Sidrah
Sidrah
Plain English, no legalese theatre. This explains exactly what the Sidrah app and platform collect, why, and what we do not touch.
Sidrah is a platform for masaajid: Salaah times, announcements and (later) transparent giving, across a phone app, wall screens and a team admin. We have built it to collect as little as possible. The mobile app needs no account and no login to use - you do not tell us who you are, unless you choose to sign in.
Sidrah is a not-for-profit, community-funded project operated by Lote Tree Group Limited, trading as Lote Tree Media - a private limited company registered in England and Wales (company number 10361215), registered office 109 Coleman Road, Leicester, LE5 4LE, United Kingdom. Lote Tree Group Limited is the data controller for the personal data described on this page - it decides what is collected and why, and is registered with the Information Commissioner's Office (registration ZC189507). If you have any question about your data, or want to exercise a right below, contact us:
By default the app is anonymous. There is no sign-up, no email, no name, no password. Almost everything the app stores lives on your device only (in the app's local storage), and is never sent to us:
Two things travel to our server, and only when you enable notifications and follow a masjid:
When you unfollow a masjid, your device's subscription to it is deleted from our server.
You can use the whole app without ever signing in. If you choose to sign in (from the Settings tab), you give us your email address, and we send you a one-time code and sign-in link. We then store your email, a display name derived from it, and a sign-in session so you stay signed in on your device. While you are signed in, the masaajid you follow are linked to your account as well as your device, so things like giving history can work in future. Signing out unlinks your device again, and you can ask us to delete the account entirely (see "Your rights" below).
The Discover screen can sort masaajid by distance ("near me"). If you grant location permission, the app reads your device's current location on the device to calculate those distances. Your location is never sent to our server and is not stored - it is used in the moment, on your phone, only to order the list. You can decline the permission and the app still works; the list simply is not distance-sorted.
Separately from the public app, masjid team members use an admin area to manage their masjid. This part does involve a small amount of personal data, because a named person is signing in:
In plain terms:
We do not sell your data. We use a small number of service providers ("processors") only to run the service:
| Expo push service | Delivers push notifications to your device. When a masjid you follow sends a notice, we hand your device push token and the message to Expo's push service, which routes it to Apple's or Google's notification system and on to your phone. |
| Amazon Web Services (AWS) | Hosts the platform and database in the AWS London region (eu-west-2, United Kingdom). |
| Amazon SES | Sends team sign-in emails (the magic link). Used only for the admin area, not for the public app. |
Push notifications are ultimately delivered through Apple Push Notification service (on iPhones and iPads) or Google's Firebase Cloud Messaging (on Android), which are operated by Apple and Google respectively as part of your device's operating system.
The Sidrah platform and its database run entirely in the AWS London region (eu-west-2), so the personal data we hold - team member names and emails, device push tokens and category preferences, and the audit log - stays in the United Kingdom. Sign-in emails are also sent from within that region via Amazon SES.
Two processing steps can happen outside the UK, and only in the course of delivering a push notification you have asked for: Expo's push service routes the notification, and Apple's and Google's push gateways deliver it to your phone. These handle a device push token and the notice itself, not your email or any account details. Where these providers process data outside the UK, they do so under the standard data-protection safeguards those major providers offer for such transfers.
We keep a team member's account (name and email) and the audit log of their masjid's actions for as long as that masjid uses Sidrah, and for up to 12 months after it stops, so a team retains a record it can be accountable to. After that we delete or anonymise them, unless we are required to keep something longer by law.
There is no self-serve "delete my account" button in the admin. If a team member leaves, or a masjid leaves Sidrah, you can ask us to remove that person's account and personal details by emailing sidrah@lotetreemedia.com, and we will action it promptly. Because the audit log is append-only by design, individual entries are retained as the record of what happened, but they can be dissociated from a person on request where the law allows.
Under UK data protection law you have the right to ask us to access, correct, or delete the personal data we hold about you, to object to or restrict how we use it, and to withdraw consent for notifications at any time. For the app, most of this is in your own hands: unfollow a masjid to delete its subscription, turn off notifications in your device settings, or delete the app to remove the device-local data. For anything else - or to raise a concern about a team account - email sidrah@lotetreemedia.com.
You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO), at ico.org.uk.
The app collects no personal data and is safe for anyone to use to see prayer times. The team admin is for adult masjid staff.
If we change how we handle data we will update this page and change the date at the top. For significant changes we will make a reasonable effort to flag them.