Terms, Privacy & Disclaimers

Effective date: 30 June 2026 · Version 4.0 · Ummah is operated by Mohammed Shoeb Ahmed, Hyderabad, Telangana, India.

A.Terms of Service

1. Who we are

“Ummah”, “the Service”, “the App”, “we”, “us” and “our” mean the Ummah application and its supporting servers (the website at ummah.app, the Progressive Web App, the Android/iOS installable build, and any future native client), operated independently by Mohammed Shoeb Ahmed, an individual developer residing in Hyderabad, Telangana, India (the “Operator”). “You”, “user” or “listener” means any person who accesses or uses Ummah.

2. Acceptance & binding effect

By installing, launching, registering for, or otherwise using Ummah you accept these Terms of Service, the Privacy Policy below, and every notice referenced from them. If you do not accept, do not use Ummah. Continued use after we change these terms means you accept the change.

3. Eligibility

• You must be at least 13 years old (or the minimum age of digital consent in your country — 16 in much of the EU, 14 in Spain, etc.) to create an Ummah account.
• If you are under the age of majority in your jurisdiction, you must have your parent or legal guardian's permission to use the Service.
• You must not be barred from receiving the Service under the laws of India, the country in which you reside, or any applicable export-control regime.

4. Your account

You agree to (a) provide accurate and current registration information, (b) keep your password confidential, (c) notify us promptly at shoeb200326@gmail.com of any unauthorised use of your account, and (d) accept responsibility for all activity carried out under your credentials.

We may suspend or terminate your account, with or without notice, if we reasonably believe you have breached these Terms, abused the Service, or put other users or our infrastructure at risk.

You must not create more than one account per person, and you must not create an account on behalf of, or share login credentials with, anyone else. Accounts are personal and non-transferable.

5. Licence to use the Service

Subject to your compliance with these Terms, we grant you a personal, limited, revocable, non-exclusive, non-transferable, non-sub-licensable licence to install and use Ummah on devices you own or control, solely for your personal, non-commercial spiritual and educational benefit.

6. What you may not do

You agree NOT to, and not to permit any third party to:

• Use the Service in any way that violates the law of any jurisdiction that applies to you (including export controls, sanctions, or obscenity laws);
• Use the Service in a manner that infringes the intellectual-property rights of any third party, including reciters, translators or rights-holders;
• Sell, sub-licence, rent, lease, or otherwise commercialise any portion of the Service or content delivered through it;
• Reverse-engineer, decompile, disassemble, or attempt to derive source code, except to the extent that this restriction is expressly forbidden by applicable mandatory law;
• Use bots, scrapers, crawlers, or any automated means to access the Service or harvest content, except for well-behaved search-engine indexers respecting robots.txt;
• Use any framework, “overlay”, or wrapper to display the Service inside a third-party product without our written consent;
• Interfere with, disrupt, or place an unreasonable load on the Service, its servers, or the third-party APIs Ummah relies on;
• Bypass any access control, rate limit, geo-restriction, payment requirement, or security feature;
• Upload or transmit malware, viruses, or any code designed to disrupt or damage software;
• Use the Service to harass, defame, stalk, intimidate, or impersonate any person;
• Modify, remove, obscure, or falsify any attribution, copyright notice, ḥadīth chain (isnād), or reference shown by the Service.

7. Intellectual property

Ummah's source code, design, brand, name, logo, the original SVG illustrations, the curated daily reminders, and the section structure are © Mohammed Shoeb Ahmed, 2024–2026, and are protected by Indian copyright law and international treaties. All rights are reserved except as expressly granted by these Terms or by an open-source licence published in the project repository.

The Qurʾān is the eternal speech of Allah ﷻ and is in the public domain. The English translations, Urdu translations, recitation audio, and ḥadīth narrations served through the App are owned or licensed by their respective rights-holders and are made available under their published licences — see Part D.

8. Feedback

If you send us suggestions, ideas, or feedback, you grant us a perpetual, worldwide, royalty-free licence to use them without obligation or attribution. You waive any moral rights to the extent permissible by law.

9. Third-party services

Ummah depends on third-party services listed in Part D. Those services have their own terms; your use of Ummah is conditioned on your compliance with theirs to the extent they apply. We are not responsible for any third-party service's availability or behaviour.

10. Disclaimers

Ummah is not a substitute for qualified scholarly guidance. Religious rulings (fatwa), legal advice, medical advice, or psychological counselling must be obtained from a qualified specialist. Reliance on any information in the App is at your own risk.

11. Security & data breach disclaimer

12. Limitation of liability (general)

To the maximum extent permitted by applicable law, the Operator shall not be liable for any indirect, incidental, special, consequential, exemplary or punitive damages — including lost profits, lost data, business interruption, or device damage — arising from or relating to your use of, or inability to use, the Service, even if advised of the possibility of such damages. This includes, without limitation, the account-recovery disclaimer in Section 4.1 and the security/data-breach disclaimer in Section 11 above, both of which are incorporated into this limitation of liability. The Operator's aggregate liability for any direct damages arising under these Terms is limited to the greater of (a) ₹1,000 INR (one thousand Indian rupees) or (b) the amount you paid us for the Service in the twelve months preceding the claim.

Some jurisdictions do not allow exclusion or limitation of certain warranties or liabilities; in such jurisdictions our liability is limited to the smallest extent permitted by law.

13. Indemnity

You agree to indemnify, defend and hold harmless the Operator and his successors, agents and licensors from any claim, demand, loss, liability, damages, settlements, costs and expenses (including reasonable legal fees) arising out of (a) your breach of these Terms, (b) your misuse of the Service, or (c) your violation of any law or third-party right.

14. Termination

You may stop using the Service at any time and may request account deletion under Part I. We may suspend or terminate your access at any time, with or without notice, for any reason, including suspected breach of these Terms, legal compulsion, or shutdown of the Service.

Sections that by their nature should survive termination (Intellectual Property, Account Recovery Disclaimer, Security & Data Breach Disclaimer, Disclaimers, Limitation of Liability, Indemnity, Governing Law) will survive.

15. Governing law & jurisdiction

These Terms are governed by the laws of [Your Country/State — e.g. the Republic of India]. Subject to mandatory consumer-protection laws applicable in your country of residence, the courts of Hyderabad, Telangana, India (or such other venue as the Operator designates — [Your Country/State]) have exclusive jurisdiction over any dispute arising under these Terms.

16. Dispute resolution

Before initiating litigation, you agree to first attempt to resolve any dispute by writing to the Grievance Officer (Part J) and allowing thirty (30) days for response. We will do the same.

17. Changes to the Terms

We may modify these Terms from time to time. We will update the “Effective date” at the top of this page and, where the change is material, give reasonable in-app notice. Your continued use after a change becomes effective constitutes acceptance of the revised Terms.

18. Miscellaneous

• Severability. If any provision is found unenforceable, the remaining provisions remain in effect.
• No waiver. Our failure to enforce a provision is not a waiver of our right to enforce it later.
• Assignment. You may not assign these Terms; we may assign them in connection with a merger, sale of assets, or by operation of law.
• Entire agreement. These Terms, together with our Privacy Policy and any in-product notices, are the entire agreement between you and the Operator regarding the Service.
• Notices. Notices to you may be given via in-app message or to the email address on your account; notices to us must be sent to shoeb200326@gmail.com.
• Force majeure. We are not liable for failure to perform due to causes beyond our reasonable control (natural disasters, war, internet outages, government action, infrastructure failure).

B.Privacy Policy

This Privacy Policy explains what personal data we collect, why we collect it, how long we keep it, with whom we share it, and the rights you have over it. It complements the obligations imposed on us by the Indian Digital Personal Data Protection Act 2023, the EU General Data Protection Regulation (where applicable), the UK GDPR, and the California Consumer Privacy Act / CPRA.

1. Data controller

The data controller is Mohammed Shoeb Ahmed, contactable at shoeb200326@gmail.com. We do not have an EU representative because our processing is occasional, low-risk and not targeted at EU residents at scale; if you reside in the EU and wish to exercise rights, please write to the email above and we will respond within 30 days.

2. What data we collect

Category	Examples	Why	Legal basis
Account identifiers	Name, email, hashed password	Create & secure your account	Contract
Spiritual usage state	Last-read surah, bookmarks, daily checklist, chosen reciter	Personalise your experience; stored on your device by default	Legitimate interest / Consent
Profile photo	Image you upload & crop	Personal customisation; stored on your device, optionally synced	Consent
Technical / device data	User-agent, screen size, locale, time zone	App rendering & bug diagnosis	Legitimate interest
Analytics	Anonymous page-view counts via Google Analytics 4 (measurement ID G-V69772VXKJ)	Understand which sections are used; improve the app	Legitimate interest / Consent (EU)
Voice input	Speech-to-text transcription of your spoken question	Run a Hadith search; processed by your browser's Web Speech API, not stored by us	Consent (you tap the mic)
Server logs	IP address, request path, status, timestamp	Security, abuse prevention, debugging	Legitimate interest / Legal obligation

3. How we use your data

• To create, secure, and operate your account.
• To provide and personalise the Service (e.g. remembering where you left off in a surah).
• To diagnose technical problems and improve performance.
• To respond to your questions, support requests, and rights requests.
• To detect, investigate and prevent fraud, abuse and security incidents.
• To comply with applicable law, court orders and lawful government requests.

4. Cookies, localStorage & similar technologies

Ummah uses localStorage on your device to remember settings, bookmarks, daily reminders, your chosen reciter, your hadith search cache and your profile photo. We use a single first-party session token (cookie or localStorage) for sign-in. We do not use third-party advertising cookies or cross-site tracking pixels.

Google Analytics 4 sets first-party cookies for anonymous traffic measurement. If you do not consent to this in the EU/UK, decline at the consent prompt or block analytics in your browser.

5. Sharing & disclosure

We do not sell your personal information. We share data only with:

• Hosting & infrastructure providers processing data on our behalf under written agreements: MongoDB Atlas (database), our origin host (web server), Google Fonts CDN, jsDelivr CDN, Quran.com API, and the fawazahmed0 hadith-api CDN.
• Analytics: Google LLC, for aggregated traffic statistics.
• Law enforcement: when compelled by valid legal process, or where we believe in good faith disclosure is necessary to protect rights, property or safety.
• Acquirers: if the Service is acquired or merged, your data may transfer to the successor under the same terms.

6. International transfers

Our hosting and CDNs may store and process your data in countries other than your own (typically United States, Singapore, or the European Union). Where required by the EU GDPR or the UK GDPR, transfers outside the EEA/UK rely on the European Commission's Standard Contractual Clauses or equivalent safeguards.

7. Data retention

• Account: kept until you delete it (Part I); inactive accounts may be deleted after 24 months of inactivity following a 30-day notice email.
• Server logs: 90 days, then deleted or anonymised.
• Analytics events: retained per the default Google Analytics 4 setting (14 months) at user-level; aggregated reports are retained indefinitely.
• localStorage: kept on your device until you clear browser data or use the in-app “Clear local cache” button.

8. Security

We protect your data using industry-standard measures: passwords stored as bcrypt hashes; HTTPS / TLS in transit; JWT bearer tokens with short expiry; a private database with IP allowlisting; principle-of-least-privilege access for the Operator. No system is perfectly secure — by using the Service you accept the residual risk.

9. Your rights

Depending on where you live, you may have the right to:

• access the personal data we hold about you;
• request correction of inaccurate data;
• request erasure of your data (the “right to be forgotten”);
• object to or restrict processing;
• data portability — receive your data in a machine-readable format;
• withdraw consent at any time (without affecting prior lawful processing);
• lodge a complaint with your supervisory authority (e.g. the Data Protection Board of India, the UK ICO, your national EU DPA, or the California Privacy Protection Agency).

To exercise any right, email shoeb200326@gmail.com from the address on your account. We respond within 30 days.

10. Children's privacy

The Service is not directed to children under 13 and we do not knowingly collect personal data from them. If you believe we have collected data from a child under 13, please contact us and we will delete it.

11. Changes to this Policy

We may update this Privacy Policy. The “Effective date” at the top reflects the latest revision. Material changes will be announced in-app at least 14 days before they take effect.

C.Religious Content Disclaimer

Ummah serves the Qurʾān, ḥadīth narrations, daily-life reminders, and curated spiritual resources for educational and devotional purposes. We take the utmost care to be authentic, but:

• Translations are interpretations and not the Qurʾān itself; for the Arabic text we rely on the Indo-Pak rasm. Where translations differ, the Arabic prevails.
• Ḥadīth narrations served via the Hadith Bar are pulled from the six major Sunnī collections (Kutub al-Sittah). Grading of each narration (ṣaḥīḥ, ḥasan, ḍaʿīf) follows the source edition; we do not independently authenticate every chain.
• The Service is not a substitute for a qualified scholar, a local imām, or formal Islamic education. For binding rulings (fatwa) please consult a recognised scholar.
• Recitations are by individual reciters from publicly accessible recordings. Mistakes of tajwīd or pronunciation, if any, are the responsibility of the original reciter, not of Ummah.
• The Service does not represent the views of any Islamic body, mosque, school of thought (madhhab), or scholar unless explicitly attributed.

D.Third-Party Sources & Attribution

The integrity of Ummah depends on the generosity of the open Islamic-tech community. We acknowledge:

E.Copyright Complaints (DMCA-style)

If you believe content on Ummah infringes your copyright, send a written notice to shoeb200326@gmail.com with the subject line “Copyright Complaint — Ummah” containing:

1. Your physical or electronic signature.
2. Identification of the copyrighted work claimed to have been infringed.
3. Identification of the material on Ummah you claim is infringing, with enough detail (URL, surah, ayah, ḥadīth reference, screenshot) for us to find it.
4. Your contact information (name, address, telephone, email).
5. A statement made in good faith that the use is not authorised by the copyright owner, its agent, or the law.
6. A statement, under penalty of perjury, that the information in your notice is accurate and that you are the owner or are authorised to act on the owner's behalf.

We aim to take down validly-noticed material within seven (7) business days and to forward a counter-notice mechanism to the alleged infringer.

F.Play Store Data Safety Summary

This section restates the data we collect in the form Google Play's Data Safety section expects. It is reproduced inside the Play Store listing.

Data type	Collected?	Shared?	Optional?	Purpose
Name	Yes	No	Required at sign-up	Account function
Email	Yes	No	Required at sign-up	Account function, password reset
App interactions (in-app analytics)	Yes	With Google Analytics	Optional in EU/UK	Analytics
Crash logs & diagnostics	Yes	No	No	App functionality
Photos (profile picture)	Yes, if you upload	No	Yes	Personalisation
Audio (microphone for Hadith Bar voice search)	Processed locally by your browser; not sent to us	No	Yes	App functionality
Approximate location, precise location, contacts, SMS, calendar, files, financial info, health, payment, advertising ID	No	No	—	—

Data security: data in transit is encrypted with TLS; passwords are hashed with bcrypt; you can request account deletion at any time (Part I). The Service follows the Google Play Families Policy where it overlaps.

G.EU / UK / California & India Notices

EU / UK

If you are in the EEA, the UK, or Switzerland, the legal bases on which we process your personal data are set out in Part B §2. You have the right to lodge a complaint with your national supervisory authority. Where we rely on legitimate interest, that interest is providing a stable, fast, and respectful Islamic app to a global Muslim audience.

California (CCPA / CPRA)

We do not sell or “share” personal information as those terms are defined under California law. California residents have the right to know what data we have, to delete it, to correct it, and to opt out of any future sale or share. To exercise these rights, email us as above.

India (DPDPA 2023)

You are a “Data Principal” and we are a “Data Fiduciary” under the Indian Digital Personal Data Protection Act 2023. You may write to the Grievance Officer in Part J. We respond within statutory timelines. The Service publishes notices in English.

H.Children & Family Safety

Ummah's content is appropriate for all ages and contains no advertising, gambling, alcohol, profanity, or sexual content. Parental supervision is encouraged for users under 16. We follow the Google Play Families policy for self-certification of age suitability.

I.Account Deletion & Data Export

You can delete all locally-stored data from inside the app via Profile → Clear local cache. To delete your server-side account and all associated personal data, email shoeb200326@gmail.com from the address on your account with the subject “Delete my Ummah account”. We will:

1. Verify the request from your registered email.
2. Permanently delete your account record, name, email, hashed password, and any server-side state within seven (7) days.
3. Confirm deletion by email.

Aggregated, fully anonymised analytics (already disassociated from your account) may be retained. Backups are rotated and overwritten within 30 days.

To request a copy of your data, send the same email with the subject “Export my Ummah data”. We will provide a JSON export within 30 days.

J.Contact & Grievance Officer

We aim to acknowledge all enquiries within 48 hours and to resolve them within 30 days. JazākAllāhu khayran for using Ummah.