Privacy Policy

Last updated: 2 July 2026

Guiding Light Dawah ("we", "us") is committed to protecting your privacy. This policy explains what we collect, why, and how we protect it, in line with UK GDPR.

This app deals with information about your religious practice, and in future may include health-related and mental-wellbeing features. Under UK GDPR, this is "special category data" and is held to a higher standard of care than ordinary personal information. We treat it accordingly throughout this policy.

1. What we collect

Account information: your email address, used solely for passwordless magic-link sign-in. We do not store passwords.
Usage data: how you use the site and (in future) the app — for example, akhlaq reflections, Quran progress, or preferences — only where you choose to use those features.
Technical data: IP address and device information, collected briefly for security purposes (bot protection, fraud prevention) via Cloudflare Turnstile.

2. What we don't do

We do not sell your data.
We do not run third-party advertising or share your data with advertisers.
We do not use your religious or personal reflections for anything beyond providing the service you asked for.

3. How we use your data

Solely to provide and improve the service: authenticating your account, saving your progress and preferences, keeping the platform secure, and — only if you opt in — connecting you with features like therapist referrals or community tools as they launch.

4. Who we share it with

We use a small number of processors to run the service, each bound by data processing agreements:

Cloudflare — hosting, security, and bot protection (Turnstile)
Brevo — sending magic-link sign-in emails

We do not share your data with any other third party without your explicit consent, except where required by law.

5. Children's data

Where a Kids Mode or family account feature is introduced, it will require verifiable parental consent and will collect the minimum data necessary, in line with the UK's Age Appropriate Design Code. Standard accounts are not intended for children under 13.

6. Your rights

Under UK GDPR, you have the right to access, correct, delete, or export your data, and to withdraw consent at any time. To exercise any of these rights, contact us at the address below.

7. Data retention

We keep your data only as long as your account is active, or as needed to meet legal obligations. You can request full deletion of your account and associated data at any time.

8. Security

We use encryption in transit and at rest, HttpOnly session cookies, and field-level encryption for particularly sensitive data categories. Admin access to user data is role-restricted and logged.

9. Changes to this policy

We'll update this page if our practices change, and note the date at the top. Material changes will be communicated directly where appropriate.

10. Contact

Questions about this policy or your data: connect@guiding-light-dawah.com