Privacy Policy

MuftiHub (“MuftiHub,” “we,” “us,” or “our”) operates www.muftihub.com, including its public learning library and private Islamic Q&A service. This Privacy Policy explains how MuftiHub accesses, collects, uses, stores, shares, and deletes personal information. The private Q&A service is intended only for adults aged 18 and over.

Information we collect

• Account and profile information: your full name, email address, gender selection used for scholar matching, account role, and authentication/session records.
• Email and password sign-in: your email address and a cryptographic password hash. MuftiHub does not intentionally receive or store your plain-text password.
• Google sign-in information: if you choose Google sign-in, MuftiHub receives basic identity information authorized by you, such as your Google account identifier, name, email address, profile image, and OAuth/session information needed to authenticate your account.
• Question information: your topic, question, optional context, preferred language, public-sharing choice, assigned scholar, response status, and scholar answer.
• Technical information: hosting, security, and analytics systems may process IP address, browser or device information, timestamps, error logs, and aggregated visit information needed to deliver, secure, and understand the service.

Google user data

MuftiHub uses Google sign-in only to authenticate you, identify the correct account, create or link your MuftiHub account, prefill your name where available, and maintain a secure sign-in session. MuftiHub does not use Google sign-in to access Gmail, Google Drive, Google Calendar, Google Contacts, or other Google product content.

Google user data is not sold, used for targeted advertising, transferred to data brokers, used to determine creditworthiness, or used to train general-purpose artificial intelligence models. We disclose Google user data only to service providers that process it on our behalf to operate authentication, hosting, security, or support; when required by law or necessary to protect users and the service; or when you direct or consent to the disclosure.

MuftiHub’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

How we use information

We use personal information to authenticate accounts, complete user profiles, route private questions and live chats, provide and display answers, operate optional public sharing, respond to support and privacy requests, secure the service, prevent abuse, troubleshoot errors, and improve reliability. Live-chat messages are visible to the participating user and scholar and may be accessed by authorized administrators for moderation and safety. We do not use private questions, live-chat messages, or Google user data for advertising.

Private questions and security

Private questions are protected by authenticated server-side access controls. Data is encrypted in transit and at rest by the infrastructure used to operate the service. The service is not end-to-end encrypted: authorized MuftiHub operations personnel and the assigned Mufti/Aalim or Aalimah may access question content when needed to operate the service and provide a response. Share only the context needed for guidance, and avoid unnecessary names, addresses, credentials, intimate images, or identifying details.

Optional public sharing

A question remains private unless you actively select the public-sharing option when submitting it. If selected, MuftiHub publishes only the question text and scholar answer after a response is provided. The account email and additional-context field are not included in the public listing. Public pages may be indexed, cached, quoted, or copied by others. You may request removal, but copies outside MuftiHub’s control may remain.

Sharing and service providers

We share information only as needed with providers that support authentication, databases, hosting, security, analytics, and service delivery, including Google when you choose Google sign-in, Convex for authentication and application data, and Vercel for hosting and analytics. Question content is shared with the assigned scholar and authorized MuftiHub operations personnel. Providers may process information in countries other than your own under their applicable contractual and legal safeguards. MuftiHub does not sell personal information.

Retention

Account, OAuth, and authentication records are retained while your account is active and as reasonably necessary to provide and secure the service. Questions and answers are retained while the account and service are active unless deletion is requested. We may retain limited records for security, fraud prevention, safeguarding, dispute resolution, legal compliance, or backup restoration. When information is no longer required, we delete or anonymize it in accordance with operational and legal requirements.

Your choices, Google access, and deletion

You may stop Google access through your Google Account third-party connections. Revoking Google access prevents future Google authentication but does not by itself delete your MuftiHub account, questions, or existing records.

To request access, correction, account deletion, deletion of associated Google sign-in data, deletion of a private question, or removal of a public question, email contact@muftihub.com from the account email where possible. We may need to verify that you control the account before completing a request. Do not include a private question or identity documents in ordinary email unless specifically and securely requested.

Children and sensitive questions

The private Q&A service is limited to adults aged 18 and over and is not directed to children. It is not an emergency, medical, legal, financial, safeguarding, or crisis service. Do not delay urgent professional or local help while waiting for a response.

Changes to this policy

We may update this Privacy Policy when the service or our data practices change. We will update the date on this page and provide additional notice when a change materially affects how personal information is used.

Contact

MuftiHub is responsible for the data practices described in this policy. Questions or complaints can be sent to contact@muftihub.com.