FMB

Privacy Policy

MyFMB · Faiz al-Mawaid al-Burhaniyah · Last updated 18 August 2026

This policy describes how the MyFMB mobile app and the FMB platform at fmb.noorai.sg handle personal data. The app is free. There is no in-app purchase and no advertising.

Who we are

FMB is operated for your jamaat’s Faiz al-Mawaid al-Burhaniyah programme. Day-to-day administration is performed by your FMB office using the admin console on this domain. Technical hosting is on Amazon Web Services, accessed at fmb.noorai.sg.

Data we collect

Account. Tenant identifier, ITS / staff ID, name, and password (verified by the server; the app stores session tokens in the device secure store, not your password).
Contact for password reset. If your FMB administrator has recorded a mobile number, a one-time code may be sent via WhatsApp to reset your password.
Thali, menu, RSVP, pledges, and feedback. Actions you take in the app are stored on the FMB server so your jamaat can operate distribution.
Location (drivers only). Precise location is requested only while you are on an active delivery route, and is shared with subscribers for that route. You can refuse the system permission; tracking will not run.

We do not sell personal data. We do not use advertising identifiers or third-party analytics SDKs in the app.

How we use data

Data is used only to provide FMB functions: sign-in, thali management, menus, miqaat RSVP, pledges, feedback, and delivery.

Storage and security

Data is transmitted with HTTPS to fmb.noorai.sg. Session tokens are kept in the platform secure store (iOS Keychain / Android Keystore). Servers run in AWS. Access is limited to authenticated FMB administrators for your tenant.

Retention and deletion

We keep operational records for as long as your jamaat needs them for FMB administration. To correct or delete your account data, contact your FMB administrator (see Support). After deletion, the app will no longer be able to sign you in.

Children

The app is intended for adults who have an FMB login issued by the administrator. It is not directed at children.

Your rights

Depending on where you live (including Singapore PDPA), you may request access, correction, or deletion of personal data through your FMB administrator.

Changes

We will update this page if our practices change. The date above is the latest revision.

Contact

Questions about privacy: see Support.