1. Who we are
Masjid Media (the "App") is operated by PT. Sarana Infotekno Mitra Solusi ("we", "us", "our"), the data controller responsible for your personal data under this policy.
You can contact us about privacy matters at:
- Email: solusi@simsinfotekno.com
- Phone: +62 274 6050990
2. Scope and acceptance
This policy explains what personal data the App collects, why we collect it, how we use and share it, and the rights you have. It applies to the Masjid Media mobile and web applications and the related backend services. By creating an account or using the App, you acknowledge this policy. If you do not agree, please stop using the App.
You may browse certain public content (for example, a masjid's public page opened via a QR code) without signing in.
3. Personal data we collect
We collect only the data needed to provide the App's features:
- Account data. When you register, we collect your name, email address, and password. Passwords are stored only in hashed form by our authentication provider; we never see your plaintext password.
- Google Sign-In data. If you choose to sign in with Google, we receive your email address and basic profile information (name, and profile photo if available) from Google, used to create or access your account.
- Location data. With your permission, the App reads your device's GPS location to find nearby masjids. Location is used at the moment you request a nearby search; you can deny or revoke this permission in your device settings, in which case nearby discovery is unavailable.
- Content you upload. If you manage a masjid, you may upload images (event covers, gallery photos, kiosk slides) and documents. Images intended for public masjid pages are stored in a publicly readable location; documents are kept in a private, members-only location.
- Push notification token. If you enable notifications, we collect a device push token (via Firebase Cloud Messaging) so we can deliver notifications.
- Usage and analytics data. We use Firebase Analytics to collect app usage events, screen views, approximate device and app information, and an app-level identifier associated with your account, to understand and improve the App.
- Subscription and purchase data. If you purchase a subscription, the transaction is processed by the relevant payment provider (Google Play Billing or the Duitku payment gateway). We receive purchase and subscription status; we do not collect or store your card or bank details — these are handled by the payment provider.
- Preferences stored on your device. Settings such as language, theme, distance unit, and search radius are stored locally on your device.
4. How and why we use your data, and our lawful bases
We process your data for the following purposes. Where the GDPR applies, the relevant lawful basis (Article 6) is shown; under Indonesia's Personal Data Protection Law (UU No. 27 of 2022), we rely on the corresponding lawful grounds, including your consent and the necessity of processing to provide the service you request.
| Purpose | Lawful basis |
|---|---|
| Create and manage your account; authenticate you | Performance of a contract |
| Provide core features (masjid pages, events, kiosk, uploads) | Performance of a contract |
| Show nearby masjids using your location | Consent (device permission) |
| Send push notifications you enable | Consent |
| Process subscriptions and payments | Performance of a contract |
| Analyse usage to maintain and improve the App | Legitimate interests |
| Comply with legal obligations and prevent abuse | Legal obligation / legitimate interests |
5. How we share your data
We do not sell your personal data. We share data only with service providers (sub-processors) who help us run the App, and only as needed:
- Supabase — backend hosting, authentication, database, and file storage.
- Google Firebase — analytics (Firebase Analytics) and push messaging (Firebase Cloud Messaging).
- Google — Google Sign-In and Google Play Billing.
- Duitku — payment gateway for processing subscription payments.
- OpenStreetMap — map tiles displayed within the App.
We may also disclose data where required by law, to protect our rights, or in connection with a corporate transaction.
Public content notice. Information you publish for a masjid (such as its name, description, events, and public images) may be displayed on public pages accessible via a QR code or link, and is therefore visible to anyone with that link. Do not place private information in fields intended for public display.
6. International data transfers
Our service providers (including Supabase and Google Firebase) may store and process data on servers located outside Indonesia. Where we transfer personal data internationally, we take steps to ensure an adequate level of protection, such as relying on the provider's contractual safeguards (including standard contractual clauses where applicable).
7. Data retention
We retain personal data for as long as your account is active or as needed to provide the App, and afterwards only as required to comply with legal obligations, resolve disputes, and enforce our agreements. When you delete your account, we delete or anonymise your personal data within a reasonable period, except where retention is legally required.
8. How we protect your data
We apply appropriate technical and organisational measures, including encryption of data in transit (HTTPS), hashed password storage, and row-level security rules that restrict access to data based on your role. No method of transmission or storage is completely secure, but we work to protect your data against unauthorised access.
9. Your rights
Subject to applicable law, you have the right to:
- Access the personal data we hold about you;
- Rectify inaccurate or incomplete data;
- Erase your data ("right to be forgotten");
- Restrict or object to certain processing;
- Data portability — receive your data in a portable format;
- Withdraw consent at any time, without affecting prior processing;
- Lodge a complaint with the relevant data protection authority.
To exercise any of these rights, contact us at solusi@simsinfotekno.com. You can also update your profile and manage permissions directly within the App and your device settings. We will respond within the period required by applicable law.
10. Children's privacy
The App is not directed at children under the age required for valid consent in their jurisdiction. We do not knowingly collect personal data from such children. If you believe a child has provided us personal data, contact us and we will delete it.
11. Cookies and local storage
On the web, and on your device, we use local storage (and equivalent technologies) to remember your preferences and keep you signed in. These are necessary for the App to function. We do not use third-party advertising cookies.
12. Changes to this policy
We may update this policy from time to time. The "Last updated" date above reflects the latest version, and material changes will be communicated through the App or our website. Your continued use of the App after an update constitutes acceptance of the revised policy.
13. Contact us
PT. Sarana Infotekno Mitra Solusi Email: solusi@simsinfotekno.com Phone: +62 274 6050990