Privacy Policy

Our Commitment to Your Privacy

At Huffad, we consider your privacy a sacred trust (amanah). Our mission is to connect memorisers of the Qur'an in a safe, secure, and respectful environment. This policy explains what personal information we handle, why we need it, and how we protect it in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using the Huffad app, you agree to the terms outlined in this policy.

Who We Are (Data Controller)

The entity responsible for your personal data is:

Leesahga Ltd
United Kingdom
Email for privacy inquiries: huffad.info@gmail.com

Summary: The Information We Handle

We are committed to data minimisation, meaning we only handle the data that is absolutely necessary. Here's a simple breakdown:

• To Verify You (Handled Once & Deleted): Your ID document and a live facial image. We use this only to confirm you are a real person and ensure community safety. This data is permanently deleted immediately after your verification is complete.
• To Run Your Account (The Only Data We Keep): Your name, email address, and general usage data (like session history). This is needed for the app to function.

We never sell your data. We never store your verification documents after you are approved.

Detailed Breakdown of Data Processing

1. Information for Account Verification (Temporarily Processed)

To maintain the integrity and safety of our peer-to-peer community, we must verify that every user is a genuine individual. For this one-time process, we collect:

• Identification: A digital copy of a government-issued ID (e.g., Passport or Driving Licence).
• Live Facial Image: A photo or short video taken within the app to match against your ID.

Purpose: To prevent fake accounts, protect our community, and ensure users are who they say they are.

Retention: This highly sensitive data is processed for the sole purpose of verification and is permanently and irretrievably deleted from our systems the moment your account is approved.

2. Information for Your Active Account (Stored Securely)

To create and maintain your account and provide our services, we collect and store:

• Personal Details: Your full name and email address.
• App Usage Data: Information about your interactions with the app, such as session history, user reports, and crash logs. This helps us manage the community and improve the app.
• Device Information: Technical data such as your device type and operating system, which helps us diagnose bugs and optimise performance.

3. Legal Basis for Handling Your Data

We only process your data when we have a lawful reason to do so under UK GDPR:

• Contractual Necessity: We need your name, email, and usage data to provide the core service you signed up for—connecting you with other Huffad.
• Legitimate Interest: We perform identity verification to pursue our legitimate interest in protecting our community from harm and abuse.
• Consent: Where required, we will ask for your explicit consent before processing certain data.

Data Storage and Security

Your trust is paramount. We implement robust technical and organisational measures to protect your data:

• Storage Location: All account data is securely stored on Amazon Web Services (AWS) servers located in Ireland, which is within the European Economic Area (EEA) and adheres to data protection standards equivalent to the UK's.
• Security Measures: We use end-to-end encryption for communications, access controls, and regular security reviews to prevent unauthorised access to your information.

Data Sharing and Disclosure

We do not share your personal data with third parties for marketing purposes. Your data is only disclosed in the following, limited circumstances:

• Service Providers: We use AWS for secure cloud hosting. They act as a data processor and are bound by strict data protection agreements.
• Legal Requirements: We may be required to disclose information to law enforcement or other authorities if compelled by UK law. This would only apply to the account data we retain, as verification data is deleted.

Your Data Protection Rights

Under UK law, you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Correct any inaccurate or incomplete data.
• Erasure ('Right to be Forgotten'): Request the deletion of your personal data. You can do this at any time by deleting your account from the app's settings.
• Restrict Processing: Ask us to limit the way we use your data in certain circumstances.
• Data Portability: Receive your data in a structured, machine-readable format.
• Object: Object to us processing your data for reasons related to your specific situation.

To exercise any of these rights, please contact us at huffad.info@gmail.com.

Our Policy on Children

The Huffad app is intended for users who are at least 13 years of age. If you are a minor (generally under 18), you must have the permission of your parent or guardian to use our Services. We do not knowingly collect personal information from children under 13 without parental consent.

Changes to This Privacy Policy

We may update this policy from time to time to reflect changes in our practices or for legal reasons. We will notify you of any significant changes by email or through an in-app notification.

Contact Us & Making a Complaint

If you have any questions, concerns, or requests regarding your privacy, please contact us first:

huffad.info@gmail.com

If you are not satisfied with our response, you have the right to lodge a complaint with the UK's data protection authority, the Information Commissioner's Office (ICO).

Website: www.ico.org.uk