Privacy

The short version. UmmahArmy is a work platform, so most of what it holds about you is work: the missions you took, what you submitted, what you were rated, and what you earned. Some of that is deliberately visible to the people you work with. This page covers only what is specific to UmmahArmy; everything ecosystem-wide lives in one policy, linked at the bottom.

What UmmahArmy collects

• Your soldier profile - name, email, country, skills, bio, hours you're available, a profile link, and, if you upload them, a profile photo and a cover image. Your rank, missions completed, and average rating are computed from your work here, not supplied by you.
• Your legal name - only if you add it in Settings. Only you and our team can see it. We use it to pay you, for tax records, and to settle a dispute. It is never shown on your profile or to other members, and it is in your data download.
• Mission participation - which missions you deployed on, what you submitted (text, links, uploaded files), when you submitted it, and the rating and written feedback exchanged between you and the Ameer in both directions.
• UmmahPoints - every award and deduction is written to a ledger with the reason and the running balance, so a points total can always be explained rather than asserted.
• Paid missions - the amount, its status, and Stripe's references. Stripe handles the payout account; we never see or store your bank or card details.
• War-room messages - the messages and attachments you send on a mission thread. To show you which threads have new messages, we also store when you last opened each one.
• Organizations - if you lead one as an Ameer, its name, type, description, the missions it has posted, and, if you upload them, its logo and cover image.
• Your portfolio - if you are a Soldier: the images, titles, summaries and alt text you add, and, for each image, your note that you have the right to publish it. With that note we record the time and a hashed form of your address. A portfolio image is stored on our public image store, so it has a public address. If our team takes one down, we hide it and move its bytes to a private store, and we keep the bytes, the hidden entry and the report rather than deleting them.
• Offers and orders - the Offers you publish, and for each order: what was bought, the buyer's answers to your questions, delivery messages and files, the timeline, and the amounts. Card payments go through Stripe; we never see or store card numbers.
• How you get paid - if you sell through Offers: the payout service you choose (Stripe, Wise, PayPal or Payoneer), the email address and account holder name for it, your country, and each withdrawal you ask for. We send only what that service needs to pay you.
• Direct messages - messages and files you send another member about an Offer or an order. Only the two of you can read them, and they are not end-to-end encrypted; in a dispute over an order, our staff can read them to decide it.
• Mission alerts - only if you turn them on in Settings. We store that you chose them and the date you chose. We also keep a record of each alert we send you, so you never get the same one twice. When an Ameer or our team sends an alert about a new mission, you see a notification in the app (the bell). The sender picks everyone who turned alerts on, or only those whose skills match. We never send these mission alerts by email, text or push. Until you turn them on, you get none of them. To stop them, turn them off in Settings. If you turn them off, we clear the date. Rapid Response and The Sitrep are separate sign-ups, and they can email you about new missions.
• Site search - UmmahArmy does not save what you search for. Your search words are part of the page address, so our own server logs and our self-hosted analytics record them the same way they record any page you visit.
• The contact form - your name, email, the topic you pick, and your message, sent to our team's inbox. A short copy (name, email, topic, and the first 200 characters of the message) is also written to our server log.

What other people see

Ameers browsing for soldiers see your name, photo, cover image, rank, skills, completed-mission count, and average rating. Soldiers see an organization's name, its logo and cover image, type, and mission history. If a Soldier has a portfolio, those images with their titles and summaries are shown too. A Soldier's profile and an organization's page are public: anyone, including a signed-out visitor or a search engine, can open them, and a search engine can index them. Portfolio images have a public address a search engine can index. Any signed-in member can report an image, and we record who reported, which image, and when. Reporting does not remove the image; only our team can take an image down, and we do that by hand. War-room messages are visible to everyone on that mission.

A Soldier's page is not published until they choose to make it public. New Soldiers make that choice at sign-up: "Keep my page private for now" is preselected, and "Make my page public" means anyone can see their profile page. The choice can be changed on the profile at any time, and a page turned off hides that Soldier's published Offers too.

Images you upload as a profile photo, a cover, an organization logo or a portfolio image are re-encoded on the way in. That removes the camera's own record of the shot, including any location it carried, and we do not keep the original of those files. Other files you upload, such as offer samples, mission submissions, delivery files and direct-message attachments, are stored as you sent them and keep any camera data they carry.

One honest exception. War-room messages are not end-to-end encrypted. They are stored in a form our systems can read, and when a dispute is raised over a mission, the messages on that mission can be read by our staff to resolve it. We would rather say that plainly than call the war room "private."

Activity tracking on this site

UmmahArmy loads UMG's own first-party behavioral system, which links your activity here to your UmmahPass profile across our sites and is used today to improve the product. It is on by default, fully disclosed, and you can turn it off - which deletes the profile, not just future collection - in your UmmahPass privacy settings. Aggregate traffic measurement uses Matomo on our own servers. No Google Analytics and no Meta pixel run on this site. EPOM, our ad server, does run here and can set a cookie. Some paid ads it serves carry a Google ad tag. Our full privacy policy explains what that tag does.

The commitment that matters most here

"We never generate fake activity - reviews, donor counts, member counts. What you see on our surfaces is real or clearly labeled."

Quoted from section 2 of the ecosystem privacy policy. On UmmahArmy that is why an auto-released mission shows no star rating instead of a default one - nobody rated it, so nothing is displayed.

Verification

Verification is free and you choose whether to do it.

• ID check - if you ask for the "ID verified" label, you upload a photo or PDF of a passport, national ID card or driving licence. We encrypt the file before it is saved on our server, using a key our application holds. Only UmmahArmy administrators can open it, and every time one does, we record who opened it and when. We delete the file 90 days after we decide, or straight away if you withdraw your request. Other members never see your document; they see only the "ID verified" label. We check that you are a real person with a real document. We do not certify anyone's faith.
• Organization check - if an Ameer asks for the "Verified organization" label, we collect the organization's registration number, its website, and an official email address at the website's own domain, and we email a code to that address to confirm it is reachable. We keep these details with the decision.

Downloading your data

When you are signed in, Download my data builds an archive of what you have given UmmahArmy: your profile, your missions and submissions, the War Room messages you sent, the reviews you wrote, your points history, and the files you uploaded. You confirm it is you with a code we email you, and we email the download link to the address on your account. The link works for 7 days, and only while you are signed in. After that we delete the archive.

Deleting your account

You can request deletion from your account settings. Profile data goes; the transaction and points records tied to paid work are kept for the period the law requires, and deletion requests themselves are logged so we can prove we honored them.

The Sitrep newsletter

If you sign up for The Sitrep (footer form), we collect your email, how often you asked for it ("weekly digest" or "every new mission"), and where you signed up. This is double opt-in: signing up sends a confirmation email, and nothing else sends until you click it. Every Sitrep email has an unsubscribe link (one click, no login). We do not track whether you open or click these emails - no tracking pixels. If you unsubscribe, we keep your address on file only to remember not to email you again (suppression), or delete it entirely on request.

The rest of the policy

This site's contact form stores your message, your email address if you give one, and the technical details of the request (the IP address and browser type your device sends), so we can reply and keep the form working. We aim to reply within 2 working days, and form messages are deleted after 24 months. The details are in the canonical policy.

Contact

Questions, or a request to see or delete what we hold: salaam@ummah.army, or the contact form.