PRIVACY POLICY

1. INFORMATION WE COLLECT

1.1 Information from UmmahPass

When you sign in with UmmahPass, we receive:

• Your name and email address
• Profile picture (if provided)
• UmmahPass unique identifier
• Country of residence

1.2 Information You Provide

We collect information you provide directly:

• Soldiers: Skills, availability, bio, Stripe Connect account details
• Commanders: Organization name, type, description, website
• Missions: Descriptions, instructions, files, submissions
• Communications: War room messages, support requests

1.3 Automatically Collected Information

We automatically collect:

• IP address and device information
• Browser type and version
• Pages visited and features used
• Time spent on the platform
• Referring website or app

2. HOW WE USE YOUR INFORMATION

We use your information to:

• Provide and maintain the Platform
• Process payments and payouts via Stripe
• Match Soldiers with relevant missions
• Communicate about missions, submissions, and account activity
• Send notifications (push, email) about urgent matters
• Enforce our Terms of Service and resolve disputes
• Improve the Platform and develop new features
• Comply with legal obligations

3. INFORMATION SHARING

3.1 With Other Users

Certain information is visible to other users:

• Soldiers: Name, profile picture, rank, completed missions count, skills, and ratings are visible to Commanders
• Commanders: Organization name, type, and mission history are visible to Soldiers
• War room messages are visible to all participants on that mission

3.2 With Service Providers

We share information with trusted third parties:

• Stripe: Payment processing and payouts
• UmmahPass: Authentication and identity verification
• Cloud Providers: Data hosting and storage
• Analytics: Understanding platform usage (anonymized)

3.3 Legal Requirements

We may disclose information when required by law, court order, or to protect rights, safety, and property.

4. DATA RETENTION

We retain your information for as long as your account is active or as needed to provide services. After account deletion:

• Profile data is deleted within 30 days
• Transaction records are retained for 7 years (legal requirement)
• Anonymized analytics data may be retained indefinitely

5. DATA SECURITY

We implement appropriate security measures:

• Encryption in transit (HTTPS/TLS)
• Encryption at rest for sensitive data
• Regular security audits and updates
• Access controls and authentication
• Secure payment processing via Stripe (PCI-DSS compliant)

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

6. YOUR RIGHTS

Depending on your location, you may have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate information
• Deletion: Request deletion of your data
• Portability: Receive your data in a portable format
• Opt-out: Unsubscribe from marketing communications
• Restrict Processing: Limit how we use your data

To exercise these rights, contact us at privacy@ummah.army

7. COOKIES AND TRACKING

We use cookies and similar technologies for:

• Essential cookies: Required for the Platform to function (authentication, security)
• Analytics cookies: Help us understand how users interact with the Platform
• Preference cookies: Remember your settings and preferences

You can manage cookie preferences through your browser settings.

8. INTERNATIONAL TRANSFERS

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers, including Standard Contractual Clauses where required.

9. CHILDREN'S PRIVACY

UmmahArmy is not intended for users under 18 years of age. We do not knowingly collect information from children. If you believe a child has provided us with personal information, please contact us.

10. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We will notify you of significant changes via email or platform notification.

11. CONTACT US

For privacy-related questions or to exercise your rights:

12. GDPR COMPLIANCE (EEA USERS)

For users in the European Economic Area, we process data under the following legal bases:

• Contract: To provide the services you requested
• Legitimate Interest: To improve and secure the Platform
• Consent: For optional features and marketing
• Legal Obligation: To comply with applicable laws

You have the right to lodge a complaint with your local data protection authority.