PRIVACY POLICY

Last Updated: 23 September 2026

IkhtiarSG ("IkhtiarSG", "we", "us" or "our") respects your privacy and is committed to protecting the personal data entrusted to us.

This Privacy Policy explains how we collect, use, disclose, store, protect and otherwise process personal data when you use the IkhtiarSG mobile application, website, services and related features (collectively, the "Platform").

IkhtiarSG is a Singapore-based platform that connects users with independent service providers offering Islamic, wellness, educational and related services.

By using the Platform or providing personal data to us, you acknowledge the practices described in this Privacy Policy.

1. AGE REQUIREMENT

IkhtiarSG is intended only for individuals who are 21 years of age or older.

You must be at least 21 years old to create an IkhtiarSG account.

We do not knowingly permit individuals below 21 years of age to register for an account. If we become aware that an account has been created by an individual below the required age, we may suspend or delete the account and associated personal data, subject to any information that we are required or permitted to retain.

2. PERSONAL DATA WE MAY COLLECT

The information we collect depends on how you use IkhtiarSG and which features you choose to use.

2.1 Account and Registration Information

When you create or maintain an account, we may collect information such as:

• your name;

• email address;

• telephone number;

• date of birth or information used to verify that you satisfy our age requirement;

• gender;

• profile photograph;

• account identifiers;

• authentication and verification information; and

• information you voluntarily add to your profile.

Your password is used for authentication through our authentication provider. We do not display your password to other users.

2.2 Service Provider Information

If you apply to become or operate as a Service Provider, we may additionally collect information such as:

• professional information;

• services offered;

• years of experience;

• business or UEN information, where applicable;

• service locations or areas;

• qualifications;

• certifications;

• achievements;

• proof of business;

• application information;

• verification documents;

• application status;

• service listings;

• listing photographs;

• pricing and availability information; and

• other information submitted in connection with your provider account.

2.3 Private Verification Documents

Documents submitted as part of a Service Provider application or verification process may be used by IkhtiarSG to assess qualifications, eligibility, professional information or proof of business.

These verification documents are separate from certificates or qualifications that a Service Provider chooses to display publicly on their profile.

Verification documents submitted privately for assessment are not intended for public display unless we specifically tell you otherwise or you separately choose to publish the relevant information.

2.4 Public Provider Information and Certificates

Service Providers may voluntarily publish information on their profile, including certificates, qualifications, achievements, professional descriptions, experience, UEN information and other information relating to their services.

Information deliberately submitted for public display may be visible to other IkhtiarSG users.

Service Providers should remove or obscure unnecessary personal or sensitive information before publicly uploading a document, including identification numbers, residential addresses or other information that is not necessary to demonstrate the relevant qualification or achievement.

IkhtiarSG may remove content that is unrelated, inappropriate or contrary to our policies.

Unless expressly stated otherwise, IkhtiarSG displays certificates and qualifications as submitted by Service Providers and does not independently guarantee their authenticity, validity or continuing status.

2.5 Listings and Service Information

When a Service Provider creates a listing, we may process information such as:

• service category;

• listing title and description;

• photographs;

• price;

• availability;

• service location;

• experience; and

• other information voluntarily provided in connection with the listing.

Information submitted as part of a public listing will generally be visible to users of the Platform.

2.6 Bookings

When you make, receive or manage a booking through IkhtiarSG, we may process information such as:

• the user and Service Provider involved;

• selected service;

• booking date and time;

• booking status;

• price or transaction-related information;

• booking notes;

• communications associated with the booking; and

• other information necessary to facilitate or administer the booking.

2.7 Messages and Communications

IkhtiarSG provides communication features that allow users and Service Providers to communicate.

We may store and process:

• message content;

• sender and recipient identifiers;

• sender name;

• timestamps;

• booking proposals or related information contained in conversations; and

• technical information required to deliver messages.

Users should avoid sending unnecessary sensitive personal information through chat.

2.8 Ratings and Reviews

When you submit a rating, review or testimonial, we may collect:

• your account identifier;

• the Service Provider or service being reviewed;

• rating;

• written review or testimonial;

• service category;

• date and time; and

• related information.

Reviews and ratings may be displayed to other users as part of the Platform.

2.9 Reports, Complaints and Evidence

If you report a user, Service Provider, listing or incident, we may collect:

• your identity;

• identity of the person or listing being reported;

• report category;

• incident summary;

• description;

• photographs or other evidence;

• timestamps;

• investigation notes;

• administrative actions; and

• related communications.

Reports and supporting evidence are used for moderation, investigation, safety, dispute handling, enforcement and related administrative purposes.

Please do not include personal or sensitive information that is unnecessary for us to investigate the matter.

2.10 Social and Interaction Information

Depending on the features you use, we may process information concerning:

• providers you follow;

• listings or content you like;

• users you block;

• profile interactions;

• service preferences; and

• other Platform interactions.

2.11 Location Information

Certain IkhtiarSG features may request access to your device location.

Location may be used to provide features such as:

• locating nearby suraus or prayer locations;

• Qibla-related functionality;

• location-based service functionality; and

• other features that reasonably require your location.

Where device permissions permit, this may include precise location.

We request location access through your device's permission system. You may disable location permission through your device settings, although some location-dependent features may then be unavailable or less accurate.

IkhtiarSG does not intend to continuously track your location in the background unless we specifically disclose such functionality and obtain any permission required for it.

2.12 Surau and Community Contributions

If you submit information relating to a surau or prayer location, we may process information such as:

• location details;

• address;

• geographic coordinates;

• photographs;

• descriptions;

• reviews;

• contributor information; and

• submission and moderation information.

Information intended as a community contribution may be publicly displayed following any applicable moderation process.

2.13 Notifications

If you enable push notifications, we may process:

• push-notification tokens;

• device/platform information;

• notification preferences; and

• information required to generate and deliver a notification.

Notifications may concern messages, bookings, applications, account activity, reports or other relevant Platform activity.

Depending on your device settings, notification content may appear on your device's lock screen.

2.14 Technical and Diagnostic Information

We and our technology service providers may automatically process technical information necessary to operate, secure and improve the Platform, such as:

• device and operating-system information;

• application version;

• crash information;

• error logs;

• diagnostic information;

• timestamps;

• technical identifiers; and

• information relating to application performance.

3. HOW WE USE PERSONAL DATA

We may collect, use and process personal data for purposes including:

• creating and managing user accounts;

• verifying account information and eligibility;

• authenticating users;

• providing Platform functionality;

• connecting users with Service Providers;

• processing Service Provider applications;

• reviewing qualifications and verification documents;

• displaying Service Provider profiles and listings;

• facilitating bookings;

• enabling communications between users;

• providing ratings and reviews;

• providing location-dependent functionality;

• operating surau and community features;

• delivering notifications;

• administering payments, subscriptions or purchases where applicable;

• providing customer support;

• responding to enquiries;

• investigating complaints and reports;

• moderating content;

• preventing fraud, abuse and misuse;

• enforcing our Terms and policies;

• maintaining Platform security;

• diagnosing errors and technical problems;

• maintaining, developing and improving IkhtiarSG;

• maintaining appropriate business and transaction records;

• complying with applicable legal and regulatory requirements; and

• protecting the rights, safety and legitimate interests of IkhtiarSG, our users, Service Providers and others.

We will not use personal data for purposes that are materially different from those notified to you unless permitted by law or appropriate notice or consent is provided.

4. PUBLIC INFORMATION

Certain information is intended to be visible to other users.

Depending on your account type and the information you choose to provide, this may include:

• profile name;

• profile photograph;

• biography;

• Service Provider description;

• services offered;

• years of experience;

• ratings and reviews;

• follower information;

• UEN or business information voluntarily displayed;

• public certificates and qualifications;

• listings;

• listing photographs;

• pricing;

• service areas; and

• other information clearly submitted for public display.

Your private contact number is not intended to be publicly displayed merely because you have provided it during account registration, unless you independently choose to publish it through a public profile, listing or other public field.

You should carefully consider what information you voluntarily make public.

5. HOW WE DISCLOSE PERSONAL DATA

We do not sell personal data.

We may disclose or make personal data available where reasonably necessary to:

• technology and cloud-service providers;

• authentication providers;

• hosting and storage providers;

• notification providers;

• crash and diagnostic providers;

• mapping, location and geocoding providers;

• payment or app-store providers;

• professional advisers;

• authorities where required by applicable law;

• other users where the relevant information is intentionally public or disclosure is necessary for a feature you choose to use; and

• other parties where you direct or consent to the disclosure.

Service providers processing personal data on our behalf are expected to process such information for the relevant service purposes and subject to applicable data-protection requirements.

6. THIRD-PARTY TECHNOLOGY SERVICES

IkhtiarSG relies on third-party technology infrastructure to operate the Platform.

Depending on the features and production configuration in use, these may include:

Google / Firebase

We use Google and Firebase services for functions that may include:

• user authentication;

• database services;

• cloud storage;

• server-side functionality;

• application infrastructure; and

• mapping-related functionality.

Information processed through these services may include account information, Platform content, uploaded files, technical information and other information required to provide IkhtiarSG functionality.

Expo

Expo services may be used in connection with mobile-application infrastructure and push notifications.

Where push notifications are enabled, notification tokens and information necessary to deliver the notification may be processed through notification infrastructure.

Sentry

We may use Sentry to identify crashes, software errors and performance problems.

Sentry may process technical and diagnostic information associated with application errors.

Mapping and Geocoding Services

IkhtiarSG may use mapping or geocoding services to convert addresses into geographic coordinates, display maps or provide location-related features.

For certain community-location functions, address information may be submitted to a geocoding service such as OpenStreetMap/Nominatim for the purpose of resolving a location.

SMS / Verification Providers

Where telephone verification or SMS functionality is enabled, a telecommunications service provider such as Twilio may process a telephone number and verification-related information for the purpose of delivering and validating a verification code.

Apple and Google

Where purchases or subscriptions are processed through Apple's App Store or Google Play, Apple or Google may process payment information under their own terms and privacy practices.

IkhtiarSG generally receives information necessary to determine purchase, entitlement or subscription status rather than complete payment-card credentials processed by the relevant app store.

Third-party services maintain their own privacy practices, which users may review directly with the relevant provider.

7. PAYMENTS AND PURCHASES

Certain IkhtiarSG features may involve subscriptions, purchases, provider fees or other transactions.

Where payment is processed by an app store or external payment provider, the payment provider processes the payment credentials required to complete the transaction.

IkhtiarSG may receive or maintain information such as:

• transaction identifier;

• purchase or subscription status;

• product purchased;

• amount;

• date;

• payment status;

• transaction reference; and

• information required to administer the relevant entitlement.

We do not intend to independently store complete credit or debit card details where the payment is processed entirely by the applicable app store or payment provider.

8. CONSENT AND DEVICE PERMISSIONS

Certain functionality requires your permission, including location access and notifications.

You can manage device permissions through the privacy or application settings on your device.

Withdrawing a permission may prevent the relevant feature from operating correctly but will not necessarily affect processing already lawfully undertaken.

Where processing is based on consent, you may contact us regarding withdrawal of consent. Withdrawal is subject to applicable legal and contractual consequences, and we will inform you of relevant consequences where appropriate.

9. DATA RETENTION

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected or for legitimate business or legal purposes.

Different categories of information may therefore have different retention periods.

Factors we may consider include:

• whether your account remains active;

• the nature of the information;

• the reason it was collected;

• outstanding bookings or transactions;

• complaints or disputes;

• fraud and abuse prevention;

• security requirements;

• accounting and record-keeping requirements;

• contractual requirements;

• legal or regulatory obligations; and

• potential legal claims.

When personal data is no longer reasonably required for business or legal purposes, we will take reasonable steps to cease retaining it or remove the means by which it can be associated with an identifiable individual, as appropriate.

Some information may therefore be retained for a limited period after account deletion where reasonably necessary or permitted by law, including for security, fraud prevention, dispute resolution, enforcement, regulatory compliance or legal record-keeping.

10. ACCOUNT AND DATA DELETION

Users may request deletion of their IkhtiarSG account.

Where available, account deletion may be initiated through the account settings within the application.

You may also contact us at:

admin@ikhtiar.sg

to request account or personal-data deletion.

When an account-deletion request is processed, we will take reasonable steps to delete or anonymise personal data associated with the account that is no longer required.

Certain information may be retained where reasonably necessary or permitted by law, including information required for:

• fraud and abuse prevention;

• security;

• outstanding transactions;

• complaints or disputes;

• enforcement of legal rights;

• compliance with legal or regulatory obligations; or

• legitimate business record-keeping requirements.

Where information must be retained, access will be limited as appropriate and the information will not be retained longer than reasonably necessary for the applicable purpose.

Deletion of an IkhtiarSG account does not automatically cancel an active subscription administered by Apple, Google or another external provider. Users should separately manage such subscriptions through the relevant provider where necessary.

Community Contributions

Account deletion does not necessarily result in the removal of community-contributed content that you previously submitted to IkhtiarSG, such as surau or prayer-location information, photographs, descriptions, location details, corrections or other community contributions.

Where appropriate, IkhtiarSG may retain and continue to display such content for the operation and benefit of the Platform and its community, provided that personal information identifying the contributor is removed or no longer associated with the contribution, unless retention of such information is otherwise required or permitted by law.

If a retained photograph or other contribution itself contains personal data that identifies you or another individual, we may review whether the content should be removed, anonymised or otherwise handled in accordance with this Privacy Policy and applicable law.

11. ACCESS AND CORRECTION

Subject to applicable law, you may request access to personal data that we hold about you or request correction of inaccurate or incomplete personal data.

Certain information can be updated directly through your account.

For other access or correction requests, contact:

admin@ikhtiar.sg

We may need to verify your identity before processing a request.

Requests may be subject to exceptions or limitations permitted under applicable law.

12. SECURITY

We use reasonable administrative, technical and organisational measures designed to protect personal data against unauthorised access, collection, use, disclosure, copying, modification, disposal or similar risks.

These measures may include access controls, authentication mechanisms, cloud security controls and encrypted communications where supported by our infrastructure.

However, no internet-based service, mobile application or electronic storage system can guarantee absolute security.

Users are responsible for keeping their account credentials confidential and should notify us promptly if they believe their account has been compromised.

13. INTERNATIONAL DATA TRANSFERS

IkhtiarSG is based in Singapore, but some of our technology and service providers operate infrastructure outside Singapore.

Accordingly, personal data may be processed or stored outside Singapore.

Where personal data is transferred outside Singapore, we will take reasonable steps to ensure that the transfer is made in accordance with applicable requirements under Singapore's Personal Data Protection Act 2012 ("PDPA"), including requirements relating to a comparable standard of protection where applicable.

14. DATA BREACHES

If we become aware of a personal-data breach, we will assess the incident and take appropriate steps in accordance with applicable law.

Where notification to the Personal Data Protection Commission of Singapore ("PDPC") and/or affected individuals is required under the PDPA, we will make the required notifications in accordance with applicable requirements.

15. PERSONAL DATA PROTECTION ACT

IkhtiarSG seeks to handle personal data in accordance with applicable requirements of Singapore's Personal Data Protection Act 2012.

Our data-protection practices are guided by applicable obligations relating to matters including:

• accountability;

• notification;

• consent;

• purpose limitation;

• accuracy;

• protection;

• retention limitation;

• transfer limitation;

• access and correction; and

• data-breach notification.

Nothing in this Privacy Policy limits rights or obligations that cannot lawfully be limited under applicable legislation.

16. NO SALE OF PERSONAL DATA

IkhtiarSG does not sell users' personal data.

We do not currently use personal data for cross-company behavioural advertising or tracking merely because users use the IkhtiarSG Platform.

If our practices materially change in the future, we will update our disclosures and obtain any permissions or consent required by applicable law or platform rules.

17. LINKS AND THIRD-PARTY SERVICES

IkhtiarSG may contain links to websites, applications or services operated independently by third parties.

We are not responsible for the privacy practices of independently operated third-party services.

We encourage users to review the privacy policies of third parties before providing personal information to them.

18. SERVICE PROVIDERS ARE INDEPENDENT

IkhtiarSG operates as a platform through which users may discover and interact with independent Service Providers.

A Service Provider may independently request or receive information from a user in connection with services arranged between them.

Where a Service Provider independently collects or processes information outside IkhtiarSG and for their own purposes, their handling of that information may be subject to their own privacy obligations and is not necessarily controlled by IkhtiarSG.

Users should exercise appropriate judgment before providing additional personal or sensitive information directly to a Service Provider.

19. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect:

• changes to IkhtiarSG;

• new or modified features;

• changes to our data practices;

• changes to third-party services;

• changes in applicable law or regulatory guidance; or

• security and operational requirements.

The revised Privacy Policy will display an updated "Last Updated" date.

Where a change is material, we may provide additional notice through the Platform or another appropriate communication method.

Continued use of the Platform following an update will be subject to the updated Privacy Policy, to the extent permitted by applicable law.

20. DATA PROTECTION CONTACT

Questions, concerns and requests concerning this Privacy Policy or personal data handled by IkhtiarSG may be directed to:

Data Protection Contact / Data Protection Officer
IkhtiarSG
Singapore
Email: admin@ikhtiar.sg

When contacting us about an account, access, correction or deletion request, please provide sufficient information for us to identify the relevant account and understand your request.

We may request additional information where reasonably necessary to verify your identity before disclosing, modifying or deleting personal data.

21. CONTACT US

For general enquiries concerning IkhtiarSG:

IkhtiarSG
Singapore
Website: www.ikhtiar.sg
Email: admin@ikhtiar.sg

For privacy and personal-data matters, please use admin@ikhtiar.sg.