PRIVACY POLICY

Introduction

At Elzar Shariah Solution Sdn Bhd ("Company", "we", "us", or "our"), we are committed to safeguarding your privacy and ensuring the protection of your personal data. This Privacy Policy outlines how we collect, use, store, and disclose your personal information when you use the Masabih.org mobile application (“App”). Masabih.org is designed to provide users with translations, brief commentaries (syarah), and facilitate swift searches of hadiths from Mishkat al-Masabih and nine other primary hadith collections.
This Privacy Policy complies with applicable international data protection laws and principles, including the General Data Protection Regulation (GDPR), the Malaysian Personal Data Protection Act 2010 (PDPA), and other relevant privacy frameworks in the jurisdictions in which we operate.
By accessing or using the App, you acknowledge and agree to the practices described in this Privacy Policy. If you do not agree with our policies and practices, please do not use the App.

Information We Collect

We collect the following categories of personal and non-personal data through your use of the App:
  1. Personal Data Provided by You
    • Contact Information: When you register an account, subscribe to updates, or contact us, we may collect your name, email address, and other contact details.
    • Account Credentials: If registration is required, we collect your username and password.
    • Feedback and Correspondence: We collect information you provide when you contact us for support, give feedback, or participate in surveys.
  2. Automatically Collected Data
    • Device Information: We collect information about the mobile device you use to access the App, such as the device type, model, operating system, device ID, IP address, and device language.
    • Usage Data: We collect anonymized data on how you interact with the App, including the features accessed, pages viewed, search terms used, and the time spent on each section.
    • Log Data: Standard server logs are collected, which may include timestamps, crash reports, and error logs.
  3. Location Data
    We may collect your device’s approximate geolocation with your explicit consent, solely to customize content by region.
  4. Cookies and Similar Technologies
    The App may use analytics technologies (e.g., Firebase Analytics, Google Analytics for Firebase) to enhance performance. These tools may collect certain usage data as described above.

How We Use Your Information

We process your personal data for the following lawful purposes:
  • To provide, maintain, and improve the App’s functionality and content delivery.
  • To manage your account and preferences.
  • To personalize your experience with tailored content suggestions based on usage patterns.
  • To respond to inquiries, feedback, and support requests.
  • To notify you about significant changes to the App or our Privacy Policy.
  • To conduct internal research and data analytics for service improvement.
  • To detect, prevent, and address technical issues, security breaches, or violations of our Terms of Service.
  • To comply with applicable legal obligations and protect our legal rights.
We process your personal data only when there is a legal basis for doing so under applicable data protection laws, including your consent, contract necessity, legal obligations, or our legitimate interests.

Data Sharing and Disclosure

We do not sell or rent your personal data to third parties. However, we may disclose your information in the following limited circumstances:
  1. Service Providers
    We may engage third-party service providers for hosting, analytics, authentication, or customer support. These providers are bound by contractual obligations to safeguard your personal data and may only use it for the purposes specified by us.
  2. Legal Compliance
    We may disclose your information where required by law, regulation, legal process, or government request. This includes protecting the rights, safety, and property of users, the public, or our Company.
  3. Business Transfers
    In the event of a merger, acquisition, restructuring, or sale of assets, your data may be transferred to the new entity, subject to the same commitments under this Privacy Policy.

Data Retention

We retain personal data only as long as necessary to fulfill the purposes outlined in this Policy, unless a longer retention period is required or permitted by law. Non-personal and anonymized data may be retained indefinitely for analytical and research purposes.
User accounts that remain inactive for more than 24 months may be deleted, subject to prior notification where applicable.

Data Security

We employ industry-standard technical and organizational safeguards to protect your data from unauthorized access, disclosure, alteration, or destruction. These include:
  • Encryption of sensitive data during transmission and at rest.
  • Access controls and authentication mechanisms.
  • Secure cloud storage compliant with recognized security standards.
While we strive to use commercially acceptable means to protect your personal data, no method of transmission over the internet or method of electronic storage is 100% secure.

International Data Transfers

Due to our global infrastructure, your personal data may be transferred to and processed in countries outside your jurisdiction, including the United States, the European Union, and Malaysia. Where data is transferred internationally, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses or reliance on adequacy decisions under relevant data protection laws.

Your Rights and Choices

Depending on your jurisdiction, you may have the following rights:
  • Access: Request access to the personal data we hold about you.
  • Rectification: Request correction of inaccurate or incomplete data.
  • Erasure: Request deletion of your data under certain conditions ("right to be forgotten").
  • Restriction: Request limitations on the processing of your data.
  • Data Portability: Receive a copy of your data in a portable format.
  • Objection: Object to the processing of your data for certain purposes, such as direct marketing.
  • Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.
To exercise these rights, please contact us at +6011-2067 7990. We may require verification of your identity before fulfilling your request.
The App may contain links to third-party websites, tools, or services. This Privacy Policy does not apply to such third parties. We encourage you to review the privacy policies of any third-party services before using them.

Changes To This Privacy Policy

We reserve the right to modify or update this Privacy Policy at any time in accordance with legal, operational, or technological changes. Any changes will be posted on this page with a revised “Last Updated” date. If the changes are significant, we will provide a more prominent notice or obtain your consent where required by law.