الشفافية

Government and legal requests

Every request from an authority for user data is logged with its legal basis, the country, whether we challenged it, what if anything was disclosed, and whether we were permitted to tell the person. Each report will state:

• how many requests we received, by country;
• how many we challenged, and what came of it;
• how many resulted in any disclosure, and how many we refused;
• how many people we were able to notify, and how many we were legally prevented from notifying.

What we cannot hand over

Some data is encrypted on your device with a key we never receive — an exemption reason, a Shahada record, private journey notes. We can be compelled to produce what we hold, and what we hold is ciphertext we cannot open. This is a design decision, not a legal position, and it is the reason the decision was made.

There is also no plaintext list of members' email addresses or phone numbers anywhere in our systems. Lookup works through a keyed hash, so "give us all users in this city" is not a query we are able to run.

Moderation

Each report will state:

• reports received and actions taken, by category;
• time to first human review;
• appeals lodged, and how many were upheld — including against us;
• actions reversed on review.

Two things we will not publish: a ranking of reviewers, because rewarding throughput produces worse decisions; and anything that would identify who reported whom.

Every decision is made by a person and cites a specific rule. Scholarly disagreement is not a violation, and a report amounting to "they follow a different school" is refused.

Security incidents

If personal data is exposed we will tell the people affected and the relevant regulator within the statutory deadline, and we will say what happened, what was exposed, and what we changed. We will publish the count and nature of incidents in each report, including ones where we concluded no notification was legally required — because "we decided not to tell anyone" is exactly the kind of thing a transparency report exists to surface.

Standing commitments

• No advertising, no attribution SDKs, no data brokers — so there is no advertising data to report on.
• No verification of anyone's worship or mosque attendance, so no such records exist to be requested.
• Private worship data, children's data and encrypted notes are never used to train any model.
• Our AI runs on our own infrastructure; questions are not sent to an outside model provider.

Contact

Legal and law-enforcement requests: [email protected]
Security reports: [email protected]