Privacy Policy

Overview

1. Scope

Nasrul-Lahi-L-Fatih Society (NASFAT), Houston Branch ("NASFAT Houston," "we," "us," or "our") respects your privacy. This policy explains how we collect, use, store, and disclose information when you use nasfathouston.org, the NASFAT Houston mobile application, the membership portal, event attendance tools, forms, and related online services and communications (collectively, the "Services").

2. Information we collect

The information we collect depends on how you use the Services.

Information you provide

• Membership: name, nickname, phone number, email address, birthday, gender, category, optional address, membership status, profile photo, and administrative notes.
• Family and emergency contacts: emergency-contact details and family-member names, phone numbers, birthdays, and gender when submitted.
• Accounts: login email and authentication records. Passwords are processed by our authentication provider and are not readable by NASFAT Houston administrators.
• Participation and payments: event attendance, membership payments, payment status, receipts, email-delivery records, and communications with administrators.
• Communications: prayer requests, feedback, suggestions, contact messages, newsletter signups, program inquiries, donation-support requests, and other information you voluntarily send.
• Staff administration: information submitted by authorized staff through administrative features.

Prayer requests and messages may contain personal or religious information. Please provide only information you are comfortable sharing with authorized NASFAT Houston personnel.

Location information

With your permission, the mobile app may access your device's location to provide location-dependent features such as Qibla direction. You may decline or disable location access through your device settings. We do not sell location information or use it for advertising.

Notifications and device information

If you enable notifications, the mobile app may collect and store a device push-notification token, device-platform information, and notification preferences. We use this information to deliver prayer-time and iqamah reminders, announcements, event updates, and other community notifications. The app may also store prayer-alert preferences and recently cached content locally on your device.

Information processed automatically

Our website, app, hosting providers, embedded services, and security tools may process limited technical information such as IP address, browser and device type, operating system, app version, timestamps, referring and requested pages, network or server logs, and technical or security signals. We do not currently use this information for targeted advertising.

3. How we use information

We may use information to operate, maintain, secure, and improve the Services; administer memberships and accounts; provide prayer times, Qibla direction, Quran content, and worship resources; deliver notifications you enable; communicate about programs, worship, events, welfare, payments, and branch activities; manage attendance, emergency contacts, and family memberships; process and respond to prayer requests, feedback, suggestions, and inquiries; authenticate authorized staff; diagnose technical problems; prevent fraud or misuse; and meet legal, accounting, safeguarding, and organizational obligations.

4. Prayer requests, feedback, and suggestions

Prayer requests submitted through the website or app may be stored in our service database and emailed to the NASFAT Houston Missioner or other authorized personnel. Feedback may be stored so authorized administrators can review and respond to it. Suggestions submitted through an anonymous-suggestion feature may be emailed directly to NASFAT Houston leadership.

If you select an anonymous option, your name will not be intentionally displayed with the submission. Do not include identifying information in the message itself if you want it to remain anonymous.

5. How we share information

We do not sell or rent personal information. We may disclose information to authorized NASFAT Houston leaders, staff, administrators, and volunteers who need it for assigned responsibilities; to service providers that support the Services; when you request or permit disclosure; when reasonably necessary to investigate fraud, misuse, security incidents, or threats to safety; to protect people, rights, safety, or property; or when required by law or legal process.

6. Third-party services

The Services may use or connect to third-party providers, including:

• Supabase for database hosting, storage, authentication, and server functions.
• Google Firebase Cloud Messaging for mobile push notifications.
• Quran.com or related Quran content providers for Quran text, translations, recitations, and audio.
• FormSubmit for contact-form delivery.
• Google Maps for maps and directions.
• Cloudflare Turnstile for form security.
• Website hosting, email, donation, and payment providers that help us operate the Services.
• Your device's browser, maps, email, telephone, or sharing applications when you choose to use them.

Third-party providers may process information under their own terms and privacy policies. NASFAT Houston is not responsible for the privacy practices of services it does not control.

7. Donations and payments

Donation links may direct you to an external donation page or payment processor. Payment-card and bank-account information is processed by the applicable payment provider; the NASFAT Houston mobile app does not directly collect or store complete payment-card or bank-account information.

NASFAT Houston may receive and retain limited records such as donor name, contact information, donation amount and date, donation designation, and a transaction confirmation number for acknowledgment, accounting, tax, fraud-prevention, and legal purposes.

8. Cookies and website technologies

The website may use cookies, local storage, and similar technologies for essential operation, security, sessions, preferences, and performance. You may manage cookies through your browser settings, although disabling essential cookies may prevent some features from working properly. If we add advertising or nonessential analytics technologies in the future, we will update this policy and provide any required notices or choices.

9. Security and retention

We use reasonable administrative, technical, and organizational safeguards designed to protect information, including authentication, access controls, and database security rules. Access to nonpublic records is limited to authorized individuals. No online system is completely secure, so please do not send highly sensitive information through general contact forms.

We retain information only as long as reasonably necessary to provide the Services, respond to requests, administer the branch, maintain financial or organizational records, prevent fraud, resolve disputes, protect our legal interests, and comply with applicable obligations. Retention varies by record type. Push-notification tokens may be retained while active; local app preferences remain until you clear app data or uninstall the app; and limited records may remain in backups or after account closure when legitimately required.

10. Your choices and privacy requests

You may disable location or notifications through your device settings, manage cookies through your browser, choose not to provide optional information, uninstall the app to remove locally stored app information, or unsubscribe from optional communications using the instructions in the message.

You may also ask to access, correct, or delete personal information maintained by NASFAT Houston or ask how it is used. Email info@nasfathouston.org with the subject NASFAT Houston Privacy and Data Deletion Request and enough information to identify the relevant account or submission. We may verify your identity and may retain records reasonably necessary for legal, accounting, security, or organizational purposes.

11. Children and family information

Our Services are intended for general community and religious use, and our programs serve children and families. A parent, guardian, or authorized adult should submit a child's information. We do not knowingly collect personal information online from children under 13 without appropriate parent or guardian involvement. Contact us if you believe a child submitted information without appropriate authorization so we can review and, where appropriate, delete it.

12. External links

The Services may link to external websites, payment services, maps, social media platforms, or applications that NASFAT Houston does not control. We are not responsible for their content, security, or privacy practices. Please review their policies before providing personal information.

13. Changes to this policy

We may update this policy when our Services, practices, or obligations change. We will post the revision here and update its effective date. For a material change, we may provide additional notice or request a new acknowledgement when appropriate.