Yoonu Jàngale privacy policy

This text applies to the Yoonu Jàngale app, intended for Guides and Teachers (Oustaz and Imams) and downloaded from the yoonujamm.app website. The Yoonu Jamm app, for worshippers' daily practice, has its own texts (yoonujamm.app/terms).

In short

• The worship features (prayer times, Qur'an, Qibla, adhan, tasbih, calendar) work without an account and offline. Your location is used for calculations on the phone and is not sent to us.
• The directory of Oustaz and Imams is optional. To open it, an anonymous account is created on your phone: no name, no email address, no phone number. You declare that you are 16 or older. One exception: if you give 1, 2 or 3 hearts to an Oustaz, you leave a phone number, and an email address if you wish.
• Reviews of Oustaz (1 to 5 hearts) only show publicly the average rating and the number of reviews, never who rated nor any message. The number and email address of a low rating are encrypted, never shown to the Oustaz, and deleted 12 months later at the latest.
• To search around you, the directory receives a location rounded to about 1 km. It is used for the search and then forgotten: we do not keep it and do not write it to any log.
• Oustaz and Imams publish their own first name, last name, phone number, photo, location and, for an Imam, their mosque, with the consent they give in the app.
• Before their profile is published, Oustaz and Imams have their identity verified: identity document, photos of their face, criminal record extract and proof of address. These documents reach our server directly, with no intermediary, are encrypted there, are seen only by the team and are erased after the decision.
• Voice notes recorded by Oustaz and Imams stay on their phone: they are never sent to us.
• Your messages to Oustaz are kept on our server for the conversation. The team only reads them when a conversation is reported to it.
• No ads, no trackers, no data sold or shared for commercial purposes.

1. Who is responsible for your data

Yoonu Jàngale is published by Nicolas Geslain, a private individual acting in a non-professional capacity: the app is downloaded at no cost, with no ads and no in-app purchases; having an Oustaz or Imam profile in the directory is paid, on a web page. He is the controller of the processing described here. For any question about your data: [email protected].

2. Worship features, without an account

Your location

• When you allow it, the phone gives your location to the app. It is used to calculate prayer times, the Qibla direction and the distance to mosques. These calculations take place on the phone.
• The last location is stored on the phone, so that prayer times show without delay the next time you open the app.
• To show the name of your town, the app queries the location service built into the phone (Google on Android, Apple on iPhone), which receives your coordinates for that purpose. That service is covered by Google's or Apple's privacy policy.
• Without permission, the app shows the prayer times for Dakar. You can withdraw permission at any time in the phone's settings.

Nearby mosques

Only when you open the "Mosques" screen, or the mosque layer on the directory map:

• a location rounded to within 2 km (on the map: the centre of the area shown, rounded in the same way) is sent to public OpenStreetMap servers: overpass.openstreetmap.fr (OpenStreetMap France association) and, if it does not respond, overpass-api.de (FOSSGIS association) or overpass.kumi.systems (Private.coffee service);
• distances are then calculated on the phone, from your actual location;
• the town name of each mosque is requested from the phone's location service, using the mosque's coordinates, not yours;
• to show a mosque on a map, the app opens the phone's maps app with the mosque's coordinates.

Your favourite mosques and personal prayer places stay on the phone.

Place of a calendar event

Only when you type at least three letters in the Place field of the calendar:

• the text of that field, with a location rounded to within 2 km, is sent to our place search server, hosted in France, which holds the OpenStreetMap places of West Africa (it goes through Cloudflare, like the directory); the location is used to suggest nearby places first, and the app sends nothing else (neither the title, the date nor the calendar);
• if you are outside West Africa, or if our server does not respond or finds nothing, the same information is sent to OpenStreetMap's public search service photon.komoot.io (komoot GmbH);
• requests are spaced out while you type, and the recent places, favourite mosques and prayer places suggested first come from the phone, without any request;
• a chosen place is kept in the calendar, on the phone, with its coordinates; tapping it opens the phone's maps app (Maps or Google Maps), which receives these coordinates to work out the route.

Listening to the Qur'an and adhan voices

• Qur'an recitation is streamed from cdn.islamic.network (Islamic Network), and the adhan voice preview from upload.wikimedia.org (Wikimedia Foundation). Like any web server, they see your IP address and the file requested.
• The text of the Qur'an and its translations are included in the app: reading them does not contact any server.

Hadiths

• The hadiths in French, Wolof and Pulaar are included in the app: reading them does not contact any server.
• "View on HadeethEnc.com" and "Report an error" open the hadeethenc.com website in your browser, only if you tap them. That website then sees your IP address and applies its own rules.
• Your favorite hadiths stay on your phone.

Prayer reminders

Reminders are scheduled on the phone itself. No remote notification service is used, and no notification identifier is created. The directory does not use one either: new messages show when you open the app.

What stays on your phone

Profile photo (if you choose one; for an Oustaz or an Imam, the same one is sent to their profile), the choice to unlock parental control with Face ID or fingerprint (recognition is done by the phone, the app only receives yes or no), language, theme, text size, reminder settings, favourite verses and mosques, personal places, calendar, tasbih counter, last surah read, version and time of your acceptance of the licence agreement and the terms of use. The parental code, if set, is kept there only as a salted hash, in the phone's encrypted storage, with its attempts and any forgotten code request; the code itself is never written or sent. To date a forgotten code request, the app reads the time of the directory server through a plain request, with no account or identifier, that says nothing about the code. This data does not leave the phone. It is erased when you uninstall the app or clear its data, with one exception: on iPhone, the parental code hash is kept in the phone's keychain, which uninstalling does not empty; it is used again if the app is reinstalled, until the code is removed (Settings, Parental code) or the phone is reset.

Download and updates

Yoonu Jàngale does not go through the stores. To download it, you enter on our page the username and password you received from the team; they are checked by our server and are not kept by the page. At start-up, the app asks beta.yoonujamm.app for the number of the latest version; nothing else is sent. If a newer version exists, "Update" downloads it with your session, without asking for your password again, then Android offers to install it. We record on your profile the date of the last download (the day, without the time or the device), so that we know whether the app is installed.

3. The directory of Oustaz and Imams

The directory is an optional, online module: it lets you find an Oustaz or an Imam on a map that also shows mosques, call them or write to them. No worship feature depends on it.

Your anonymous account

The first time you open the directory, you declare that you are 16 or older and accept the terms of use (yoonujamm.app/jangale/terms). An account linked to your phone is then created. We record:

• a random key generated by the phone, of which we keep only a hash;
• an 8-character deletion code, shown in "My account";
• your language, the version of the terms you accepted and its date, your age declaration;
• the account creation date and the day of your last activity (the day only, not the time);
• a nickname, only if you choose one (2 to 40 characters), so that the Oustaz knows what to call you;
• the account status (active, suspended, banned) and, where applicable, the reason for a suspension;
• if you ask the team to change your account type (Simple believer, Oustaz, Imam) beyond the changes allowed in the app: the type you want, your type at the time of the request, the note you add if you wish (300 characters at most), the date of the request and the team's answer. No identity document is requested for this change.

Your account stays anonymous: no name, no email address, no number. One exception: if you give 1, 2 or 3 hearts to an Oustaz, you leave a phone number, and an email address if you wish (see "Reviews of Oustaz" below). We keep no location in your account. The token that opens your account is kept in the phone's encrypted storage; the server keeps only a hash of it. As the account is linked to the phone, changing phones loses your conversations.

To give an account a real cost and slow down the mass creation of fake accounts, the phone performs a small calculation of a few seconds when the account is created, checked by the server. This calculation uses no data about you.

Your location in the directory

• For "Around me", the app sends a location rounded to 0.01 degree, about 1 km. The server refuses any more precise location.
• This location is used to find the nearest Oustaz and Imams, then it is forgotten: it is recorded neither in your account, nor in a database, nor in our logs.
• The distance shown is rounded too: less than 1 km, then to the kilometre, then to the nearest ten kilometres.
• Searching by name or by phone number does not use your location.

The map

The map background is made of images (tiles) loaded directly by your phone from the tile provider, currently the OpenStreetMap Foundation (tile.openstreetmap.org). Like any web server, it sees your IP address and the tiles requested, and therefore the area you are looking at. The mosques on the map come from OpenStreetMap, as described above.

What the directory keeps on your phone

• the last "Around me" result and the search point used, to show it offline;
• a copy of the profiles you have opened, phone number included: 20 profiles at most, each erased after 7 days, and removed as soon as the server indicates that the profile no longer exists or that the Oustaz has hidden their number;
• your favourite Oustaz and your display preferences;
• a copy of your conversations already loaded, readable offline: 30 conversations and their last 200 messages at most, erased with your account.

Messages

• You can write to an Oustaz or an Imam from their profile. Until they accept the conversation, only one message can be sent to them.
• We keep on our server the conversation (both participants, its status, its dates) and the messages (text, date, read status). Messages are not end-to-end encrypted: they are protected by the encryption of communications and by restricted access to the server.
• An automatic filter checks each message: a first message containing a web address, more than two phone numbers, repeated text or a word from a list of banned expressions is not sent; in an accepted conversation, such a message is held for review by the team.
• When the Oustaz declines or blocks, you are not told: the conversation shows as "No reply". Messages sent in the meantime are kept without being passed on to them, then erased with the conversation.
• The team does not read your conversations. It only sees the content of a conversation if one of the participants reports it, and each reading is recorded in a log.

Blocks, reports and moderation

• A block records who blocks whom, and when. It closes the conversation and prevents any new request in either direction.
• A report records its author, what is targeted (profile or conversation), the reason, your optional comment and, attached automatically, an excerpt of the last 20 messages of the conversation that you see.
• Moderation is carried out by the publisher, and later by a second trusted person who only sees the queue of reports, without phone numbers. They do not read reviews. Its decisions (warning, deletion of a message, suspension, ban) are recorded in a log with no message content.

Reviews of Oustaz

After an exchange accepted in the app, and one week later, an account of a person aged 16 or over who is neither an Oustaz nor an Imam can rate an Oustaz from 1 to 5 hearts.

• What we keep. The number of hearts, the date, and, for 1, 2 or 3 hearts: your message, your phone number, your email address if you give it, and the Oustaz's reply.
• What is public. Only the average rating in hearts and the number of reviews, from 3 reviews, and the "Golden Heart" badge. Never who rated, never a message.
• What the Oustaz receives. Your message and the number of hearts, a few days later, with the month only. Never your name, your number or your email address. If they have few students, they may guess who wrote it.
• Why your number. To stop fake reviews: a number can only be used once per Oustaz, and a number used for an abusive review is refused for 12 months. Nobody calls you.
• Who can read them. The number and the email address are encrypted. Only the administrator of Yoonu Jàngale can display them, for a reported review, and each display is logged. We only give them to the police or the courts, if they ask for them under the law.
• How long. Number and email address: 12 months at most, then 14 days at most in our backups, where they stay encrypted. Reviews: 24 months after your last change, or until you remove them or delete your account. Hash of a refused number (not the number): 12 months.
• Legal basis. Your express consent, given by ticking the box and sending; for the list of refused numbers, our legitimate interest in preventing fraud (Senegalese law 2008-12; GDPR, articles 6.1.a, 6.1.f and 9.2.a, for people in Europe).
• Where. On our server in France (Paris), like the rest of the directory. Traffic goes through Cloudflare, as stated above.
• Your rights. See and take your reviews ("My account", export), change them, remove them (the number is then erased), delete your account. Write to [email protected]. You can also contact the CDP of Senegal (cdp.sn).
• If the Oustaz asks where the information about them comes from, we tell them it comes from reviews by people who wrote to them in the app, with nothing that would identify them, unless a judge orders otherwise.

Protection against collecting phone numbers

The numbers published by Oustaz must not be copied in bulk. To prevent this, we count, per account and per day, the profiles opened, the searches, the requests and the messages, with lower limits during the first 48 hours of an account. These counters are kept for 7 days. Abnormal use (for example dozens of profiles opened in one hour) creates an alert that the team reviews. A new account that reaches its profile limit on its first day, or an account reported by two different Oustaz, is suspended automatically; the team can lift the suspension.

Your IP address is also used, in memory only, to limit the number of requests and accounts created from the same connection. Our access logs keep, for each request, only the time, the type of request without its parameters, the result, the duration and a hash of the IP address computed with a key that changes every day and is never recorded: they contain no location, no phone number and no message.

4. Oustaz and Imams

This section is for Oustaz and Imams listed in the directory, and for those who consult them. The publication rules are set out in the charter for Oustaz and Imams (yoonujamm.app/jangale/oustaz-charter).

Registration and verification

A profile is created in two ways: by you, in the app, by choosing Oustaz or Imam on the directory's first screen, or by the team, which gives you a username. Before publication, the profile is reviewed and validated by the team; verifying your identity is optional and gives the "Verified account" star (see below). The team which may also ask for a recommendation from a mosque or from an Oustaz already listed and, for an Imam, confirmation from their mosque. For this we record the result of the identity verification, the date adulthood was confirmed (18 or older) and the roles assigned by the team (Oustaz, Imam or both). An Oustaz or an Imam with no smartphone can have their identity checked in person: the team notes where, when and which document it saw, without keeping a copy.

Identity verification

• Data: your Senegalese ECOWAS identity card (front and back) or the main page of your passport; the identity you declare for the comparison (first names, last name, date of birth); three photos of your face (looking straight, head turned left, then right); a criminal record extract (bulletin n° 3); a proof of address and its type; and, only if you agree separately, the profile photo taken from your front photo.
• Purpose: to check that you are the person on the profile, that you are an adult, that your criminal record is clear and that your address is real, to protect worshippers, and to give you the "Verified account" star. This verification is optional: a profile is published without it.
• Legal basis: your express consent, given in the app before anything is sent, and which you can withdraw at any time with "Stop everything and erase my documents", which erases your documents at once.
• Reading on our server: the lines of characters at the bottom of your document are read automatically on our server in France, by software installed on it, with no outside service. Only results (document readable or not, valid, person adult, name matching) and the expiry date go back to the app; the number, name and date of birth read stay on the server, encrypted, for the team.
• Human comparison: a member of the team compares, by eye, your face on the three photos with the photo on your document, and checks your papers. No face recognition and no automatic biometric processing is carried out.
• Encryption: your documents arrive through a direct address of our server, with no intermediary, and are encrypted on arrival with a key of their own. They are kept away from any public address and out of the backups. Our database keeps no value read on the document: only the status of the file and its result.
• Logged access: only the team can open your documents, one at a time, and every access is recorded in its log.
• On your phone: each photo and each document is prepared in a temporary folder of the app, then erased right after it is sent; nothing is kept offline.
• What is published: only the "Verified account" star on your profile, in lists and on the map; without it, no mention. Your documents are never published.

Star through sponsorship

• Principle: without papers, two Oustaz or Imams whose identity was verified with their papers or in person can confirm yours. You create a six-character code in your space, valid for 7 days, and give it to them; each types it in their space, sees your first name, last name, photo and town, and confirms that they know you.
• Data: the code, kept only in an encrypted form that cannot be read back, with its dates; each confirmation (who confirmed whom, when, with which version of the commitment sentence, and its withdrawal); the number of codes tried per day, to prevent guessing.
• Purpose: to give you the star without papers, and to let the team withdraw the confirmations of someone who made a false declaration.
• Basis: your request, for you; for the person confirming, their commitment, accepted in the app at each confirmation.
• What is published: the star only. The names of those who confirmed you are never published; the team sees them, in the back office and its log.

Guides and Teachers subscription

• Principle: to appear in the directory, an Oustaz or an Imam pays for a Guides and Teachers subscription period on the web page yoonujamm.app/abonnement, never in the app.
• Data: the end date of the Guides and Teachers subscription; each payment (amount, length, provider, reference given by the provider, dates, name of the beneficiary written on the receipt); months offered, by the team or through sponsorship (with the first name and initial of the sponsored person); a nine-character Guides and Teachers subscription code.
• The code only allows paying for the profile and seeing its first name, the initial of its last name, its type and its end date. You can change it in My space.
• Providers: we send Wave or Orange Money the amount and the reference of the payment. Your number and your secret code are entered on their side: we do not receive them.
• Reminders: reminders before the end of the Guides and Teachers subscription are notifications scheduled on your phone; nothing is sent for them.
• Legal basis: performance of the Guides and Teachers subscription contract; for receipts, our accounting obligations.

What is published

With your express consent, given by you in the app (or collected orally by the team and recorded with a note if you have no smartphone), your profile shows all users of the directory:

• your first name, last name and photo;
• your phone number, unless you choose to hide it so that you can only be contacted by message;
• your declared location, at the exact point you chose, like a mosque; no tracking takes place, the location only changes when you declare it again, unless you turn on "My location follows my phone" (off by default, turned on with your consent in the app): it is then updated when you open the app and at most every 30 minutes while the app is open, never in the background, rounded to about 100 metres, and you can turn it off at any time;
• for an Imam, their mosque (name and address);
• your roles, languages, specialities, introduction, availability and town;
• for an Oustaz, from 3 reviews, their rating in hearts (1 to 5) and the number of reviews, and the "Golden Heart" badge if they earn it (they can hide the badge, not the rating). The messages of ratings of 1, 2 or 3 hearts are never published: the Oustaz reads them alone, without knowing who wrote them.

Your location is read by the phone only once, when you tap "Use my position", or placed by you on the map. Your photo is reduced on the phone and stripped of its hidden information (place and device of capture) before it is sent; the server removes any that remains, including the colour profile added by the phone, before saving it.

What is not published

Your login and a hash of your password (never the password itself), the verification data, your consent (charter version, date, how it was given), the status of your profile, the creation, modification and last login dates, and a hash of your number that allows you to be found by your full number without comparing it in clear. When you change your first name, last name or number from the app, the team receives an alert with the old and new value, the number being masked, to check the change.

Who sees your published data

Anyone who uses the app's directory, that is, a wide audience. Lists and the map never show phone numbers: a number is only given profile by profile, to an app account, within the limits described above. You can also prevent people from finding you by your number. We cannot prevent a user from noting a number shown; the terms of use forbid collecting them.

Withdrawal and deletion

• "Leave the directory" withdraws your consent: your profile and photo stop being shown at once. Your data is kept so that you can come back by accepting the charter again.
• "Delete my account" withdraws the profile at once and erases it 7 days later with your photo. Your conversations remain readable by the people you exchanged with, without your name, until they are erased under the periods in section 9.
• A copy of your profile may remain for up to 7 days on the phone of a user who opened it, as long as they do not reconnect; your photo may remain for up to 24 hours in the cache of a browser or phone.

Voice notes

An Oustaz or an Imam can record voice notes in the app (My voice notes) to keep ideas for a class or a sermon.

• The phone's microphone is used only during a recording you start yourself, with your permission, which you can withdraw at any time in the phone's settings.
• The audio files and their titles stay on your phone, in the app's files. They are never sent to us, do not go through any server, and are not listened to, transcribed or analysed.
• A note only leaves the phone if you share it yourself, through the phone's share sheet, to the app of your choice; it is then governed by that app.
• Deleting a note erases it from the phone; uninstalling the app erases all notes. Phone backups (iCloud, Google) may contain a copy, depending on your settings; they are governed by Apple or Google.

Sermons and courses shared by a link

An Oustaz or an Imam can share a sermon or a course by a link. The app encrypts the content on the phone before sending it: our server only keeps an encrypted package, which it cannot read, and never the key, which stays in the part of the link after "#" and is not sent to any server. The package is erased automatically after 30 days, and its author can withdraw it before then, from the app ("Remove this link"). The app keeps on the author's phone the list of their links still open (title and dates), without the key, so that they can withdraw them; this list is erased when they sign out. The link page decrypts the content in the browser of the person who opens it and only shows the title and the author's name; it uses no cookie and no measurement tool.

5. Sensitive data: religion

Using a directory of religious teachers, writing in it, and even more being listed in it as an Oustaz or an Imam, may reveal a religious belief. This is sensitive data under the European regulation (GDPR, article 9) and Senegalese law no. 2008-12 on the protection of personal data. We only process it with your express consent, and we protect it as follows:

• the directory is optional, and nothing in the worship features assumes it;
• a user's account is anonymous: no name, no email address, no number, no stored location, optional nickname; one exception, the number (and optional email address) left with a rating of 1, 2 or 3 hearts. If you give your number, it links your account to you. It is encrypted, shown to nobody, and deleted 12 months later at the latest;
• Oustaz and Imams themselves give express consent, dated and linked to a version of the charter, to the publication of their profile, and may withdraw it at any time;
• no data is used for advertising, profiling or any purpose other than the directory;
• logs contain neither location nor message content, and IP addresses appear in them only as hashes;
• backups are encrypted, and the team's tool is protected by a second factor.

The identity verification of Oustaz and Imams also involves special data: the copy of an identity document and the criminal record extract, which is data relating to offences. We consult the criminal record extract without keeping it: it is erased as soon as the decision is made, and we only keep its issue date, the date of the verification and the member of the team who made it. The photos of the face are only used for a comparison by eye by the team, never for automatic biometric processing.

6. The yoonujamm.app website

• The website sets no cookies and loads no resources from other sites. Your display choices are stored in your browser.
• The traffic of the website, the test version and the directory goes through Cloudflare, which routes it and protects it from attacks. Like any technical intermediary, Cloudflare sees your IP address and the requests it passes on. The identity verification does not go through it (section 8).
• "Write to us" form: we receive your name, your email address, your message, the date sent and the language of the page. They are stored on the server rented from Hostinger (see section 8), and only the publisher reads them. If you ask to be told about the launch, we keep your address to write to you at that time, and for nothing else.
• Your IP address is used only, for one hour and in memory, to block abusive submissions. It is not recorded.
• If you write directly to [email protected], your message is hosted by Hostinger's mail service.
• Test version: each tester receives a username. The server keeps their name, that username and a hash of the password, never the password itself.
• Test on Google Play: if you join the app's test on Google Play, the email address of your Google account appears in the list of testers we keep in the Google Play console. It is removed at the end of the test or on request.

7. Legal basis

• Your location for the worship features: your consent, given through the phone's permission and withdrawable at any time.
• Your directory account, searches, messages, blocks and the local copy of profiles: the performance of the terms of use you accept when entering the directory, and your express consent for anything relating to religion.
• The publication of the profiles of Oustaz and Imams: their express consent to the charter, withdrawable at any time.
• Reviews of Oustaz, the number and email address of a low rating: your express consent, given by ticking the box and sending; the list of refused numbers: our legitimate interest in stopping fake reviews; the published rating: the charter accepted by the Oustaz.
• The identity verification of Oustaz and Imams (identity document, photos of the face, criminal record extract, proof of address): their express consent, given in the app before anything is sent and which they can withdraw at any time.
• The validation of the profiles of Oustaz and Imams, the message filter, reports, moderation, the limits and alerts against collecting numbers, access logs and backups: our legitimate interest in protecting users, Oustaz and Imams, and keeping the service safe and available.
• Your messages through the form or by email: our legitimate interest in replying to you.
• Your requests to be told about the launch: your request, which you may withdraw at any time.
• Blocking abusive submissions and protecting the website: our legitimate interest in keeping the website and the form usable.
• The test version and the test on Google Play: your request to take part.

8. Who else receives data

We do not sell, rent or share any data. Apart from the profiles that Oustaz and Imams choose to publish, the only third parties are the following technical services:

The identity verification goes through no third party, Cloudflare included: the app sends the identity documents, the photos of the face and the papers directly to our server, through an address with no intermediary, and no outside service reads or keeps them.

Wave and Orange Money process the payment under their own responsibility, under their own terms.

For Google, Apple and Cloudflare, transfers to the United States rely on the EU-US Data Privacy Framework. The United Kingdom benefits from an adequacy decision of the European Commission. Wikimedia and the tile provider only receive the requests for files made directly by your phone.

9. How long

When an account is erased, the reports that target it or that it made become anonymous.

10. Your rights

You may ask for access to your data, its correction, erasure or restricted processing, object to its processing, withdraw your consent, and receive your data in a reusable format. For the directory, most of this is done in the app, without writing to us:

• Export your data: "My account", then "Export my data", gives a file with your account, your requests to change the account type, your conversations, your blocks, your reports and your reviews (with the number and email address you gave). An Oustaz or an Imam finds the same feature in "My options": profile, consents, location, conversations and messages, blocks, reports, reviews received (rating, messages with the month only, replies) and identity verification files (statuses, dates, decision, result, declared identity while it exists and dates of the team's access, never the documents).
• Correct: your nickname and language in "My account"; for an Oustaz or an Imam, their whole profile in their space.
• Delete your account: "My account", then "Delete my account" (or "My options" for an Oustaz or an Imam), with a double confirmation. Erasure takes place 7 days later.
• From another device, if you no longer have your phone: write to [email protected] giving the deletion code shown in "My account". The page yoonujamm.app/jangale/delete-account details the steps.
• Account created with an earlier test version of Yoonu Jamm (until 16 October 2026, when the directory was part of Yoonu Jamm): it is not linked to Yoonu Jàngale, which creates its own account on your phone. If the old test app is still installed, "My account", then "Delete my account", deletes it. Otherwise, write to [email protected] giving the deletion code if you noted it or, for an Oustaz or an Imam, the name and number of the profile: the team checks that the request really comes from you, deletes the account from its tool and replies within one month. Without a request, these accounts are erased after the period set in section 9.
• Withdraw your consent: for an Oustaz or an Imam, "Leave the directory", and for the identity verification, "Stop everything and erase my documents"; for a user, delete their account; for location, the phone's permission.

For anything else, write to [email protected]: we reply within one month. The data left on your phone is in your hands: uninstalling the app erases it (on iPhone, first remove the parental code, in Settings, Parental code).

If you believe your rights are not respected, you may complain to the CNIL (cnil.fr) or, in Senegal, to the Commission de protection des données personnelles (cdp.sn).

11. Children and minors

• The worship features ask for no name, no age and no account, and collect no data to target children.
• The directory and its messaging are reserved for people aged 16 or older, who declare it on entry.
• A parent or guardian may use the directory to look for a teacher for their child; the child has no account, and this choice stays on the phone. They may also set a parental code that locks search and messages on that phone.
• Only adults (18 or older), whose adulthood has been read on their identity document or noted by the team, can be listed in the directory as an Oustaz or an Imam.
• If we learn that an account belongs to a person under 16, we delete it. A parent may write to us at [email protected].

12. Security

• All communications of the app and the website are encrypted (HTTPS).
• Login tokens are kept in the phone's encrypted storage; the server keeps only a hash of them. The passwords of Oustaz and Imams are kept only as hashes.
• The team's tool is protected by a password and a second factor; each action in it is recorded in a log.
• Backups are encrypted before they are written.
• The documents of the identity verification are encrypted with a key distinct from all the others, kept away from any public address and out of the backups; only the team can open them, and every access is recorded.
• The number and email address left with a review are encrypted with a key derived from the one of the verification documents; only the administrator can display them, for a reported review, and each display is logged.
• Logs contain no location, no phone number and no message content.

13. Changes

Any change will be dated on this page. In the event of a significant change, the app will let you know.

Version of 17 October 2026.