UMRA & HAJJ PILOT
PEACE · SECURITY · COORDINATION

Privacy Policy

1. Introduction and Controller

UMRA & HAJJ PILOT is a location-sharing, group coordination and safety application for Umrah and Hajj journeys, operated by GENIOX DIGITAL OÜ (registration no. 17528449). This Privacy Policy explains how personal data is processed when agencies, administrators, leaders, guides, visitors and linked family members use the service. Contact us at support@umrahajjpilot.com.

2. Information We Process

Depending on your role and features used, information may include:
  • Account information, name, telephone number, profile picture, account identifiers and telephone-based verification details.
  • Assigned agency, group (A/B/C/D), role, membership and authorized family connections.
  • GPS position, timestamps, last known location and relevant location history, including background updates when enabled.
  • SOS signals, recipients, alerts, safety events and notification records.
  • Device type, device identifiers, connectivity status and technical diagnostics required to operate the app.
  • Travel dates and passport/visa documents supplied by an authorized agency for trip administration.
  • Support messages and administrative records related to the service.
We aim to collect only information necessary for the service and its legitimate safety and coordination purposes.

3. Purposes and Legal Bases

We use data to create and manage accounts and groups, share locations with authorized members, coordinate journeys, send alerts and SOS notifications, provide visitor support, protect accounts, and meet applicable legal duties. Depending on the activity, processing may rely on performance of a contract, a legal obligation, legitimate interests or consent where required. Device location permission is distinct from any consent required by data-protection law. Disabling a permission may prevent some features from operating.

4. Location Sharing and Role-Based Access

Location may be processed in the background when the user has enabled the relevant device permission, so that live locations, last known positions, and safety features can function. Access is limited to authorized roles and assigned groups: agency Admins manage their own agency, Leaders and Guides access information necessary for their assigned groups, Visitors access only permitted personal/group information, and Family users have read-only access to their linked visitor as authorized. One agency cannot view another agency's visitors through the service. Do not share tracking access without appropriate authorization.

5. Passport, Visa and Sensitive Trip Documents

Passport and visa files are made accessible only to the Admin of the relevant agency. Leaders, Guides and Family users do not receive access to these documents through their roles. Such files should be used only for legitimate trip administration and protected through appropriate access restrictions and technical safeguards.

6. SOS, Notifications and Emergency Limitations

An SOS may notify assigned personnel and relevant authorized contacts, including a visitor's linked favorites where enabled. Emergency events and associated location data may be recorded to support operational response. Notifications depend on internet connectivity, devices and platform services and cannot be guaranteed to arrive immediately. UMRA & HAJJ PILOT does not replace official emergency or medical services.

7. Sharing and Service Providers

Data may be accessible to authorized agency personnel, permitted group members and linked family members according to their roles. We may use service providers for cloud hosting, mapping, communications and authentication, push notifications, diagnostics and security, under appropriate contractual and technical safeguards. We do not sell personal location histories for advertising. Disclosure may also occur when legally required.

8. International Processing and Security

Some supporting services may process data across national borders. Where required, appropriate safeguards for international transfers are used. We apply reasonable technical and organizational measures, including role-based access and protected communications, to reduce risks of unauthorized access, disclosure or loss. No system can guarantee absolute security.

9. Data Retention and Group Deletion

When an agency Admin deletes a group, the system automatically deletes personal data attributable solely to that group, including associated visitor profiles, location history, SOS records, group/family links and passport or visa files. There is no automatic 30-day waiting period for this group-deletion workflow. Data that must be retained by law may be kept only for the legally required period. Shared records or information necessary for a separate active group must be handled without improperly deleting that group's information.

10. Your Rights and Requests

Subject to applicable law, individuals may have rights to access, correct, erase, restrict or receive their personal data, object to certain processing, or withdraw consent where consent is the legal basis. Requests can be sent to support@umrahajjpilot.com. We may need to verify identity and agency/group relationship. You may also contact your local competent data-protection authority.

11. Children and Family Access

Where children participate, a parent or legal guardian must provide any authorization required by applicable law and oversee the child's location-sharing arrangements. Family accounts have access only to linked visitor information allowed by the service. Unauthorized tracking is prohibited.

12. Updates and Contact

We may update this policy to reflect changes in legal requirements, service features or data practices. We will publish the updated policy and provide further notice when legally required. GENIOX DIGITAL OÜ · Registration no. 17528449 · support@umrahajjpilot.com.