Privacy Policy

Last updated: 21 August 2026

Rahmah Exchange provides software that masajid and Islamic organizations use to receive and review Zakat assistance applications. This policy explains what information we handle, why we handle it, and the choices available to you.

We recognise that assistance records are sensitive. Someone asking for help is trusting their community with details about their circumstances, and we treat that trust as the starting point for how this platform is built.

Who controls your information

Each masjid or organization using Rahmah Exchange controls the applicant records held in its own account. Rahmah Exchange processes that information on their instructions as a service provider. If you applied for assistance, direct questions about your record to the masjid you applied to; we will support them in responding.

Information we collect

Account information for staff users: name, email address, role, and the masjid they belong to.
Applicant information submitted through an assistance application: contact details, household and financial circumstances, the nature of the need, and any supporting documents uploaded.
Case activity: reviews, decisions, notes, messages exchanged between staff and applicants, and the record of who took which action.
Enquiry information submitted through this website, such as a demo request: name, organization, email, phone, location and any comments you include.
Technical information needed to operate the service securely, including log data and session identifiers.

How we use information

To operate the platform: receiving applications, routing them for review, and recording decisions.
To communicate about a case, including status notifications and messages between staff and applicants.
To secure accounts, including verification codes and password resets.
To produce reporting for the masjid on its own assistance activity.
To respond to demo requests and enquiries you send us.
To meet legal or regulatory obligations.

We do not sell personal information, and we do not use applicant data for advertising.

Confidentiality between organizations

Each masjid's data is isolated. Staff at one organization cannot see applications, applicants or case records belonging to another. Within an organization, access is limited further by role, so staff see what their responsibilities require rather than everything in the account.

Sharing

We share information only in these circumstances:

With the masjid you applied to, and its authorised staff.
With service providers who operate parts of the platform on our behalf — hosting, database, email delivery and file storage — under terms that restrict them to that purpose.
Where required by law, or to protect the rights and safety of people involved.
With your consent.

Security

Passwords are stored hashed, never in readable form. Access requires authentication, and sensitive actions such as password resets use time-limited one-time codes. Data is transmitted over encrypted connections. No system can promise perfect security, but we work to keep the platform current and to limit what any single account can reach.

Retention

While a masjid's subscription is active, case records are retained for as long as it needs them for its assistance and reporting obligations. If a subscription is cancelled, records are kept for 90 days — with reminders sent before the period ends — so the masjid can export its data or return. After 90 days, case records, documents and user accounts are permanently deleted. Earlier deletion can be requested at any time. Enquiry information from this website is kept only as long as needed to follow up.

Your choices

You may request access to the information held about you, ask for corrections, or ask for deletion where there is no continuing need or legal requirement to keep it. Requests about an assistance application should go to the masjid that received it. You can opt out of non-essential email at any time; messages about an active case are part of the service.

Children

The platform is intended for adults. Applications frequently describe households that include children; that information is handled under the same confidentiality rules as the rest of a case record.

Changes

We will update this policy as the platform develops and will revise the date above when we do. Material changes will be communicated to the organizations using the service.

Contact

Questions about this policy can be sent to support@rahmahexchange.com.