Who we are

fundmyimam.org is an independent community project run by Mustaque Ali in Delhi, India. We run a directory that helps people find and support verified masjids, madrasas and imams.

For any question about your data, email mustaque824@gmail.com.

What we collect

When an institution registers

• Institution name and type, area and PIN code
• Imam or in-charge name, phone number and email
• Years serving, current need and a short description
• Payment details: UPI ID, account holder name, bank name, account number, IFSC and payment QR image
• Up to two photos of the masjid or madrasa, if you choose to add them

When you pay the listing fee

• The payment screenshot you send us on WhatsApp, so we can confirm your payment

When you use the contact form

• Your name, email, reason for contact and message

Donors

You pay the institution directly from your own UPI app or bank, so we never see your payment, bank or card details, or how much you give.

• Monthly reminders (optional): if you ask for a monthly reminder, we keep your email address and the masjid you chose. We first email you a link to confirm, and every reminder has an unsubscribe link.
• "I've donated" button (optional): this only adds one to an anonymous count shown on the listing. We don't record who tapped it or any amount. To stop the same person counting twice, our server briefly keeps your IP address in memory (not in our database), and your browser remembers that you tapped it this month.

"Find a masjid near me" (optional)

If you tap it and allow location access, your browser sends your approximate location to our server. We round it to about 100 metres and ask OpenStreetMap which PIN code it's in. We don't store your location.

Technical data and visitor statistics

Like every website, our hosting and security providers process your IP address and basic browser information to deliver pages and to block abuse, such as too many requests from one place.

We use Cloudflare Web Analytics to count visits and see which pages are used. It doesn't use cookies, doesn't track you across other websites, and only shows us totals, not individual visitors.

What we show publicly

Once a listing is approved, these details are shown publicly so donors can find and pay the institution:

• Institution name, type, area and PIN code
• Imam or in-charge name, years serving, current need, description and photos
• Payment details: UPI ID, account holder name, bank name, account number, IFSC and QR image
• How many people tapped "I've donated" this month (a number only)

Phone numbers and email addresses are never shown publicly, including donors' reminder emails. Only our admin team can see them.

Only register payment details that belong to the institution and that you're comfortable sharing publicly.

How we use it

• To review and verify listings before they go live
• To show approved listings in the directory
• To email you about your registration, and to send institutions a private link to update their listing
• To send monthly reminders to donors who asked for them
• To reply to your messages
• To keep the site secure and prevent fraud

We don't sell, rent or trade your data, and we don't use it for advertising.

Who we share it with

We use a few service providers to run the site. They process data only to provide their service to us:

• Render: website hosting
• MongoDB Atlas: database storage
• Cloudflare: domain, security, fast page delivery and cookie-free visitor statistics
• Brevo: sending emails
• GitHub: storing private backups of our data and running our daily reminder job
• OpenStreetMap: turning a rounded location into a PIN code, only when you use "near me"
• WhatsApp: only if you choose to message us there

Some of these providers' servers may be outside India. We may also share information if the law requires it.

Cookies and browser storage

We don't use advertising or tracking cookies.

• The registration form keeps your progress in your browser (session storage) so a page refresh doesn't lose it. It's cleared when you finish or close the tab.
• Your browser also remembers, for the current tab only, that the logo animation has already played and whether you closed an announcement, so these don't repeat on every page.
• If you tap "I've donated", your browser remembers it for that month so the button doesn't count you twice.
• None of this browser storage contains personal information.
• Cloudflare may set a strictly necessary security cookie to protect the site from bots.

How long we keep it

• Approved listings: while the listing is active on the site
• Registrations that aren't approved, and contact messages: only as long as needed to handle your request, refund or question
• Payment screenshots: only as long as needed to verify the payment and handle any refund
• Donor reminder emails: until you unsubscribe. If you never confirm your sign-up, we delete it after 7 days.
• Backups: kept privately for up to 90 days, then deleted automatically

You can ask us to delete your data at any time.

Your rights

Under India's Digital Personal Data Protection Act, 2023, you can ask us to:

• Show you the data we hold about you
• Correct or update it
• Delete it, or remove your listing
• Withdraw your consent. We'll then remove your listing from the site.

Email mustaque824@gmail.com, ideally from the email address you registered with. We usually reply within 2 working days.

Grievance contact: Mustaque Ali, mustaque824@gmail.com

Security

The site uses HTTPS encryption, the admin area is password protected, and only our admin team can see private details. No system is 100% secure, so please tell us if you notice anything suspicious.

Children

The site isn't meant for anyone under 18. Institutions must be registered by an adult who is responsible for them.

Changes to this policy

We may update this policy from time to time. When we do, we'll change the date at the top of this page. See also our Terms of Use.