mektep.
Privacy
Privacy policy
1. Who is responsible for your data
Stichting Mektep (“Mektep”, “we”) is the controller for the personal data described here.
- Address: Diepenhorstlaan 13, Floor 1, Number 109#, 2288 EW Rijswijk, Netherlands
- KvK number: 92409660
- Privacy contact: info@mektep.nl
2. What this policy covers
The Mektep app helps members of our community register their attendance at Mektep lessons, collect points for attending, and see how their programme group is doing. This policy explains what we do with your data when you use the app.
Features that exist elsewhere in the Mektep product plan — donations, the point shop, questions to the hoca, prayer times and qibla — are not active in version 1. When we switch any of them on we will update this policy first and tell you in the app.
3. What we collect and why
3.1 Your account
When you register we store your email address, a securely hashed version of your password, your first and last name, the display name shown to other members, your preferred language, and the city recorded on your profile.
If you sign in with Google or Apple instead, we receive and store the identifier that provider gives us for you, your email address, and your name if the provider shares it. We never see your Google or Apple password. If you use Apple’s “Hide My Email”, we only ever hold the relay address Apple gives us — we do not know your real one.
3.2 Your programme choice
You choose whether you attend the men’s or the women’s programme. We store that choice because it determines which lesson days you see and which attendance sessions you can check in to. Once set, it cannot be changed in the app.
3.3 Your attendance and points
Each time you check in we record which lesson session it was, when you requested it, whether it was approved or rejected, who approved it, and any reason given for a rejection. We also keep your points balance and the individual point movements behind it.
3.4 Your location — used, not stored
To confirm you are actually at the Mektep when you check in, the app reads your device’s precise location and sends the coordinates and their accuracy to our server. The server compares them with the Mektep’s location, answers “near” or “not near”, and does not store your coordinates. We keep no location history, and we never read your location in the background — only when you open the home screen or pull to refresh it.
You can refuse the location permission. Check-in will then not be able to confirm you are on site.
3.5 Technical data
We store account creation and last-login timestamps, and the refresh tokens that keep you signed in between sessions. Our servers keep operational logs needed to run and secure the service.
3.6 What we do not do
We do not use advertising, we run no analytics or tracking SDKs, we do not profile you, we do not sell or rent your data, and we send no marketing email. The app contains no Firebase or Google Analytics integration.
4. Legal grounds
| What | Ground |
|---|---|
| Running your account, attendance and points | Performance of our agreement with you (GDPR art. 6(1)(b)) |
| Location check at check-in | Performance of our agreement with you (art. 6(1)(b)) |
| Attendance reports to programme leaders | Our legitimate interest in running the lessons (art. 6(1)(f)) |
| Security, abuse prevention, operational logs | Our legitimate interest (art. 6(1)(f)) |
| Data that reveals religious belief (see below) | Your explicit consent (art. 9(2)(a)) |
Using an app for Islamic education says something about your religious beliefs, and under the GDPR that is a special category of personal data needing a stricter ground than ordinary data. We rely on your explicit consent, given when you create your account. You can withdraw it at any time by deleting your account (section 7). Withdrawing does not affect what we did lawfully beforehand.
6. How long we keep it
We keep your account, attendance history and points for as long as your account exists. Delete your account and they go with it, immediately and permanently (section 7).
Two honest exceptions:
- Attendance emails already sent. We keep a copy of each report we sent as a record of what went out, and those copies contain the names and attendance of the members covered. Copies also sit in recipients’ mailboxes, beyond our control. Deleting your account removes neither. Contact us at info@mektep.nl if you want these addressed and we will do what is reasonably possible.
- Operational logs and backups, which roll over on their own schedule of up to 7 days.
7. Your rights
Under the GDPR you may ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or hand it to another provider. You may also withdraw the consent described in section 4.
Deleting your account is built into the app: Hesabım → account
settings → delete account, then type MEKTEP to confirm. This immediately and
permanently deletes your account, profile, check-in history, points and point movements. It
cannot be undone.
Getting a copy of your data is not yet available in the app in version 1. Email info@mektep.nl and we will send it within one month.
For anything else, email info@mektep.nl. If you are unhappy with how we handle it you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).
8. Children
In the Netherlands, children under 16 need permission from a parent or guardian before an online service may process their data on the basis of consent.
9. Security
Passwords are stored hashed, never in readable form. Traffic between the app and our servers uses HTTPS. Access to the database and to admin functions is limited to the people who need it, and the settings that decide how the app behaves are restricted further still.
No system is perfectly secure. If a breach affects you and carries real risk, we will tell you and the Autoriteit Persoonsgegevens as the law requires.
10. Changes
If we change this policy we will update the date at the top and, for anything that materially affects you, tell you in the app before the change takes effect.
11. Contact
Stichting Mektep
Diepenhorstlaan 13, Floor 1, Number 109#, 2288 EW Rijswijk, Netherlands
info@mektep.nl