Privacy policy

Zakati is a mobile app and website made by Wahaj Labs ("we", "us"). We are responsible for the personal information described in this policy. You can reach us about privacy at any time at [email protected].

We only collect what Zakati needs to work:

• Account details: your first and last name, email address and password. Passwords are stored in hashed form, never as plain text.
• Preferences: your country, default currency, time zone, preferred calendar (Hijri or Gregorian), week start day and language.
• Holdings you enter: the accounts you create, the amounts of cash, gold and silver in them, gold purity, units, dates, notes, simulations and zakat records. You type these in yourself; we never connect to your bank.
• Messages you send us: your name, email and message when you use our contact form or email us.
• Launch list: your email address, if you ask us to tell you when Zakati launches.
• Technical information: basic data needed to run and secure the service, such as sign-in sessions, device and app version, and error logs.

We do not collect your location, contacts, photos, or bank or card credentials.

• To create and secure your account and keep you signed in.
• To value your holdings, compare them with the nisab, track your hawl and calculate the zakat due.
• To show dates, currencies and language the way you prefer.
• To reply to your messages and provide support.
• To send one email when Zakati launches, if you joined the launch list. You can unsubscribe from that email at any time.
• To fix problems, prevent abuse and keep the service reliable.

We use your information because it is needed to provide the service you asked for, because you consented, or because we have a legitimate interest in keeping Zakati secure and working.

We do not sell your personal information, and we do not share it for advertising.

We use a small number of service providers to run Zakati, such as cloud database and hosting providers that store your account and holdings on our behalf. They may only use your information to provide their service to us.

Messages from our contact form and launch-list sign-ups are sent and stored through our email provider, Resend, which delivers them to us and sends the launch email.

To keep those forms free of spam, they use Cloudflare Turnstile, which checks technical signals from your browser to confirm a person is sending them. It runs only when you use a form.

Zakati also fetches daily gold, silver and currency prices from a market data provider. Those requests contain no information about you.

We may disclose information if the law requires it, or to protect the rights and safety of our users and of Wahaj Labs.

We keep your account information and holdings for as long as your account is open. When you delete your account, we delete your personal information within 30 days, except where we must keep something to meet a legal obligation. Contact form messages are kept for as long as needed to handle your request.

Depending on where you live, you can ask us to:

• give you a copy of the personal information we hold about you;
• correct information that is wrong;
• delete your account and personal information;
• restrict or object to certain uses of it.

You can update most details in the app's settings. For anything else, including deleting your account, email [email protected] from the address on your account. We will respond within 30 days. You may also complain to your local data protection authority.

Information travels between the app and our servers over encrypted connections, and access to stored data is limited to what is needed to run the service. No system is perfectly secure, so please use a strong password that you don't reuse elsewhere.

Our service providers may store and process information in countries other than yours. When that happens, we rely on appropriate safeguards to protect it.

Zakati is not directed at children under 13, and we do not knowingly collect their personal information. If you believe a child has given us information, contact us and we will delete it.

This website does not use advertising or tracking cookies. If you send a message through the contact form, we use your details only to reply to you. The launch sign-up form keeps a count of sign-ups in your browser to limit repeat submissions; the count does not include your email address.

We will update this page when our practices change and revise the date at the top. If a change is significant, we will tell you in the app or by email before it takes effect.

Questions about this policy or your information? Email [email protected] or use our contact form.