Who is responsible for your information
Darb Umrah is a product of Darb Labs. The registered company details will be published here before the app is open to people outside the private pilot.
For anything about your information, contact us through support@darbumrah.com. We have not appointed a data protection officer.
Your Umrah progress: only with your explicit consent
Your Tawaf and Sa'i counts, journey stages and the school of thought you choose show your religious practice, which UK law treats as special category information. The app always works on your phone. We keep this progress in your account only if you explicitly agree: when you join, or later in Settings. If you do not agree, it stays only on the phone where you record it. You can withdraw at any time; we then delete the copy in your account straight away, and your phone keeps its own.
Using an Umrah companion may itself suggest your faith. We use your account and trip details only to provide the app, never for advertising or anything else.
What we keep, and why
- Your email address, and a password hash if you set one
Why: Your account and sign-in codes.
Legal basis: Our agreement with you (the terms). - Sign-ins: when they started and expire, and the IP address and browser or device
Why: Keeping your account secure.
Legal basis: Legitimate interests (security). - Your pilot invitation and your confirmation that you are 18 or over
Why: Running an adults-only pilot.
Legal basis: Our agreement with you. - Your consent choices, and the version of the terms you accepted
Why: Proving what you agreed to.
Legal basis: Legal obligation (records of consent). - Umrah progress: counts, journey stages, school of thought, corrections
Why: Backing it up and showing it on your other devices, the web and, if you choose, as group totals.
Legal basis: Your explicit consent. - Trips: dates, hotels and addresses, transport (including booking references and contacts you add), Madinah visits and appointments, notes, itinerary and checklists
Why: Planning your trip.
Legal basis: Our agreement with you. - Groups: the group name, members' display names, meeting points, suggestions and check-ins
Why: Group features you use.
Legal basis: Our agreement with you. - Location sharing: who you share with, and when sharing starts and stops
Why: Sharing your position only with the people you choose.
Legal basis: Your consent, given each time you start. - Shared totals: your daily Tawaf and circuit totals, and which groups you share them with
Why: Group totals you choose to share.
Legal basis: Your explicit consent (above) and your choice per group. - Content reports you send about guidance
Why: Fixing guidance.
Legal basis: Legitimate interests.
Location sharing
Location sharing happens only in a group, only with the people you name, and only while you share: one hour at first, extended only when you choose, never more than eight hours at a time. Your position is held in memory only, is out of date after two minutes, disappears after fifteen, and is never stored, logged or backed up. There is no location history. The phone reads your location only while the app is open. Separately, the app may read your approximate location once to choose the Makkah or Madinah look; only the result (the city) is kept, on your phone.
On your phone and in your browser
The phone keeps its own database of your progress, trips and settings, your sign-in in the phone's secure storage, and reminders you schedule. Prayer settings and reminders never leave your phone or browser. On the web, a strictly necessary cookie keeps you signed in, and your browser remembers your prayer settings. There are no analytics, advertising or crash-reporting tools.
Not yet in the pilot
The trip assistant (AI), purchases and step counting are not offered in the live app yet. We will update this notice before any of them starts.
Who can see it
- You. In a group, members see your display name, and see your position or totals only if you choose to share them. An organiser sees only how many people checked in, not who.
- A small number of Darb Labs operators, only where needed to run the pilot, for example to process a deletion request or a content report. They cannot see locations, because none are stored.
Who helps us
- Cloudflare runs the app's servers and the short-lived location service.
- Neon stores the database in the United Kingdom.
- Resend sends sign-in emails.
- If you tap "Open in Apple Maps" or "Open in Google Maps", the hotel or pickup details go to that app under its own privacy terms.
They act for us under data processing terms. Cloudflare, Neon and Resend are US companies; where information is processed outside the UK, the transfer is covered by the UK Extension to the EU–US Data Privacy Framework, under which they are certified, or by the UK's approved international data transfer agreements.
How long we keep it
- Your account, trips and consented progress: until you delete your account (or, for progress, withdraw consent).
- Expired sign-ins and sign-in codes: deleted a day after they expire.
- Group check-ins, meeting points, suggestions and sharing records: deleted 90 days after the group's trip ends. The group name and member list stay until the group or your account is deleted.
- Content reports: one year.
- A record that a deletion request existed and was completed, and our operators' audit log: two years.
- Backups: our database provider keeps a short restore window, after which deleted information is gone from backups too.
Your rights
You can ask for a copy of your information, have it corrected or deleted, restrict or object to how we use it, or receive it in a common format, and you can withdraw consent at any time. In the phone app, Settings → Account & privacy lets you export everything we hold about you, change your progress choice and request deletion. Deletion gives you 14 days to change your mind, then erases your account and its records. For anything else, contact us through support@darbumrah.com. It is free, and we reply within one month.
Complaints
Please tell us first so we can put things right. You can also complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint or 0303 123 1113.
Children
The pilot is for adults only (18 or over). Accounts for children, managed by a parent or guardian, may come later, with their own notice.
Automated decisions
We make no decisions about you by automated means. The app never judges whether your worship is valid.
Changes
If we change this notice, we update the date at the top and tell you in the app before any change to how we use your Umrah progress or location.