Este documento solo se publica en francés, inglés, árabe y ruso: se muestra la versión en inglés.

Privacy policy

Last updated: 2026-10-27. This policy explains what data NoorSpot collects, why, and your rights under the General Data Protection Regulation (GDPR).

1. Data controller

MasjidSpot LLC, No. 6 Jalan Wangsa Perdana 1, 53300 Kuala Lumpur, Malaysia. Contact: contact@noorspot.com.

2. Data we collect

• Account: email address, password (stored hashed, never readable), name.

• Profile (optional): phone, date of birth, city, gender, bio, avatar.

• Location: GPS position used on your device to show nearby mosques, the Qibla direction and prayer times. It is not stored on our servers, except when you add a place.

• Contributions: places added, reviews, ratings, photos, questions and answers, reports, confirmations.

• Usage: favorites, prayer history, badges and good deeds.

3. Purposes and legal bases

• Providing the service (account, map, prayer times, contributions): performance of a contract (Art. 6.1.b).

• Moderation and community safety: legitimate interest (Art. 6.1.f).

• Location and notifications: your consent, which you can withdraw at any time in your phone settings (Art. 6.1.a).

4. Who can see your data?

• Publicly: your name, avatar, reviews, photos, questions, answers and good-deeds score.

• Never publicly: email, phone, date of birth, gender, city, bio.

• NoorSpot administrators can see your name and email for moderation.

• We do not sell your data or share it for advertising.

5. Hosting and processors

Data hosted by Supabase (Union européenne). Maps and directions: Google Maps / OpenStreetMap. Prayer times: calculation services (Aladhan, JAKIM). Quran recitations: alquran.cloud.

6. Retention

Your data is kept as long as your account exists. Accounts inactive for 3 years are deleted. When you delete your account, your personal data is erased; places you added remain visible but anonymised.

7. Security

Encrypted connections (HTTPS), hashed passwords, row-level security rules in the database, administrator credentials checked server-side.

8. Your rights

You have the right of access, rectification, erasure, portability, restriction and objection.

• Edit your information: Profile > Edit profile.

• Export your data: Settings > Export my data.

• Delete your account: Settings > Delete my account.

For any other request: contact@noorspot.com. You may also lodge a complaint with your data protection authority (in France: CNIL, www.cnil.fr).

9. Children

The app is not intended for children under 15 without parental consent.