Introduction

Ja'fari Shia ("we", "us", or "our") operates the Ja'fari Shia platform at https://jafarishia.com and related services (the "Service"). We built this Service for the global Ja'fari Shia Muslim community — prayer times, Quran, duas, calendar, mosque finder, qibla, and related devotional tools.

This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have. By using the Service, you agree to this policy. If you do not agree, please do not use the Service.

Who is responsible for your data

Ja'fari Shia is the data controller for personal information processed through the Service, except where a third-party provider processes data under its own terms (see Third-party services below).

For privacy questions or requests, contact us at support@jafarishia.com.

Information we collect

We collect only what is needed to run the Service. The categories below depend on which features you use.

• Preferences and settings — theme, language, font size, prayer display options, Hijri moon-sighting offset, and similar choices stored in your browser (localStorage).
• Location — latitude, longitude, location label, and timezone when you allow geolocation or enter a location manually. Used for prayer times, qibla, mosque search, and calendar display. Location for mosque search is sent to our servers only as coordinates for that request; we do not sell location data.
• Device sensors — compass and device orientation on the qibla page, only after you grant browser permission. Processed on your device; not stored on our servers.
• Reading activity — bookmarks, reading progress, and reader display preferences stored locally. If you sign in, this data may sync to your account on our database (Neon Postgres).
• Notes and tasbeeh — content you create stays primarily on your device unless you use account sync where applicable.
• Account information — if you register: email address and credentials (stored hashed). Optional profile fields you provide.
• Technical data — standard web logs on our host (Vercel) may include IP address, browser type, pages visited, and timestamps for security and reliability. We do not use third-party advertising trackers.
• Admin and content operations — authorised administrators may access CMS data; text-to-speech for kids stories (if enabled) sends story text to ElevenLabs and stores audio on Cloudinary under our configuration.

How we use information

We use collected information to:

• Provide core features: prayer times, Quran reading, duas, Islamic calendar, qibla bearing, mosque finder, and related tools.
• Remember your settings and, when signed in, sync bookmarks and progress across devices.
• Improve reliability, security, and performance of the Service.
• Respond to support requests sent to support@jafarishia.com.
• Comply with legal obligations and enforce our terms.

Legal bases (EEA / UK users)

Where the GDPR or UK GDPR applies, we rely on: (a) performance of a contract — providing the Service you request; (b) legitimate interests — security, analytics limited to hosting logs, and product improvement that does not override your rights; (c) consent — geolocation, compass, and optional account features where required; (d) legal obligation — where we must retain or disclose data by law.

Local storage and cookies

Most preferences are stored in your browser localStorage (for example the key jafari-shia-settings) so the app works offline and without an account. We do not use cookies for cross-site advertising.

If you sign in, we use session cookies or similar tokens to keep you authenticated. You can clear local data via browser settings; signed-in data remains on our servers until you delete your account or ask us to delete it.

Third-party services

Some features rely on trusted providers. Each processes data under its own privacy policy:

• Vercel — hosting and edge delivery; may process IP and request metadata.
• Neon — PostgreSQL database for accounts, editorial content, and optional user sync data.
• Cloudinary — media hosting (images, audio) for site and admin content.
• MapTiler — map tiles for mosque finder and qibla map preview when enabled.
• OpenStreetMap / Overpass API — mosque point-of-interest search (coordinates sent in queries).
• Nominatim (OpenStreetMap) — reverse geocoding when detecting location (coordinates only).
• Islamic Network / AlQuran.cloud — Quran audio streaming from their CDN when you play recitation.
• ElevenLabs — optional admin text-to-speech for kids story audio (admin-only; story text sent for synthesis).
• Google Qibla Finder — optional external link only; we do not embed Google services on the qibla page. If you open it, Google's terms and privacy policy apply.

Sharing and disclosure

We do not sell your personal information. We may share data with service providers listed above solely to operate the Service, with professional advisers where required by law, or when compelled by valid legal process. We may share aggregated or de-identified statistics that cannot reasonably identify you.

Data retention

Local browser data persists until you clear it. Account and sync data are retained while your account is active and for a reasonable period afterward for backup and legal compliance. Server logs are retained according to our host's policies, typically on the order of weeks unless needed for security investigations.

You may request deletion of account data by emailing support@jafarishia.com.

Security

We use industry-standard measures including HTTPS, hashed passwords, and access controls on admin systems. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

Children's privacy

The Service includes family-friendly kids content. We do not knowingly collect personal information from children under 13 without parental consent. If you believe a child has provided us personal data, contact support@jafarishia.com and we will take appropriate steps to delete it.

International transfers

We and our providers may process data in countries other than your own (including the United States and European Union). Where required, we rely on appropriate safeguards such as standard contractual clauses or equivalent mechanisms offered by our processors.

Your rights and choices

Depending on your location, you may have the right to:

Exercise these rights by emailing support@jafarishia.com. We may need to verify your identity. California residents may have additional rights under the CCPA/CPRA; we do not sell personal information as defined by those laws.

• Access, correct, or delete personal data we hold about you.
• Object to or restrict certain processing.
• Withdraw consent where processing is consent-based (e.g. location).
• Data portability for account data, where applicable.
• Lodge a complaint with your local data protection authority.

Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the "Last updated" date. Material changes may be highlighted on the Service. Continued use after changes constitutes acceptance of the updated policy.

Contact

Questions about this Privacy Policy or our data practices:

Email: support@jafarishia.com

Website: https://jafarishia.com