Privacy Policy

Last updated: 12 July 2026

Draft — pending review. This document is a working draft prepared for the Barakah Ummah Fund and has not yet been reviewed by legal counsel or ratified by the Shura Board. It is not final and should not be relied upon as legal advice.

This policy explains what personal data the Barakah Ummah Fund collects, why, and your choices. Our guiding rule: we collect the least we need to run the Fund honestly, and your identity never appears on the public transparency dashboard.

1. What we collect

Account data — your phone number, and (if you use Google sign-in) your name and email address from your Google account.
Giving data — the gifts you set up (amount, kind, fund or mosque, status, date) and the reference IDs our payment partner returns. We do not store your mobile-money PIN, card numbers, or bank credentials.
Mosque data — the mosques you follow, your home mosque, and any mosque you register.
Device data — a push-notification token if you enable notifications, and basic technical data (such as IP address) needed to serve and secure the site.

2. Google Sign-In

If you choose "Continue with Google", Google shares your basic profile — your name, email address, and a stable account identifier — so we can create or find your account. We use this only to sign you in and identify you. We do not receive your Google password, and we request no access to your Gmail, contacts, or other Google data.

3. How we use your data

To sign you in and maintain your account.
To set up and track your gifts, and send you receipts.
To connect you to the mosques you follow.
To send notifications you have opted into (donation receipts are essential and always sent).
To keep the Fund secure, prevent fraud, and meet our governance and legal duties.

4. What we never do

We never sell your data. We never publish your identity, your phone number, or the size or timing of your individual gifts. The public transparency dashboard shows only aggregated totals and anonymised activity (for example, "a donor in Bo gave toward the Makeni well") — never anything that identifies you.

5. Payments

Payments are processed by our payment partner (Monime). When you give, your payment details go to them, not to us; we receive only confirmation and reference data. Their handling of your payment information is governed by their own privacy policy.

6. When we share data

We share personal data only with:

Our payment provider, to process and reconcile your gifts.
Our sign-in and notification providers (Google, and a push provider), to deliver those features.
Authorities, where we are legally required to, or to investigate fraud or protect the Fund.

We never share your data for advertising.

7. Cookies and local storage

We use a small number of strictly-necessary cookies to keep you signed in (secure, http-only session cookies) and to remember preferences such as your colour theme. Collection agents' devices also keep a local queue of logged cash so it can sync when back online. We do not use advertising or tracking cookies.

8. Data retention

We keep giving and receipt records for as long as required for financial, governance, and legal accountability — this is core to a transparent fund. Account data is kept while your account is active. You can ask us to close your account; we will remove personal data that we are not required to retain for those accountability reasons.

9. Your rights and choices

Access the data we hold about you, or ask us to correct it.
Cancel a recurring gift at any time from your giving history.
Manage notification preferences (except essential donation receipts).
Ask us to close your account and delete data we are not obliged to keep.

To exercise any of these, email privacy@barakahummah.org.

10. Security

Access tokens are held in secure, http-only cookies and never exposed to the browser's scripts. We use encrypted connections (HTTPS) and limit who can see personal data. No system is perfectly secure, but we take reasonable measures to protect your information.

11. International transfers

The Fund serves donors in Sierra Leone and the wider diaspora. Some of our providers process data outside your country. Where that happens, we rely on the provider's safeguards for such transfers.

12. Children

The Fund is intended for adults able to give lawfully. We do not knowingly collect data from children; if you believe a child has given us data, contact us and we will remove it.

13. Changes to this policy

We may update this policy; material changes will be posted here with a new "last updated" date.

14. Contact

Questions about your privacy? Email privacy@barakahummah.org.