Worship A-Z Privacy Policy — Chinguetti Labs

Effective date: October 19, 2026 · Version 1.7

Worship A-Z is published and operated by AfriNetPro LLC ("AfriNetPro," "we," "us," or "our"), a Barro Services LLC company, which is responsible for the personal information described here. The app is built by Chinguetti Labs, the software studio of Barro Services LLC. This policy explains what the Worship A-Z apps for iPhone, iPad and Android, its administrator console, and related services (the "Service") collect, how it is used, and the promises we make. The plain-language covenant comes first; the formal sections that follow say the same things precisely.

Our covenant

We will never sell your data — not to advertisers, not to data brokers, not to anyone, not ever. There are no ads in Worship A-Z and no third-party advertising or tracking code inside the app.
Location is yours to give, and it disappears. The app works fully with location off. If you turn it on, the check at your masjid happens on your own phone. A check-in is one event, visible only to verified same-gender members of your own masjid, and it is deleted when it expires. Your own record of visits to your masjid (it counts your attendance) is visible only to you, is kept for 12 months and is then reduced to monthly totals. We keep no history of anywhere else you have been.
Brothers' and sisters' spaces are completely separate. Our servers never send one space's information to the other. Sisters' photos are optional and never leave the sisters' space.
Every profile field is optional. Your profile can be as thin as a first name. Each field has its own visibility control.
You can leave with everything. Export all your data, or delete your account and its data, at any time, in the app.

1. Information we collect

Account basics. Your email address (used for sign-in codes and security notices), a display name, and your declared community space (brothers or sisters), used only to place you in the correct space.

Optional profile fields you choose to add. Photo, profession or skill, region or heritage, languages, neighborhood (coarse, never an exact address), a short bio, and skills you volunteer. Leaving any or all of these blank never limits the app.

Masjid affiliation. Your chosen home masjid, masjids you follow, and your membership approval status set by that masjid's administrators.

Presence events (only if you opt in). The fact that you checked in at a specific masjid and when the check-in expires. Distance evaluation runs on your device; a manual check-in sends one coordinate for immediate validation and it is discarded. We never receive a stream of your coordinates.

Messages, posts, and community activity. What you write in channels and direct messages, community points, volunteer sign-ups, and reports you file, stored to deliver those features. Direct messages are same-space only.

Device sensors, on the device. The Qibla compass uses the compass, GPS, and motion sensors; the dhikr counter uses haptics and on-device speech synthesis; the Youth Studio's read-aloud uses your device's own voices; the accessibility options use VoiceOver. None of these readings are sent to our servers.

Donations. If a masjid enables donations, payments are processed by a payment provider. We receive confirmation and receipt data, never your full card number.

Technical minimum. A push-notification device token (if you allow notifications), app version, and crash reports without behavioral profiling. Crash and hang reports come from Apple's MetricKit on iPhone and iPad, and from Android's own record of how the app last closed on Android, at most once a day; they contain the app's own stack trace, device model and system version — never your messages, location or names — and you can switch them off under Help & support. When you write to Help & support we keep your message, the email you choose for the reply, and the app version. We use no third-party advertising or analytics SDKs.

Administrator console. Administrators and imams who use the web console are additionally identified by their approved role and the masjid they administer. Every administrative action is recorded in an audit log for the safety of members.

1a. The Android app

The Android app offers the same account and masjid community features as the iPhone and iPad app, and this whole policy applies to it in the same way. The differences are:

Push notifications are delivered through Google's Firebase Cloud Messaging instead of Apple's service. We send Google only the device token and the notification itself, and only if you allow notifications on your phone.
Purchases and subscriptions are made through Google Play instead of the App Store. Google processes the payment; we receive a confirmation of the purchase and never your payment details.
Speech recognition for the Recitation Companion uses your phone's own speech service (on the device where your phone supports it, otherwise Google's).
Crash reports come from Android's own record of how the app last closed, not from Apple's MetricKit.
Check-in at the masjid reads your location when you tap to check in. If you choose to turn on automatic check-in, which is off until you enable it, the app asks for location "all the time" so it can check you in and out of your home masjid and offer Prayer Mode when you arrive, even when the app is closed. Your location is checked only at your home masjid's boundary, used once for that check and then discarded. No route is stored, and it is never used for advertising. You can turn it off at any time in the app or in your phone's settings.
Android backup of the app's data is turned off, and private Studio screens are protected by your phone's screen lock or biometrics.
Google Play may provide us with aggregate install and crash statistics under Google's own terms. The app contains no analytics or advertising code.

1b. The Youth Studio

The Youth Studio lets children and teenagers learn on a parent's or guardian's device, without an account of their own. In it:

A parent or guardian can add up to seven learners. Each learner is a profile kept only on the device: a nickname of up to 24 characters, boy or girl (chosen by the parent, used only to choose the Studio's look and the figure that shows wuḍūʾ and ṣalāh), a chosen emblem, colour theme and figure skin tone, the track (Juniors or Teens), reading preferences, and learning progress (lessons finished, quiz results, medallions, quests, and a dated list of the learner's own accomplishments). We do not ask for a learner's age, date of birth, photo, email address or any contact detail.
Learner profiles, progress and the promises a parent writes in the Promise Chest are not sent to us, are not linked to any account, and are never shown to other users. There is no chat, no ranking and no comparing between children. They are included in the device's own backup (iCloud or a computer) if you use one, under Apple's terms, and are removed when the app is deleted or the parent deletes the learner.
Read-aloud uses the speech voices built into the device. Qur'an recitations are streamed from our storage provider, Supabase, which sees the device's IP address for that request only.
The helpline numbers shown are stored in the app. Calling or texting one is done by the device's phone or messaging app; we are not told that a call or text was made.
Signing up for a masjid's youth programme is done by the parent or guardian with their own account, behind a parent check, and is covered by the rest of this policy.
Settings, outside links, programme sign-up and the Promise Chest are behind a parent check.

2. What we never do

Sell, rent, or trade your personal information — to anyone, for any purpose.
Show advertising, or embed advertisers' or data brokers' code.
Store a history of your location or your presence at any masjid.
Reveal any member of one community space to the other, including in search, counts, or notifications.
Use your data to train advertising or profiling systems.

3. Who can see what

Profile fields you enable: verified same-space members of your masjid, or the narrower audience you pick per field.
Check-in ("at the masjid"): verified same-space members of that masjid, until it expires.
Channel posts: members of that channel (announcements: the whole masjid; social channels: one space).
Your account details: you, and the masjid administrators who approved your membership (name and status only).
Masjid Membership Card: shows your name, masjid, and member number; its QR code reveals the member number only.

4. How we use information

To run the Service: sign you in, place you in the correct community space, deliver messages and notifications you have opted into, show presence to the members you have allowed, calculate distances on your device, keep the community safe through moderation and audit logs, and respond to your requests. We use it for no other purpose.

5. Service providers

We use a small number of providers to run the Service, each under contracts that limit them to providing the service to us. They are processors, not partners: none may use your data for their own purposes. Our parent company, Barro Services LLC, builds and maintains the Service's software for us as Chinguetti Labs; it may access information only as that work requires, under the same limits. The providers are:

Supabase — cloud hosting, database, sign-in and file storage for the Service.
Apple — push notifications, on-device or Apple speech recognition for the Recitation Companion, crash reports (MetricKit), and App Store purchases and subscriptions, for the iPhone and iPad app.
Google — push notifications (Firebase Cloud Messaging), Google Play purchases and subscriptions, and, where your phone uses it, speech recognition for the Recitation Companion, for the Android app.
An email delivery provider — sends your one-time sign-in codes and security notices.
Stripe — processes donations to masaajid, only when you choose to give. You give on Stripe's secure checkout page in Safari, outside the app; Stripe receives your payment details directly, the amount and fund, and, unless you give anonymously, your name. We receive the confirmation, never your card number.
OpenAI — the AI provider for the features described in section 5a, and for automatic screening of community channel posts for abuse (section 5b).
Vercel — hosts the worshipaz.com website.

5a. AI features

Three features use a third-party AI provider, OpenAI: Ask Worship A-Z (Smart Help), the masjid concierge, and Khutbah Studio's first-draft generator (for imams). When you use one of them, the text you type — your question, or the khutbah topic and notes — together with the app language and, for the concierge, your masjid's published information, is sent from our servers to OpenAI to write the answer or draft. Your name, email address and location are not sent.

The app asks for your permission before it first sends anything to OpenAI, and you can withdraw it at any time in Deen → Your account → AI features; the features then ask again before use. We instruct OpenAI not to store these requests, and its API terms do not allow it to train its models on them; OpenAI may keep them for up to 30 days to detect abuse, then deletes them. AI answers can be wrong and are never religious rulings. Please do not include private details about yourself or others in these features.

Masjid administrators can also use AI tools in the web console (for example, reading an event flyer, translating an announcement, or transcribing a khutbah recording they upload). Those tools send only the material the administrator chooses, under the same terms.

5b. Message screening

To keep communities safe, posts in community channels are screened automatically for abuse, threats and explicit content by OpenAI's moderation service soon after they are posted. Only the text of the post is sent, without your name or email address, and it is not used to train models. A post that looks like it contains another member's private details is never sent; a person reviews it instead. Direct messages are not sent for screening. A post the screen is very confident about is held until your masjid's moderators review it; other flagged posts stay visible and are added to the moderators' report queue.

6. Retention and deletion

Check-ins are deleted at expiry. Your record of visits to your masjid is kept for 12 months and then reduced to monthly totals; masjid directory searches are kept for 90 days. If you delete your account, your access ends immediately, and our deletion process then removes your profile, memberships, check-ins and visit records from production systems, normally within minutes, and from backups within 30 days. Messages you authored are replaced by “[deleted]” with your name removed, so the conversations of others stay readable. Records a masjid must keep (for example, donations, needed for its accounts and tax receipts) and referral commission records are kept without your name or email address; the payment provider also keeps payment records under its own policy. Audit-log entries about administrative actions are retained for the safety of members but are minimized to the action, the time, and the acting administrator. If a pilot ends without adoption, all pilot data is deleted.

7. Children

Accounts are for adults 18 and older. Children and teenagers may use the Youth Studio on a parent's or guardian's device, without an account, as described in section 1b; we collect no personal information from them there. We do not knowingly collect personal information from anyone under 18; if we learn that we have, we delete it. Parents and guardians who believe a minor has created an account can contact us at privacy@worshipaz.com.

8. Security

Data is encrypted in transit and at rest. The community-space partition and masjid membership rules are enforced in the backend (row-level security), not by the app on your phone. Access by our staff is limited, logged, and used only to operate the Service or act on a safety report.

9. Your rights and choices

Wherever you live, we honor these on request and in the app: access and export of your data; correction; deletion; and withdrawal of any opt-in (like location or notifications) at any time. Residents of states with privacy laws (including Virginia, Maryland, and the District of Columbia's applicable rules) and of the European Economic Area or United Kingdom may have additional rights; we will honor any verified request under them. Since we never sell or share data for advertising, there is nothing to opt out of on that front. Contact: privacy@worshipaz.com (interim: mbarrom@gmail.com).

10. Government and legal requests

We know our community's history with surveillance. We will require valid legal process for any request, narrow it where the law allows, notify affected members unless legally barred from doing so, and publish an annual transparency report counting the requests we receive — including a report of zero.

11. International use

The Service is operated from the United States. If you use it from elsewhere, your information is processed in the United States under this policy.

12. Changes

If we change this policy, we will say so in the app before the change takes effect, in plain language, and update the effective date above. No change will ever weaken the covenant at the top of this document; those five promises are permanent terms of the Service.

13. Contact

AfriNetPro LLC, a Barro Services LLC company

Email: privacy@worshipaz.com (interim: mbarrom@gmail.com)

This document was prepared for review by a licensed attorney before public distribution. It is not legal advice.