7Majlis Privacy Policy

7Majlis processes a verified phone number, display name, optional profile photo, language, device notification token, group membership, optional Majlis photos, gathering status, reactions, reports, and in-app notifications to provide and secure the service.

Photos

Profile and Majlis photos are optional. Selected photos are cropped and resized for use inside the service. A profile photo is visible to people who share a Majlis with that profile. A Majlis photo is visible to its members and to people opening a valid invitation before joining. Majlis administrators can change or remove a Majlis photo, and users can change or remove their own profile photo.

Automatic Mawjood and location

Automatic Mawjood is off by default and enabled separately for each Majlis. Foreground attendance checks when the app opens or resumes and about every 5 minutes while visible, using GPS for up to 30 seconds per check. With While Using the App and Precise Location permission, one fresh accurate reading within the administrator's saved radius (20 metres by default; adjustable from 5 to 100 metres) marks you Mawjood. The nearest eligible pin wins overlaps and clears active attendance elsewhere. A clear outside reading marks a present member Not Mawjood; On My Way remains unchanged unless entering another enabled Majlis. Missing, inaccurate or uncertain readings never change attendance. Automatic and manual attendance changes pause checks for 5 minutes across devices and app restarts. Versions without optional background attendance do not check while backgrounded or closed. Version 1.2.1 and later offer one off-by-default Auto Mwjood toggle per Majlis, with explicit consent covering foreground and background checks. Earlier beta versions use separate room and device-background toggles. After explicit consent, Always and Precise Location permission, and Background App Refresh, iOS geographic-region, significant-location-change and visit events can wake the app. Larger geographic regions only trigger a check; a fresh precise GPS reading must still satisfy the saved per-Majlis attendance radius. GPS sessions normally last up to 30 seconds and may continue near a Majlis for up to 120 seconds, with a maximum 6-minute sampling budget per hour. Checks are event-driven, not guaranteed at fixed intervals. iOS can delay or prevent them, including after force-closing the app, so attendance can remain stale until a later event or reopening. The app does not request a persistent blue background-location indicator, but iOS controls privacy indicators and reminders. Existing foreground-only installations and their settings are unchanged by the optional feature. Precise readings are sent over HTTPS solely for attendance; raw coordinates and travel routes are not retained or shared with members. Saved Majlis pins, opt-in preferences, attendance-check timestamps, cooldown timestamps and resulting attendance are stored. The iPhone also retains the background consent, session credential, eligible Majlis pins and scheduling state needed to resume checks; signing out or disabling background attendance stops its monitoring. Disable attendance per Majlis or revoke location permission in iPhone Settings. Older automatic-attendance protocols cannot overwrite accounts that use the current attendance rules.

Temporary status photos

Administrators can optionally attach a photo to a Majlis status. Members can preview it. Administrators choose whether current status text, its photo, and confirmations clear after 24 hours or remain until changed or cleared. Timed statuses have background cleanup normally within 30 seconds. Replaced or expired status photos are removed from active server storage. Status text remains in the Majlis history until that history is cleared; backups may retain data according to the backup retention period.

Service providers

Firebase provides phone authentication, crash reporting, analytics, and messaging delivery. Apple provides push notification delivery. Branch supports app links. The 7Majlis application data, including uploaded photos, is stored on infrastructure operated for the service.

Use and retention

Data is used for authentication, group features, notifications, abuse prevention, reliability, and support. Operational records are retained while an account is active and for a limited period where required for security, backups, or legal obligations. Replaced photos are removed from active storage and current data and uploaded photos are included in protected service backups.

Your choices

You can remove an uploaded photo, control notifications in the app and iPhone Settings, and delete your account inside the app. Account deletion removes the active profile and access to its groups. For privacy or account questions, email x7majlis@icloud.com.

Phone invitations and user blocking

An administrator can enter a phone number to request an invitation. Older clients receive a blind acknowledgement. Newer clients can show whether an invitation was sent, is already pending, or the number is invalid, not found or currently unavailable. A blocked or inactive account produces the same not-found result as an unknown number. These availability results do not reveal the recipient’s name, profile or account identifier before they join. The recipient sees the inviting administrator and Majlis name and can accept or decline. Invitations expire after 30 days; clearing ordinary notifications does not remove pending invitations. Invitation relationships and their responses are retained with the accounts and Majlis to prevent duplicate requests. Abuse checks retain keyed phone digests rather than raw lookup numbers; attempt records older than 31 days are periodically purged. Blocking stores the two account identifiers and a display-name snapshot for your blocked-users list. Either person blocking the other hides their profiles, attendance, confirmations, status content and history from each other, and stops new invitations and Hayakom messages between them. Existing group membership is not removed. Unblocking does not undo the other person’s block or revive cancelled invitations. Personal image links recheck access when fetched; links shown to other members expire after one hour. Your own saved profile-image link remains valid until you replace the photo or deactivate the account. We cannot erase previously downloaded images, screenshots or notifications already delivered by iOS. Deleting an account removes access; protected backups may retain earlier records.

Attendance privacy

Each member can choose who may change their attendance (Majlis administrators, only themselves, or all Majlis members) and whether other members see both the status-change time and update method, only the time, or neither. You always see your own time and method. These choices do not hide the attendance state itself. The service withholds hidden time and method fields from other members, including administrators, and excludes hidden times from their recent-activity sorting. This cannot erase details already seen or prevent someone inferring a change by watching attendance updates. Older apps may show a placeholder where a hidden time is withheld.

Default Privacy applies your saved choices to new Majlises you create or join, including accepted invitations; it does not change existing memberships. Initial defaults are Auto Mwjood off, administrators only, and showing time and method. Newer apps offer Auto Mwjood as an Off / By GPS Location dropdown. Selecting GPS remains optional and requires device location consent; Always access is needed for background checks. A default GPS preference has no location target until a Majlis has a saved pin. Choose Off separately in each existing Majlis to stop its automatic attendance.