Privacy Policy

MosqueFees is a platform for mosque fee management, student records, attendance, reporting, parent communication, and related account administration. This Privacy Policy explains what personal data we process, how we use it, when we share it, and how we protect it.

This policy applies to the MosqueFees website, web app, and mobile app.

Who We Are

MosqueFees is operated by Ribblesoft Ltd.

For personal data relating to our own website, account access, billing, support, service communications, and platform operations, Ribblesoft Ltd generally acts as the data controller.

Where a mosque uses MosqueFees to manage student, parent, teacher, attendance, reporting, or related records, that mosque may act as the data controller for that information and MosqueFees may process it on the mosque's behalf. If your request relates to records managed by a mosque, we may direct you to contact that mosque as well.

Data We Collect

• Account and contact data, such as names, email addresses, phone numbers, role details, and mosque association.
• Parent, student, and staff records, including student names, date of birth, gender, classroom details, attendance, reports, comments, grades, and related administrative information.
• Payment and billing data, such as payment references, amounts, currency, due dates, statuses, and transaction identifiers.
• Authentication and device data, such as login/session identifiers and device notification tokens used to deliver push notifications.
• Technical and diagnostic data, including error and performance information used to maintain and improve the service. In the mobile app, this may include crash reporting data when Sentry is enabled.
• Website usage and preference data, including cookies, local storage items, and analytics data where you choose to allow optional analytics cookies.

How We Use Data

• To provide core platform functionality, including fees, attendance, reporting, messaging, account management, and parent access.
• To process or support payments, maintain transaction records, and handle billing and reconciliation.
• To send service-related notifications, such as account alerts, payment updates, announcements, and app notifications.
• To authenticate users, protect accounts, prevent misuse, and keep the platform secure.
• To monitor performance, investigate incidents, fix bugs, and improve reliability.
• To remember website preferences and, where you consent, measure website usage.

Legal Basis for Processing

• Contract, where processing is necessary to provide MosqueFees services and related user access.
• Legitimate interests, where processing is necessary to operate, secure, support, and improve the platform.
• Legal obligations, where we must retain or disclose information for financial, tax, regulatory, safeguarding, or other compliance reasons.
• Consent, where required, for optional website analytics cookies and similar non-essential technologies.

Payments

MosqueFees uses Stripe for payment processing.

• Card details are processed securely by Stripe and are not stored by MosqueFees.
• We store payment metadata needed for reconciliation, reporting, audit support, customer support, and payment history.

Cookies and Website Analytics

• We use necessary cookies and similar storage technologies to keep the website functioning, maintain preferences, and support secure sign-in and session handling.
• We also use preference storage in the browser, such as local storage, for features like cookie consent and interface settings.
• Where you consent to analytics cookies on the website, we may use Microsoft Clarity to understand website usage and improve the site.
• You can read more in our Cookie Policy.

Data Sharing

We do not sell personal data. We do not use advertising SDKs or cross-app advertising tracking in the mobile app.

We may share personal data with trusted service providers where necessary to operate the platform, including:

• Stripe for payment processing.
• DigitalOcean for hosting and infrastructure.
• Amazon SES for email delivery.
• Firebase for authentication and related account services.
• Expo's push notification service, and device platform providers such as Apple and Google, to deliver app notifications.
• Sentry for crash and diagnostic reporting when enabled in the mobile app.
• Microsoft Clarity for website analytics where analytics consent has been given.

We may also disclose information where required by law, court order, regulation, or to protect rights, safety, and the integrity of the platform.

International Data Transfers

Some of our service providers may process personal data outside the United Kingdom. Where this happens, we aim to ensure appropriate safeguards are in place in accordance with applicable UK data protection law.

Children and Student Data

MosqueFees processes student information to support mosque administration and to give authorised parents access to attendance, reports, messages, and payment information.

We treat student data with particular care. Access is restricted to authorised mosque staff and linked parents through role-based permissions. Mosques are responsible for ensuring they have an appropriate lawful basis and any required notices or permissions for the student and parent data they place into the platform.

Data Security

We implement appropriate technical and organisational measures to protect personal data, including authentication controls, role-based access restrictions, and encrypted data transmission.

Data Retention

• We retain personal data while the relevant account or mosque relationship remains active.
• When accounts are deleted or closed, some information may be deleted, anonymised, or restricted, depending on the type of data and the purpose for which it is held.
• Certain records, including payment, audit, attendance, reporting, and safeguarding-related records, may need to be retained for longer where required for legal, regulatory, or legitimate operational reasons.
• Financial records may be retained for up to 6 years, or longer if required by law.

More information about deleting a user account is available on our Account Deletion page.

Your Rights

• Access your personal data.
• Correct inaccurate or incomplete data.
• Request deletion of your data in appropriate circumstances.
• Restrict or object to certain processing.
• Request transfer of your data where applicable.
• Withdraw consent where processing relies on consent.
• Lodge a complaint with the Information Commissioner's Office.

If the personal data is controlled by a mosque using MosqueFees, we may need to work with that mosque to action your request.

Contact

For privacy questions or requests, contact [email protected].

You also have the right to raise concerns with the Information Commissioner's Office.