institution.
8. INFORMATION WE MAY SHARE
We do not sell personal information to third parties.
We may share information where reasonably necessary with the following categories.
Payment Providers
For:
- payment processing;
- refunds;
- settlement;
- KYC;
- reconciliation;
- anti-fraud checks;
- and payment compliance.
Selected Masjid / Beneficiary
A beneficiary may receive donation information reasonably necessary for:
- acknowledging donations;
- maintaining donation records;
- issuing applicable receipts;
- accounting;
- and legal compliance.
Where an anonymous donation is supported, donor-facing identity information may be restricted from beneficiary display to the extent reasonably possible and legally permissible.
Cloud and Technology Providers
Service providers may process information for:
- hosting;
- databases;
- email;
- authentication;
- notifications;
- security;
- backups;
- analytics;
- crash reporting;
- maps;
- or infrastructure.
Professional Advisers
Information may be provided where necessary to:
- auditors;
- accountants;
- lawyers;
- compliance consultants;
- or other professional advisers
subject to appropriate confidentiality obligations.
Authorities
Information may be disclosed where reasonably necessary to comply with:
- law;
- court orders;
- lawful government requests;
- tax requirements;
- investigations;
- or protection against fraud or harm.
Corporate Reorganization
If RAHYAAB is lawfully transferred, merged, reorganized, or acquired, relevant information may form part of that transaction subject to applicable law.
9. PUBLIC INFORMATION
Information displayed on a public Masjid profile may be visible to anyone.
This may include:
- Masjid name;
- address;
- map location;
- public contact details;
- photographs;
- events;
- prayer timings;
- facilities;
- and publicly submitted descriptions.
Masjid administrators should not enter private personal information into public fields unless they intend it to be publicly visible.
10. DATA SECURITY
RAHYAAB will use reasonable technical and organizational measures appropriate to the nature of the information processed.
Measures may include:
- HTTPS/TLS encryption in transit;
- access controls;
- authentication;
- role-based authorization;
- restricted administrative access;
- database security;
- encryption or protected storage for sensitive information where appropriate;
- masking of bank details;
- webhook signature verification;
- audit logging;
- backups;
- security monitoring;
- dependency updates;
- and separation of development and production credentials.
No electronic system can guarantee absolute security.
Users should immediately notify us if they believe their RAHYAAB account has been compromised.
11. PAN AND FINANCIAL DATA SECURITY
PAN, bank-verification documentation, tax information, and similar information should be treated as restricted information.
RAHYAAB will seek to limit access to persons and systems that require such information for:
- compliance;
- payment processing;
- receipts;
- beneficiary onboarding;
- accounting;
- or authorized administrative purposes.
Full bank details should not ordinarily be displayed where masked information is sufficient.
12. DATA RETENTION
We retain personal data only for as long as reasonably necessary for the purpose for which it was collected or as otherwise required by law.
Retention periods may vary.
For example:
Account Information
Generally retained while your account remains active and for a reasonable period afterward where necessary.
Location
Real-time location used for nearby search does not need to be permanently retained unless required for a user-requested feature, security, or appropriately disclosed analytics.
Donation and Financial Records
Certain donation, receipt, payment, refund, reconciliation, settlement, tax, accounting, fraud-prevention, and audit records may need to be retained even after account deletion where required for legitimate legal, financial, security, or regulatory reasons.
Masjid Verification Information
May be retained while a Masjid remains active and for an appropriate period afterward for audit, compliance, dispute, and fraud-prevention purposes.
When information is no longer reasonably required, it will be deleted, anonymized, or otherwise securely disposed of as appropriate.
13. ACCOUNT DELETION
If you create a RAHYAAB account, you may request deletion.
In the app
Profile → Settings → Delete Account
Through the web
By email
When an account is deleted, personal data associated solely with the operation of that account will be deleted or anonymized where reasonably possible.
However, certain information may be retained where necessary for:
- payment and donation records;
- legal obligations;
- tax/accounting requirements;
- fraud prevention;
- security;
- pending disputes;
- chargebacks;
- refunds;
- enforcement;
- or establishment/exercise/defence of legal claims.
Any retained information will remain subject to appropriate safeguards and will not be retained merely to keep the deleted account active.
14. REQUESTING DELETION OF SPECIFIC DATA
Where technically and legally available, users may request correction or deletion of specific personal information without deleting the entire account.
Requests may be sent to:
We may need to verify your identity before processing a request.
15. CORRECTION OF INFORMATION
Users may update certain account information directly through RAHYAAB.
For information that cannot be edited directly, users may contact:
Masjid representatives may also request correction of verified Masjid records subject to verification controls.
16. WITHDRAWING CONSENT
Where processing is based on consent, you may withdraw consent through:
- app settings;
- Android permissions;
- notification settings;
- account controls;
- or contacting us.
Examples include:
- disabling location permission;
- disabling push notifications;
- removing optional profile information where supported;
- or requesting account deletion.
Certain functionality may become unavailable after consent is withdrawn.
17. YOUR DATA RIGHTS
Subject to applicable law, you may have rights relating to your personal data, including rights to:
- know what information is processed;
- access information about processing;
- correct inaccurate information;
- complete incomplete information;
- request deletion;
- withdraw consent where applicable;
- submit grievances;
- and exercise other rights provided by applicable law.
Requests can be submitted to:
We may verify your identity before acting on a request.
18. GRIEVANCE REDRESSAL
For privacy concerns or complaints, contact:
RAHYAAB Privacy / Grievance Contact
Designation: Privacy and Grievance Contact
Email: contact@rahyaab.org
Please include enough information to identify the issue without unnecessarily sending sensitive information.
19. CHILDREN
RAHYAAB is intended primarily for general users and is not designed to solicit personal or financial information from children.
Users below 18 should use account, donation, or other personal-data features only with appropriate parent or guardian involvement.
Where applicable law requires verifiable parental consent for processing a child's personal data, RAHYAAB will implement the necessary measures before enabling such processing.
If we learn that personal information relating to a child has been collected contrary to applicable requirements, we will take appropriate steps.
Parents or guardians may contact:
20. ANALYTICS
RAHYAAB may use privacy-conscious analytics or crash-reporting technologies to understand:
- app stability;
- errors;
- feature performance;
- broad usage patterns;
- and technical reliability.
Where third-party analytics SDKs are used, their actual data practices must be reflected accurately in this Privacy Policy and in RAHYAAB's Google Play Data Safety declaration.
RAHYAAB should not introduce an analytics or advertising SDK without reviewing its data-collection behaviour.
21. ADVERTISING
Current intended policy: RAHYAAB does not use personal data for behavioural advertising or sell personal data for advertising purposes.
If advertising functionality is introduced in the future, this Privacy Policy and applicable consent/disclosure mechanisms must be updated before such processing begins.
22. THIRD-PARTY LINKS
RAHYAAB may contain links to:
- Masjid websites;
- maps;
- payment-provider pages;
- event resources;
- social-media pages;
- or other external services.
This Privacy Policy does not govern independent third-party websites or applications.
Users should review the relevant third party's privacy policy.
23. INTERNATIONAL PROCESSING
Some technology providers used by RAHYAAB may process or store information using infrastructure located outside the user's state or country.
Where personal data is transferred or processed outside India, RAHYAAB will seek to do so in accordance with applicable Indian legal requirements and any restrictions issued by competent authorities.
24. DATA BREACHES AND SECURITY INCIDENTS
If a personal-data breach or significant security incident occurs, RAHYAAB will take reasonable steps to:
- investigate;
- contain the incident;
- reduce potential harm;
- preserve relevant evidence;
- correct vulnerabilities;
- notify applicable authorities where required;
- and notify affected users where required.
25. FRAUD PREVENTION
To protect donors, Masjids, payment providers, and RAHYAAB, certain information may be processed to:
- detect suspicious transactions;
- identify duplicate transactions;
- prevent account takeover;
- verify webhooks;
- investigate misuse;
- prevent fraudulent Masjid onboarding;
- and maintain audit trails.
Such information may be retained for a reasonable period where necessary for security or compliance.
26. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy because of:
- new features;
- new service providers;
- legal developments;
- security requirements;
- changes to payment infrastructure;
- or changes in data-processing practices.
The latest version will display the updated date.
Where required, material changes will be communicated through the app or another appropriate method.
27. GOOGLE PLAY DATA SAFETY
RAHYAAB will maintain a Google Play Data Safety declaration describing the information collected, shared, secured, and deleted by the application.
The Data Safety declaration should remain consistent with:
- this Privacy Policy;
- the actual Android application;
- backend behaviour;
- and all integrated third-party SDKs.
If RAHYAAB's data practices change, both this Privacy Policy and the applicable Play Console disclosures should be reviewed.
28. APP PERMISSIONS
Depending on enabled features, RAHYAAB may request Android permissions such as:
Location
For nearby Masjid search, navigation, and Qibla functionality.
Notifications
For Masjid announcements, events, prayer-related alerts, transaction updates, and security notices.
Camera
Only if required for user-initiated image or document capture.
Photos / Files
Only where necessary for user-selected uploads, receipts, or documents.
RAHYAAB should request only permissions that are reasonably necessary for enabled functionality.
29. DO NOT SEND SENSITIVE INFORMATION UNNECESSARILY
Users should avoid sending sensitive information through ordinary support messages unless specifically requested through an appropriate secure process.
Never send:
- UPI PINs;
- passwords;
- OTPs;
- complete card credentials;
- or similar authentication secrets
to RAHYAAB support.
RAHYAAB support will never need your UPI PIN or card CVV to resolve a donation issue.
30. CONTACT US
For questions about this Privacy Policy or your personal data:
RAHYAAB
Operated by: RAHYAAB Foundation
Privacy Email:
Support Email:
Website:
https://rahyaab.org
Account Deletion:
Grievance Contact:
Privacy and Grievance Contact — contact@rahyaab.org
RAHYAAB — Raah Dikhaaye, Manzil Mil Jaaye.