Sovereignty
Sovereignty: what we run, what you can take, and where it stops
Sovereign means three things here, and each one is true today. We run our own servers in Europe: we rent them from Hetzner in Germany and Finland, and we operate them ourselves. We run no Google or Meta code on any member page. Your data sits on those servers, under EU law. Two things are not on our hardware, and we name them: our ad tag on marketing and directory pages is delivered by a content delivery network, and web push is relayed by Apple, Google or Mozilla, because that is how a browser delivers it. Neither carries what you read or write. One operator runs all of this, and that operator is us. Where sovereignty stops, this page says so.
Property by property
| Property | Where it runs | What you can take with you | What federates | What does not |
|---|---|---|---|---|
| ummah.email | Helsinki, Finland | Your full mailbox, today, over IMAP and JMAP | Mail, by SMTP, with any provider | Mail is not encrypted at rest |
| UmmahChat | Helsinki, Finland | Nothing yet | Nothing yet. Federation is off by choice | Rooms are not end to end encrypted |
| UmmahSocial | Nuremberg, Germany | A posts export, verified working on September 16 2026, sent to your verified email | Nothing yet | Not federated today |
| ummah.me | Nuremberg, Germany | A page export, today, sent to your verified email | Nothing | Nothing federates |
| UmmahPass | Nuremberg, Germany | An identity and settings export, live and being tested this week | Nothing | It is one login, run by us |
| Muslim Ad Network | Helsinki, Finland | Not a member product | Nothing | Centralised by design |
Portability is a standing rule. Mail exports today, over IMAP and JMAP. The ummah.me page export works today. The UmmahPass identity export is live and under test this week. The UmmahSocial posts export was verified working on September 16 2026. The UmmahPass identity export is the last one under test; we will not tell you that you can always leave until all four are proven.
UmmahChat
UmmahChat runs Matrix, an open protocol. Federation is off by choice, not by accident. The allowlist of servers we federate with is empty, so no other server can exchange messages with us. The Matrix key endpoint still answers, because the protocol requires it; it hands out a public key and nothing else. We will turn federation on when three things exist: named moderators at power level 50 in every room, a report queue, and a moderation log. The first step will be an allowlist of Muslim homeservers we know. Open federation is never the first step. Direct messages are end to end encrypted. Rooms are not, by design, so that we can moderate them.
UmmahSocial
UmmahSocial does not federate today. After Ramadan Blitz 2027 ends on February 8 2027, we plan one step: let people on Mastodon follow you, read only. It will be opt in, member by member. Nobody is federated by default.
UmmahPass
UmmahPass is the one login across our properties. Passkeys work today: you can register one in your settings and sign in with it. A passkey works only on ummahpass.io, so a fake site cannot use it. Recovery stays your verified email plus a support review. We will never use SMS for recovery.
Muslim Ad Network
The ad network is centralised, and it will stay that way. Advertisers need one operator who answers for what runs, where it runs, and what was delivered. A federated ad market cannot do that. The network funds the rest of this list. The consumer products do not carry ads into your inbox or your messages.
Your mail is not encrypted at rest. We say so on ummah.email/security and ummah.email/transparency, and we repeat it here. A valid legal order can reach it. Mail travels encrypted in transit, by TLS. We will not call it encrypted until it is.
Open source
We will publish two components under AGPL-3.0 by October 11 2026: UmmahPass, the identity server, and the ummah.me page renderer. A hosted fork must publish its changes. Before we publish, we will run a secrets review, a licence review of dependencies, and name a maintainer. That is a commitment with a date, not a claim about today.
Last verified against live code: September 16 2026.