Privacy Policy

Information we collect

Depending on how you use BCAT, we may collect:

• Account information, including name, email address, phone number, authentication identifiers, and assigned roles.
• Order and fulfillment information, including selected items, prices, pickup or delivery choice, delivery address when needed, order status, messages, and cash-payment records.
• Vendor, staff, driver, and applicant information submitted for onboarding, review, business operations, or support.
• Device-notification tokens and limited technical, diagnostic, security, and recovery information used to deliver alerts and protect the service.
• Invitation recipients, organizations, message content, follow-up notes, delivery-service references, and related admin email records.
• Information you voluntarily send through support requests, beta reports, or website forms.

How we use information

We use information to provide and secure accounts; process and coordinate orders; connect authorized customers, vendors, staff, and drivers; deliver notifications; review applications; respond to support requests; prevent misuse; improve reliability; satisfy legal obligations; and operate controlled pilots. BCAT does not use a person’s race or religion to determine whether they may participate.

How information is shared

We share information only as reasonably necessary to operate the requested service—for example, with the vendor fulfilling an order, an assigned driver completing a delivery, an authorized staff member, or service providers supporting authentication, hosting, storage, notifications, and security. Information may also be disclosed when required by law, to protect people or the service, or as part of a business transaction subject to appropriate safeguards.

BCAT does not sell personal information.

Location and delivery

Marketplace may use addresses entered for delivery and may display simulated route or tracking previews. With your permission, it also uses device location to recommend a nearby Masjid. Unless the app clearly requests permission and says otherwise, BCAT does not collect continuous device GPS location. If live location features are introduced, we will provide an appropriate notice and permission choice before collection.

Masjid Connect: private learning and local profiles

Your local community profile may contain a display name, email, age group, community grouping, selected Masjid and requested role. A local profile does not verify your identity or grant Masjid administrator access. Local prayer-group examples, including names, posts, invitation codes and meeting coordinates, stay on that device; they do not create a shared online group.

Quran and Hadith bookmarks, reading position, Arabic learning progress and the free iPad notebook are stored locally. Notebook entries can include typed notes, Apple Pencil handwriting and references to passages. Private notebook files use device file protection and are excluded from device backup. BCAT does not upload handwriting for recognition or AI training. Exporting a notebook PDF shares a copy with the destination you choose, whose privacy and retention rules then apply.

Optional private prayer recordings and imported audio remain on your device and are excluded from backup. Obtain permission from anyone you record. They are not automatically sent to your Watch, BCAT staff or other users. Optional prayer-motion examples use supported wrist or headphone sensors and remain local; they are not automatically uploaded to train a remote prayer engine.

Settings → Privacy & Data provides local deletion controls. Delete Learning Progress also removes notebook notes and handwriting, private prayer recordings and saved motion examples. Local deletion does not remove copies you exported, data on another device, server submissions or a separate Marketplace account. Device passcode and biometric checks are handled by Apple; BCAT does not receive biometric templates.

Prayer preferences, location and reminders

With permission, Masjid Connect uses location to find a nearby Masjid, calculate prayer times and support Qiblah direction. Calculation method, school of thought, fasting preferences, selected Masjid and reminder choices may reveal religious practices. These preferences are stored locally. If you explicitly enable sharing with Marketplace, limited prayer and fasting preferences are shared through a local Keychain access group on that device, not included in vendor orders. You can turn sharing off.

Enabled reminders are scheduled through Apple’s notification system. Reminder text may appear on a lock screen or paired Watch according to your system settings. The phone and Watch may exchange a limited dated prayer schedule and companion preferences. Scheduling is renewed when the app runs; reminders are not a guarantee of continuous background operation. You can change reminder permissions in system settings.

Microphone, speech practice and content providers

Optional spoken practice requires microphone and speech-recognition permission. The app requests on-device recognition when supported. When on-device recognition is unavailable, Apple’s speech service may process audio according to Apple’s permissions and privacy terms. Device-generated speech and private recordings are labelled separately from sourced human Quran recitation. Practice feedback is not a certification of religious correctness.

Online Quran, Hadith, recitation, public Masjid information and media requests connect to BCAT and relevant content providers. Network services receive information necessary to respond, such as your IP address and requested resource. Content Sync checks for source corrections and withdrawals. Offline copies use device storage; removing content downloads removes downloaded source content and recitations while preserving personal learning data. TV and Watch storage may be evicted by the system.

Opening a publicly listed YouTube, social, Zoom or Teams link connects you to that provider. Private sessions may require its own account and permissions. BCAT does not grant access to a private meeting merely because its organizer has a public listing.

Administrator accounts and submitted information

BCAT administrator and organization services use server authentication and authorization, separate from a local community profile. Administrator sign-in, membership or media requests, organization recommendations, contact discovery, feedback and support submissions can send the information entered and relevant organization references to BCAT’s servers and service providers. Contact discovery uses publicly listed business contact details; it does not grant permission to publish private contact information.

Server submissions are retained for review, service delivery, security and applicable recordkeeping needs; they are not automatically deleted when a local profile is removed. Contact us to request access, correction or deletion of server-held information. Authentication, hosting, storage, notifications and abuse protection may be provided through Apple, Firebase/Google and other providers used for the requested feature. Paid media plans and broadcast proposals do not silently authorize a charge or activate a session.

Invitations and email

BCAT uses an email service provider to deliver authorized business and Masjid invitations and stores recipient, message, send-status, and follow-up records. Replies to the admin mailbox may be handled by our mailbox provider; automatic import into the app depends on the receiving integration being enabled. If you prefer no further invitations, reply to the invitation or contact us.

Payments

Where enabled, Marketplace uses payment providers such as Stripe and Apple Pay for electronic payments, and Uber Direct for supported delivery fulfillment. Payment providers handle payment credentials; BCAT receives transaction identifiers, amounts and payment or refund status needed for orders and reconciliation. Delivery providers receive the pickup, recipient, contact and delivery instructions necessary to fulfill the request. Sandbox tests use test transactions and do not move real money. Available methods depend on the vendor and service configuration.

Masjid Connect’s reading, reminders and private notebook do not require a paid membership. Any optional paid organization or media service must disclose its price and payment terms before purchase.

Retention, security, and choices

We retain information only for as long as reasonably necessary for service, safety, dispute resolution, legal, accounting, and operational needs. BCAT uses role-based access controls and other safeguards, but no system can guarantee absolute security.

You may update available profile details in the app and request permanent account deletion through Account & Security. BCAT aims to complete verified deletion requests within seven days, except where limited information must be retained for legal, security, fraud-prevention, or transaction-record obligations; retained records may be minimized or de-identified where appropriate.

Children and changes

BCAT is not directed to children under 13, and we do not knowingly collect their personal information. We may update this policy as the service changes. Material updates will be reflected by a new effective date and, when appropriate, an additional notice.