Your privacy on Almuhajir

Effective 2 October 2026 · Last updated 2 October 2026

This policy explains what personal data the Almuhajir app and website collect, why, who we share it with, how long we keep it, and the choices and rights you have.

In short: we collect what we need to run your account and the app. We do not sell your data, show advertising, or use third-party advertising or analytics trackers. You can delete your account at any time from the app, or by email.

1. Who we are

Almuhajir is operated by Almuhajir Studio, a business based in Nigeria ("we", "us"). We are the data controller for the personal data described here, under the Nigeria Data Protection Act 2023.

For anything about your personal data, write to [email protected].

2. What we collect

Information you give us

Account details: your name, email address, phone number and password. Your password is stored only in a protected, scrambled (hashed) form by our sign-in provider; we cannot read it.
Profile: a profile photo if you add one, your city if you add it, and your language and appearance choices.
Questions you ask a scholar: the text of your question, and its progress through the scholar's team.
Reports: when you report a post or video, the reason and any note you add.
Messages to us: what you send when you email us.

Information created as you use the app

The scholars you follow and your notification choices for each.
Your reactions, saved items, bookmarks and reading progress.
A record of which audio lessons and books you downloaded, used to apply the download limit of your plan. The files themselves stay on your phone.
Notifications we send you, and when you last opened them.

Information about your device

Notification token: if you allow notifications, a token from Apple or Google that lets us deliver them to your phone, and whether the phone runs iOS or Android.
Technical logs: our hosting providers keep short-lived records of requests (such as IP address, time and device type) for security and to keep the service working.

Scholars, media teams and administrators

If you run or help run a scholar's School, or administer Almuhajir, we also keep your role and permissions, the School you belong to, the content you publish or manage, and a record of important changes you make (an audit log) so that work can be checked and corrected.

What we do not collect

We do not track your location, read your contacts, or use advertising or third-party analytics trackers. The app uses your camera, photos or microphone only when you choose to add a photo or video, or record an answer.

3. How we use it, and our lawful basis

To provide the app (create and secure your account, sign you in, show the Schools you follow, deliver questions and answers, keep your downloads and reading progress). Lawful basis: performance of our agreement with you (the Terms of Use).
To send notifications about new lessons, posts and answers from the scholars you follow. Lawful basis: your consent, given in your phone's notification prompt. You can withdraw it at any time in your phone settings or per scholar in the app.
To send account emails such as email confirmation, password reset and School invitations. Lawful basis: performance of our agreement with you.
To keep Almuhajir safe: review reports, enforce the Community guidelines, prevent abuse and fix problems. Lawful basis: our legitimate interest in a safe, working service.
To meet legal obligations where the law requires it.

We do not make decisions about you based solely on automated processing, and we do not profile you for advertising.

4. What other people can see

Questions: a question you send is read by the scholar and the members of his team who handle questions. If the answer is published, it appears in public Q&A without your name, and the team removes details that could identify you.
Content published by a School (posts, audio, clips, books and answers) is visible to everyone who uses Almuhajir.
Your email address and phone number are never shown to other users.

We do not sell or rent your personal data. We share it only with service providers who process it for us under contract, and only as needed to run Almuhajir:

Supabase — database, sign-in and file storage.
Google Firebase Cloud Messaging, and Apple Push Notification service on iPhone — delivering notifications.
Resend — sending account emails.
Cloudflare — hosting this website.

We may also disclose data if the law requires it, to protect the safety of people, or as part of a transfer of the Almuhajir service to a new operator, who would be bound by this policy.

6. Where your data is stored

Our main database is hosted by Supabase in the European Union (Ireland). Our email, notification and website providers may process data in other countries, including the United States. When data leaves Nigeria, we rely on safeguards recognised by the Nigeria Data Protection Act 2023, such as our providers' contractual data protection commitments.

7. How long we keep it

Account and activity data: for as long as your account exists.
After you delete your account: it is removed from our live systems straight away (see below). Copies in our providers' backups are overwritten within 30 days.
Notification tokens: removed when you sign out, delete your account, or the token stops working.
Technical logs: kept by our providers for a short period, normally no more than 90 days.
Emails you send us: for as long as needed to deal with your request.

8. Deleting your account

You can delete your account at any time in the app (Profile › Settings › Delete account) or by email. See Delete your account for the steps.

What is deleted: your profile, name, email and phone number; the scholars you follow; your saved items, reactions, bookmarks and reading progress; your notifications and notification tokens; and questions you asked that have not been answered.

What we keep, and why:

Answered questions that were published stay in public Q&A, still without your name, because the answer is shared knowledge for everyone.
Content you published for a School as a scholar or media team member stays with that School, no longer linked to your account.
A record that an account was deleted, with no name, email or phone number, so we can show we acted on the request.

9. Your rights

Under the Nigeria Data Protection Act 2023 you have the right to:

be told how your data is used (this policy);
get a copy of your personal data, including in a portable electronic format;
have inaccurate data corrected;
have your data deleted;
ask us to restrict or stop certain processing, and object to processing based on our legitimate interests;
withdraw consent at any time, without affecting what was done before;
complain to the Nigeria Data Protection Commission (ndpc.gov.ng).

To use any of these rights, email [email protected] from the email address on your account. We may ask you to confirm your identity, and we reply within one month.

10. Children and young people

Almuhajir is for people aged 13 and over. If you are under 18, you may use Almuhajir only with the permission of a parent or guardian. If we learn that a child under 13 has an account, we will delete it. Parents or guardians can contact us at [email protected].

11. Security

All data travels over encrypted connections (HTTPS). Access to data in our database is limited by role, so people see only what their role allows, and passwords are never stored in readable form. No system is perfectly secure; if a breach affects your personal data, we will tell you and the regulator as the law requires.

12. Changes to this policy

We will post any change on this page and update the date at the top. If a change is significant, we will also tell you in the app before it takes effect.

13. Contact us

Almuhajir Studio, operator of Almuhajir
Email: [email protected]