Privacy policy
How Masjid Bilal Ibn Rabah looks after your personal information, in line with the Protection of Personal Information Act (POPIA).
Last updated: 4 October 2026
Who we are
Masjid Bilal Ibn Rabah (“the masjid”, “we”) at 16 J.B. Marks Road, Berea, Durban is the responsible party for personal information collected through this website (www.musjidbilal.co.za) and the Masjid Bilal app.
Information Officer: The Chairperson of the Masjid Bilal Ibn Rabah committee. You can reach the Information Officer on 074 449 9994.
What we collect and why
We only collect what we need, and only what you give us. We never sell your information or use it for advertising.
| Information | Why we need it | How long we keep it |
|---|---|---|
| Member app account: email address, password (stored only as a secure hash), name (optional), cell number | To give you an account, verify your email and cell, and send you the notifications you choose | Until you delete your account |
| App notification settings, event reminders and a push token for each phone you switch notifications on | To send salaah, Jumuah, event and Ramadaan reminders to your phone | Until you switch notifications off or delete your account |
| Verification and password-reset codes, sign-in sessions (with your browser’s user-agent) | To keep your account secure | Codes expire within 24 hours; sessions after 180 days or when you log out |
| Website forms: name, cell number and your message (feedback, jamaat sign-ups, Interested in Islam, Saturday tours, Hifz enrolment) | So someone from the masjid can respond to you or arrange what you asked for | As long as needed to deal with your request, then deleted by the committee |
| Sunnah I’tikaaf applications: name, surname, ID number, nationality, age, cell number and comments | To manage the limited I’tikaaf places and confirm your place | Until the end of that Ramadaan, then deleted |
The website does not use advertising or tracking cookies. The member app uses one essential cookie to keep you signed in. Your browser also remembers small settings on your device, like whether you dismissed the “Install” bar.
Your consent
Each form and the app sign-up ask for your consent before you send anything. You can withdraw consent at any time by switching off notifications in the app, deleting your account, or contacting us — this doesn’t affect anything we did lawfully before you withdrew it.
Where your information is stored
We use trusted service providers who process information only on our instructions and under appropriate safeguards:
- Supabase — our database, hosted in the United States.
- Vercel — hosts the website and app (servers in Cape Town and a global network).
- Email and SMS providers — send verification emails, password-reset links and SMS codes.
- Push services (Google, Apple or Mozilla, depending on your phone) — deliver notifications to your device.
Because some of these providers store information outside South Africa, your information may be transferred across borders. We only use providers bound by data-protection laws or agreements that give protection substantially similar to POPIA (section 72).
The live stream comes from LiveMasjid, and Quraan recitations stream from QuranicAudio.com. When you play them, your device connects to their servers, which can see your IP address.
How we protect it
Everything is sent over HTTPS. Passwords are stored as secure hashes and never in readable form. Access to personal information is limited to the committee members who need it, using individual logins, and the database only lets the website read what each page needs.
If we ever become aware of a security compromise affecting your information, we will notify you and the Information Regulator as POPIA requires.
Your rights
Under POPIA you may:
- ask whether we hold information about you and get a copy of it;
- ask us to correct or update it;
- ask us to delete it, or object to us using it;
- withdraw your consent at any time.
To make a request, contact the Information Officer (above). We’ll respond within a reasonable time and may need to confirm your identity first.
Deleting your app account
In the app, go to Settings → Delete my account. This immediately and permanently deletes your account, notification settings, event reminders and phone notification tokens.
Can’t log in? Use our account deletion request page and we’ll delete it for you.
Children
The app is not intended for children under 18. Hifz enrolments for children must be made by a parent or guardian, whose details we collect alongside the child’s.
Complaints
Please contact us first so we can put things right. You also have the right to complain to the Information Regulator (South Africa) — inforegulator.org.za.
Changes to this policy
If we change this policy, we’ll update the date at the top of this page. Significant changes will also be shown in the app.