Privacy Policy

ZamZam, by Izza LLC · Last updated 11 October 2026

ZamZam helps you track your wealth, your hawl and your zakat. This policy explains what we keep, why, and how to remove it. In short: we keep only what the app needs to work, we don't sell it, we don't show ads, and you can delete everything at any time.

What we collect

• Your account. When you sign in with Apple or Google we receive a user ID and, if you share them, your name and email address. Apple lets you hide your real email; we only ever see the relay address.
• What you enter. Assets and their balances, debts, budget figures and transactions, zakat payments, your hawl history, and your settings (such as your school of thought and currency).
• Bank balances, if you connect a bank. Through SimpleFIN Bridge we receive account names, balances and currencies. We do not receive your bank login, and we don't request transaction history. The SimpleFIN access link is encrypted on our server and is never sent to your devices or the website.

We do not use analytics, advertising or tracking SDKs, and we don't collect your location or contacts.

The launch waitlist

If you join the waitlist on zamzam.izzah.org we keep only your email address and when you signed up, and use it for one thing: to tell you when ZamZam launches. Email admin@izzah.org to be removed at any time.

How we use it

Only to provide ZamZam: to calculate your zakat under the rules you choose, keep your hawl, sync your data between the iPhone app and the website, and update bank balances and metal prices once a day. We don't use your data for anything else, and we never sell or share it for marketing.

Where it's stored

Your data is stored in Google Firebase (Cloud Firestore) in the United States, protected by security rules that let only your signed-in account read or change it. It is encrypted in transit and at rest. A copy is also kept on your iPhone so the app works offline.

Services we rely on

• Google Firebase — sign-in, database, website hosting and the daily server job.
• Apple and Google — sign-in.
• SimpleFIN Bridge — bank balances, only if you connect a bank. Your use of Bridge is governed by its own terms and privacy policy.
• gold-api.com and open.er-api.com — public gold, silver and exchange-rate prices. No information about you is sent to them.

Your choices

• Download your data at any time from Settings on the website.
• Disconnect your bank from Settings; the encrypted link is deleted immediately.
• Delete your account from Settings in the app or on the website. This permanently deletes your account and all of your data from our servers, and revokes ZamZam's Sign in with Apple access. Signing out of the iPhone app keeps a copy only on that device.

Children

ZamZam is not directed at children under 13, and we don't knowingly collect their data.

Not religious advice

ZamZam is a calculation tool, not a scholarly authority. Consult a qualified scholar for rulings on your situation.

Changes and contact

If this policy changes we'll update the date above, and tell you in the app for any significant change. Questions or requests: admin@izzah.org.