Skip to main content

Privacy Policy

Last updated: September 30, 2026

1. Introduction

UMMA Foundation ("we," "our," or "us") operates the UMMA app and related services (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. We are committed to protecting your privacy and complying with applicable data protection laws, including the General Data Protection Regulation (GDPR) where it applies.

2. Information We Collect

We may collect the following types of information:

  • Account information: Name, email address, phone number (if provided), and profile details you choose to share within your community.
  • Community and usage data: Messages, posts, event RSVPs, participation in campaigns, and other content you create or interact with within your community.
  • Payment information: When you make donations or payments through the Service, we process payment details via third-party providers; we do not store full card numbers on our servers.
  • Device and technical data: Device type, operating system, app version, and general usage data (for example, feature usage) to improve the Service.

3. How We Use Your Information

We use your information to:

  • Provide, maintain, and improve the UMMA app and services.
  • Deliver announcements, events, and community content to you.
  • Process donations and payments and send related confirmations.
  • Verify identity and help community admins manage membership.
  • Send important service updates and, with your consent, marketing communications.
  • Comply with legal obligations and protect our rights and users' safety.

To show donations in your currency, the website looks up the country of your IP address on our own server, using GeoLite2 data created by MaxMind (maxmind.com). The address is not stored or shared, and you can change the currency at the bottom of any page.

4. Data Sharing and Disclosure

Your community content is visible to members and admins of the communities you join, as configured by those communities. We do not sell your personal data. We may share information with:

  • Service providers (for example, hosting, analytics, and payment processors) under strict agreements.
  • Double the Donation, to find out whether your employer matches your donation and to send you its instructions.
  • Law enforcement or regulators when required by law or to protect rights and safety.
  • Other parties with your consent or at your direction.

On ummafoundation.org we use measurement tags (Google Tag Manager, Google Analytics and the Meta Pixel) to see which campaigns bring donors here. They load when you arrive and stop if you choose Opt out on the cookie banner; a browser Global Privacy Control signal counts as opting out. In the EU, the EEA, the UK and Switzerland they wait until you choose OK. Until you answer there, Google receives only basic counts of visits and donations, with no cookies and nothing that identifies you; Opt out or Global Privacy Control stops even that. Your choice is stored on this device and travels with any donation you make, so our servers report no conversion for someone who opted out. When you donate or write to us, Google Ads also receives your email in encoded (hashed) form, never the address itself, only to tell us whether an ad brought you; opting out stops that too. Opting out changes nothing about donating. Change your answer any time with Cookie settings, at the bottom of any page.

5. Data Security and Retention

We use enterprise-grade encryption for data in transit and at rest. We retain your information for as long as your account is active or as needed to provide the Service, comply with law, or resolve disputes. You may request deletion of your data subject to applicable law.

6. Your Rights (Including GDPR)

Depending on where you live, you may have the right to access, correct, delete, or port your personal data, object to or restrict certain processing, and withdraw consent. You can exercise these rights through the app settings or by contacting us. You also have the right to lodge a complaint with a supervisory authority. We respond to such requests in accordance with applicable law.

7. Children's Privacy

The Service is not directed at children under 16. We do not knowingly collect personal data from children under 16. If you believe we have collected such data, please contact us so we can delete it.

8. International Transfers

Your information may be processed in countries other than your own. We ensure appropriate safeguards (for example, standard contractual clauses) are in place where required by law.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via the app or email. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.

10. Contact Us

For privacy-related questions or to exercise your rights, contact us at hello@ummafoundation.org . UMMA Foundation is responsible for the processing of your data in connection with the UMMA app and this policy.