Our Privacy Promise
Transparency and control. We believe you deserve to know exactly how your data is used — and the power to control it. Your trust is our foundation.
1. Introduction
UmmahPass ("we," "our," or "us") is operated by Ummah Media Group LLC, a California-based company that has been serving the Muslim community since 2009. Protecting your privacy while providing you with a valuable service is fundamental to how we operate.
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service. We've designed this policy to be clear and transparent — because you deserve to know exactly how your data is handled.
By using UmmahPass, you agree to the collection and use of information in accordance with this policy.
Open Source: Our code is open source — anyone can inspect exactly how we handle your data at our GitHub repository.
2. Information We Collect
Personal Information
When you register for an account, we collect:
- Name
- Email address
- Password (encrypted)
Optional Information
You may choose to provide:
- Profile photo and screenname
- Verification documents (for Muslim verification)
- Payment information (processed securely by Stripe)
Automatically Collected Information
We automatically collect:
- IP address (used for security and general location, not stored long-term)
- Browser type and version
- Device information
- Usage data and activity logs
Behavioral Data (With Your Consent)
Cross-Platform Activity Tracking
If you opt in to personalized experiences, we collect behavioral data across Ummah Media Group platforms (UmmahPlaces, UmmahJobs, UmmahCauses, MuslimTorrents, and UmmahArmy) to build a profile that helps us serve you better. This includes:
- • Searches and content you view
- • Features and services you use
- • Interactions like favorites, reviews, and donations
- • Time and frequency of your visits
You can opt out of this tracking at any time in your Privacy Settings.
3. How We Use Your Information
We use your information to:
- Provide and maintain our service
- Process your transactions
- Send you important updates and notifications
- Enable OAuth login to partner platforms
- Calculate and track UmmahPoints
- Improve our services
- Prevent fraud and abuse
Personalization (With Your Consent)
If you opt in, we use your behavioral data to:
- Personalize your experience across UMG platforms
- Recommend relevant content, businesses, and services
- Show you relevant advertisements from Muslim-owned businesses and halal brands
Why we do this: Unlike Big Tech platforms that extract value from Muslim communities, our goal is to strengthen Muslim economic circulation. When we show you an ad for a halal restaurant, that money stays in our community. When we connect you with Muslim-owned businesses, we're supporting the Ummah.
4. Advertising
How Advertising Works on UmmahPass
If you consent to personalized advertising, we may use your behavioral profile to show you relevant ads from our Muslim Ad Network. These are advertisements from halal brands, Muslim-owned businesses, and community organizations — not random advertisers.
- ✓ You can opt out of personalized ads at any time
- ✓ We never sell your personal data to advertisers
- ✓ Advertisers see aggregated segments, not individual profiles
- ✓ All advertisers are vetted for halal compliance and community alignment
5. What We NEVER Do
Our Absolute Commitments:
- ❌ Sell your personal data to third parties
- ❌ Share your individual profile with advertisers (only aggregated segments)
- ❌ Track you without your consent
- ❌ Share your information without disclosure
- ❌ Use dark patterns to trick you into sharing more data
- ❌ Work with advertisers who don't align with Muslim values
6. Information Sharing
With Partner Platforms (OAuth)
When you use UmmahPass to log into a partner platform (like MuslimTorrents or UmmahPlaces), we share only the information you explicitly authorize. You will see a clear consent screen showing exactly what will be shared:
- Your name and email
- Pro membership status
- Verification status
- Points balance (if requested)
You are always in control. You will see what information is being shared before you authorize access, and you can revoke access at any time from your dashboard.
With Ecosystem Partners
Third-party Muslim platforms may integrate with our ecosystem to provide you with a seamless experience. When you use UmmahPass on a partner site, that site may contribute anonymous behavioral data to your profile (with your consent). This helps us build a more complete picture of Muslim consumer preferences across the digital landscape.
With Service Providers
We work with a minimal set of trusted third parties who help us operate our service. They are contractually bound to protect your data:
- Stripe — Payment processing (they never share your card details with us)
- EPOM — Ad serving (receives anonymized segment data, not personal information)
- Hosting provider — Secure infrastructure
Legal Requirements
We may disclose your information only if required by law or in response to valid legal requests. We will notify you if legally permitted to do so.
7. Your Privacy Controls
You're In Control
In your Privacy Settings, you can:
- ✅ Cross-Platform Tracking — Turn on/off activity tracking across UMG platforms
- ✅ Personalized Advertising — Turn on/off targeted ads from Muslim businesses
- ✅ Data Sharing — Control anonymized data for Muslim market research
- ✅ Download Your Data — Get a copy of everything we have about you
- ✅ Delete Your Data — Request complete account and data deletion
8. Data Security
We implement industry-standard security measures to protect your personal information:
- Encryption in transit — All connections use SSL/TLS (HTTPS)
- Encrypted password storage — Passwords are hashed using bcrypt (we never store plain text passwords)
- Regular security audits — We continuously monitor and improve security
- Access controls — Strict internal access policies
- Secure infrastructure — Enterprise-grade hosting with regular backups
9. Data Retention
We retain your personal data only as long as necessary to provide our services:
- Account data — Retained until you delete your account
- Behavioral events — Raw events retained for 90 days, aggregated data for 2 years
- Activity logs — Retained for 90 days for security purposes
- Payment records — Retained as required by law (typically 7 years)
When you delete your account, we permanently remove your personal data within 30 days, except where retention is required by law.
10. Your Rights (CCPA, GDPR & Global Privacy Rights)
We believe everyone deserves privacy rights, regardless of where you live. You have the right to:
- ✅ Know — Request what personal data we have about you
- ✅ Access — Get a copy of your data in a portable format
- ✅ Correct — Fix any inaccurate information
- ✅ Delete — Request deletion of your account and data
- ✅ Opt-out — Disable cross-platform tracking and personalized ads
- ✅ Non-discrimination — We won't treat you differently for exercising your rights
To exercise any of these rights, visit your Privacy Settings or contact us at privacy@ummahpass.io. We respond to all requests within 30 days.
11. Cookies and Tracking Technologies
We use the following cookies and tracking technologies:
Essential Cookies (Always On)
- Session cookies — Keep you logged in
- CSRF tokens — Protect against security attacks
- Preferences — Remember your settings
Analytics & Tracking (With Your Consent)
- UmmahPass Analytics — Our first-party tracking for cross-platform personalization
- Anonymous ID — Links your activity before and after login
We do NOT use third-party tracking pixels from Google, Facebook, or other Big Tech platforms.
12. Children's Privacy
UmmahPass is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us immediately.
13. International Data Transfers
Your data is stored on secure servers in the United States. If you are accessing UmmahPass from outside the US, please be aware that your data will be transferred to, stored, and processed in the US, where our servers are located.
14. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by:
- Posting the new policy on this page
- Updating the "Last updated" date
- Sending you an email notification for significant changes
15. Contact Us
If you have questions about this Privacy Policy or want to exercise your privacy rights, please contact us:
Ummah Media Group LLC
California, United States
Privacy inquiries: privacy@ummahpass.io
General support: salaam@ummahpass.io