Security, Privacy & Safeguarding

🇬🇧 UK-based & private

• Hosted on a secure UK server (Manchester) — your data never leaves the United Kingdom.
• Every masjid runs on its own separate database — your data is fully isolated; no other mosque or customer can ever access it.

🔐 Security

• All connections encrypted with HTTPS/TLS.
• Passwords stored hashed (encrypted one-way) — never in readable form.
• Server protected by a firewall, automatic brute-force protection and automatic security updates.
• Daily backups so your data can be recovered.
• Role-based access — staff and parents only see what they're allowed to, and parents only see their own children.

👤 Honest about access

As the people who host and maintain the service, we have administrative/server access — this is necessary to run, update and back up the system, as with any hosted/cloud service.

We never access, share or sell your data, there are no hidden backdoors, and we would only ever look at your data if you specifically asked us to for support.

🛡️ Safeguarding

• A built-in child Safeguarding Policy section, visible to all staff and parents — covering your Designated Safeguarding Lead, code of conduct, reporting concerns, NSPCC/Childline contacts, anti-bullying and photo/data consent.
• Children's personal data is access-controlled and UK-hosted.

The masjid remains responsible for safeguarding; the system supports your obligations by keeping data secure and access-controlled.

📄 Data protection (UK GDPR)

• Your masjid owns its data and remains the data controller; we act only as your data processor.
• Export everything to spreadsheets at any time.
• We permanently delete your data on request if you ever leave.
• Full access, correction and erasure rights under UK GDPR are supported.