Privacy Policy

Last updated: 7 September 2026 · Applies to the Ajraan mobile apps and ajraan.com

Ajraan helps you save towards Hajj. Saving for the journey of a lifetime takes trust, so this policy is written to be read, not skimmed past. The short version: we collect what the service needs and nothing more, we sell nothing, we show no ads, and we run no third-party trackers.

Who we are

Ajraan is operated by Massive W.L.L., a company registered in the Kingdom of Bahrain. For anything in this policy, write to hello@ajraan.com.

What we collect, and why

• Account details — your name, email address, country, and password (stored only as a cryptographic verifier; your password never reaches our servers in readable form). Used to create and secure your account.
• Identity verification — if you choose to verify, a selfie, photos of your ID document, your address and date of birth. Used only to confirm who you are, as regulated savings services require.
• Your Hajj plan — departure country, the package price and name from your travel quote, number of travellers, target year, and the savings amounts you log. Used to compute and show your progress.
• Waitlist and calculator — on ajraan.com, your email address if you ask for your plan, plus the plan inputs. Used to send you that plan and launch updates.
• Technical basics — which app wrote a record (iOS, Android, web) and, on the public website only, a salted hash of your IP address kept for one hour to prevent abuse. We never store your raw IP.

The apps contain no advertising, no analytics SDKs, and no third-party trackers. The statistics we work with are anonymised aggregates, such as typical Hajj package prices by country, from which no individual can be identified.

Where your data lives

All data is stored with Amazon Web Services in the European Union (Ireland, eu-west-1), encrypted in transit and at rest. Identity documents live in private storage that only you (from your own signed-in session) and our verification process can reach.

Who we share it with

Nobody, beyond the infrastructure that runs the service: Amazon Web Services (hosting) and our email provider (service emails). We do not sell personal data, rent it, or share it with advertisers. If an identity verification partner is introduced in future, this policy will name it before your documents are sent anywhere new.

How long we keep it

For as long as you have an account. Delete your account in the app (tap your avatar, then "Delete my account") and we erase your goals, savings history, identity documents, waitlist entry and account — this is immediate and cannot be undone. You can also request deletion by email. Anonymised aggregates, which contain no personal data, are retained.

Your rights

Depending on where you live (including under UK and EU GDPR), you can ask for a copy of your data, correct it, delete it, or object to how it is used. Email hello@ajraan.com and we will respond within 30 days. You may also complain to your local data protection authority, such as the ICO in the United Kingdom.

Children

Ajraan is for adults planning their own Hajj savings. It is not directed at anyone under 18, and we do not knowingly collect their data.

Changes

If this policy changes materially, we will say so in the app and update the date at the top. The current version always lives at ajraan.com/privacy.