Privacy Policy

myShahada ("we," "us," or "our") is a platform that supports people on their journey to and within Islam. We are based in California, United States, and we are the data controller responsible for your personal information.

This policy explains what we collect, why, how we protect it, and what rights you have. Because our platform handles religious and conversion-related data, we hold ourselves to the highest standard of care. Here are the key points:

We only collect what we need to run the service. We never sell your data. We never use your data for advertising. We never share your religious identity with anyone. You can request access, correction, or deletion of your data at any time by emailing contact@myshahada.net.

1. What We Collect and Why

Account information — your name, email, and password — so you can sign in and access personalized features. You may also register with just an email to receive our newsletter or save content.

Shahada scheduling information — your name, date of birth, gender, email, phone (optional), nationality, preferred language, a government-issued ID for identity verification, and scheduling details — so we can arrange your ceremony and issue a certificate. Your ID is used only for verification, stored securely, and permanently deleted within 30 days of your ceremony.

Estate planning information — family details, assets, state of residence, and school of thought — so we can generate an Islamic will for you. This information is processed only during your active session and is never saved to our servers.

Learning and saved content — progress through educational programs, questions you submit to scholars, and any articles, verses, or notes you save — so we can deliver a personalized experience and track your learning.

Contact and newsletter information — your email and message content — so we can respond to inquiries and send daily Islamic guidance if you subscribe.

Location information — your GPS coordinates or a city you enter manually — so we can show you local prayer times, nearby mosques, and halal food options. We use this in real time and do not store it.

Usage and preference information — pages you visit, features you use, and preferences like language — so we can personalize your experience. For visitors without an account, this stays on your own device.

Analytics information — general site usage data such as page views, session length, and device type — so we can understand how the site is used and fix problems. We collect this only with your consent, and our analytics tools are configured not to track you unless you agree.

2. What We Do Not Collect

We do not collect your ethnicity, race, or national origin beyond the nationality needed for your certificate. We do not record audio or video of shahada ceremonies. We do not collect information from children under 13 (or under 16 in the EU/UK). We do not collect any data for advertising — myShahada is ad-free and always will be.

3. How We Protect Religious Data

Data related to your religious journey is among the most sensitive information that exists. Under European and UK data protection law it is classified as "special category" data, and under California law it is sensitive personal information. We process it only with your explicit consent and apply extra protections: shahada records and identity documents are encrypted; your religious identity is never disclosed to any third party; and ceremony audio or video is never recorded.

4. Cookies

We use a small number of cookies. Essential cookies keep you signed in and the site working — these are always active. Analytics and personalization cookies help us understand site usage and remember your preferences — these are only set if you accept them through our consent banner. You can change your choice at any time through the banner or your browser settings.

5. Who We Share Data With

We use a limited number of service providers to operate the platform, including providers for hosting, analytics, email delivery, content management, scheduling, and prayer time data. These providers process data on our behalf under contractual obligations and do not use your information for their own purposes.

We do not share your personal information with any third party for marketing or advertising. We do not sell or share your data for cross-context behavioral advertising.

6. International Data Transfers

Your data is stored and processed primarily in the United States. If you access myShahada from outside the US, including from the EU or UK, your data will be transferred to the US. Where required by law, we use appropriate safeguards such as Standard Contractual Clauses to protect your data during transfer.

7. How Long We Keep Your Data

We keep your data only as long as it is needed. Account information is kept until you delete your account. Shahada certificates are kept indefinitely because they may be needed for religious travel verification, unless you ask us to delete them. Identity documents are deleted within 30 days of your ceremony. Estate planning data is never stored beyond your session. Learning progress and saved content are kept until you remove them or delete your account. Analytics data is kept for up to 12 months. Newsletter subscriptions remain active until you unsubscribe. Contact messages are kept for up to 12 months.

8. Your Rights

You have the right to access the personal data we hold about you, correct anything that is inaccurate, request deletion of your data (including shahada records), receive a copy of your data in a portable format, withdraw your consent for analytics or newsletters at any time, and object to processing based on our legitimate interests.

To exercise any of these rights, email us at contact@myshahada.net. We will respond within 30 days. You may also appoint someone to act on your behalf.

If you are in the EU or UK, you also have the right to file a complaint with your local data protection authority.

9. Additional Rights for California Residents

If you live in California, you have the right to know what personal information we collect and why, to request its deletion, to request correction, and to not be treated differently for exercising your rights.

myShahada does not sell your personal information. We do not share it for behavioral advertising. We honor Global Privacy Control signals as a valid expression of your preferences.

10. Data Security

We protect your data with encryption both in storage and in transit, secure password handling, strict access controls, and regular security reviews. No system is perfectly secure, but we work to meet industry best practices at every level.

11. Data Breaches

If a breach affects your personal information, we will notify you and any required authorities within 72 hours of discovery.

12. Children

myShahada is not intended for children under 13 (or under 16 in the EU/UK). If you believe a child has provided us with personal data, please contact us and we will delete it.

13. Changes to This Policy

We may update this policy as our practices or legal requirements change. If we make significant changes, we will post a notice on our platform. The date at the top of this page shows when it was last revised.

14. Contact Us

If you have questions about this policy or want to exercise your rights, email us at contact@myshahada.net.