Pillar · Practice · in build
Ḥifẓ al-ʿAhd
حفظ العهد · keeping the covenant
A private dashboard, tied to your UmmahPassport identity, that tracks the lifelong obligations you carry as a Muslim and helps you complete them on time. Annual zakāt, annual qurbānī (where applicable per your madhhab), a current wasiyya in place, Hajj on the ladder. The tracking is private; the reminders are precise; the completion paths are connected to the Ihsan-Standard-vetted org ecosystem.
What it tracks
Seven obligations. Four universal, three madhhab-or-trigger dependent.
- Yearly (lunar)
Annual zakāt
الزكاة السنوية
Tracks your zakāt-paying anniversary per hijri calendar. We remind you when the hawl is approaching, walk you through the calculation using the Universal Zakat Calculator with live gold + silver nisab, and let you mark the obligation complete with a record of where you disbursed. The dashboard does not store amounts you tell it not to.
- One-time, kept current
Wasiyya / Islamic will
الوصية
Tracks whether you have a current sharia-compliant will in place. We provide the templates (linked from Ihsan Standard's toolkit), point to fiqh-aware estate-planning resources, and remind you to review every 5 years or after major life events (marriage, child, property, hijrah).
- Once in a lifetime · if able
Hajj
الحج
Tracks where you are on the Hajj ladder: have not begun planning · saving · registered · awaiting visa · scheduled · completed (mabrūr inshāllāh). When the Halal Travel pillar ships, your Hajj plan will integrate directly with the operator booking.
- Yearly during Dhul Ḥijja
Qurbānī / Uḍḥiya
القربان / الأضحية
For users following the Ḥanafī madhhab (where qurbānī is wājib annually on those who meet the nisāb), we surface the cutoff each year, link to Ihsan-Standard-vetted orgs running scholar-reviewed qurbānī programs, and mark complete. For other madhāhib it is optional (sunna muʾakkada per Mālikī, Shāfiʿī, Ḥanbalī positions).
Madhhab-dependent. You set your madhhab once in your account; we honor it.
- Yearly before Eid prayer
Zakāt al-Fitr
زكاة الفطر
Tracks fitr payment status by household member. We remind in the last week of Ramaḍān, link to orgs meeting the disbursement-timeline standard from the Ihsan Standard toolkit, and mark complete with timestamp.
- As triggered
Kaffāra obligations
الكفّارات
If you've incurred a kaffāra (broken oath, deliberate breaking of a Ramaḍān fast, ẓihār) and want to track its fulfillment in the prescribed sequence, the dashboard walks you through it confidentially. Never shared with anyone. The tracking exists in encrypted form keyed to your session — admins cannot see this.
Triggered-only. Opt-in per case.
- As triggered
Fidya
الفدية
For missed fasts due to permanent illness or old age: we track per-day fidya owed and link to orgs running fidya programs.
Triggered-only.
Why this lives behind UmmahPassport
Religious obligations are deeply personal data. We treat them that way.
A list of which years a user paid zakāt, which orgs they paid it to, whether they have a will, where they are on the Hajj ladder — this is dossier-grade data. Storing it on a Google calendar, in a generic SaaS, or on an app that uses Meta Login is unacceptable. Ḥifẓ al-ʿAhd is built on the UmmahPassport zero-admin-visibility architecture — admins can see aggregates only.
Per-user encryption
Every entry on your obligations dashboard is encrypted at rest with a key derived from your passkey. Admins running database queries see ciphertext. There is no admin tool that shows "give me User U's zakāt history."
We see aggregates, not entries
The network can report "N% of UmmahPassport users have a wasiyya on file" as a sector-wide signal. The system cannot report which N% nor for which users. The aggregate is produced by differential-privacy primitives, never by querying individual records.
Nothing financial unless you choose
We never need to know how much zakāt you paid. The default is "mark complete" without an amount. If you choose to log an amount, it is encrypted client-side before storage, and only the per-year-aggregate-for-your-records is visible inside your authenticated session.
Delete on request
Right to delete per Charter §IV. You can purge any individual entry or your entire obligations history at any time. Audit log of deletion events is published in aggregate.
See the Security Architecture page for the full description of pairwise pseudonymous IDs, encrypted activity logs, aggregate-only telemetry, and the two-key admin ceremony.
Read the security architecture →Optional · bank & brokerage integration
Reconstruct past missed zakāt years in one pass.
Many of us realize later in life that we owe zakāt for years we did not pay — sometimes because we were not aware the threshold was crossed, sometimes because the calculation seemed too hard. The classical fiqh position is that this debt remains owed and must be reconstructed and paid. Ḥifẓ al-ʿAhd offers an opt-in way to do that with the actual data your banks and brokerages already hold.
Read-only Plaid / MX / Yodlee integration
Connect your bank, brokerage, and investment accounts through standard aggregators (Plaid, MX, Yodlee) on a strictly read-only basis. We see balance snapshots over time, not transactions. The connection is per-account and per-time-window — you decide which accounts and how far back. Data passes through your authenticated UmmahPassport session and is processed in the browser; we never store account credentials.
Historical nisāb crossing detection
For each lunar year in the lookback window, we compare your balance against the historical gold + silver nisāb for that year. We flag every year where the threshold was crossed for a full hawl. The output is your reconstructed schedule of owed zakāt years with calculated amounts — ready to disburse forward as catch-up payments. The classical fiqh position: catch-up zakāt is qaḍāʾ and remains owed; we make the calculation feasible.
Privacy on the read
Computation runs in your browser. The aggregator response, the calculation, the year-by-year reconstruction — none of it leaves your session. UmmahPassport servers see only that you completed a reconstruction event (for aggregate metrics like “X% of users have completed catch-up reconstruction”) and never the amounts or accounts.
After death · wasiyya channel
Designate someone to settle your obligations if you can’t.
One of the practical roles of the wasiyya is ensuring that debts, unpaid zakāt, and other unfulfilled obligations are settled out of the estate before distribution to heirs. Most people do not actually have a designated person who knows what is owed. Ḥifẓ al-ʿAhd can set this up with you while you are well.
Designate a wasiyya beneficiary
Pick one or two trusted people — usually a spouse, adult child, or executor of your will — who will be contacted upon your death to settle your religious obligations. They sign up to UmmahPassport (free) and accept the role; nothing else is required of them while you’re alive.
Dead-man’s-switch protocol
If you fail to check in for [N] months (configurable; default 6) we initiate the wasiyya verification protocol. We contact your designated person and require a death certificate or equivalent local-jurisdiction proof. Until verified, your obligations data remains sealed.
Settlement-only data disclosure
On verified death, the beneficiary receives only the obligations-relevant summary: unpaid zakāt years and totals, unfulfilled qurbānī years, kaffāra in progress, fidya owed. They do not receive your full activity history. The summary is enough to settle out of estate; nothing more.
Pre-authorized disbursement instructions
Optionally, you can pre-author detailed instructions: which Ihsan-Standard-vetted org should receive your catch-up zakāt, which qurbānī program should run on your behalf, whether kaffāra should be fulfilled via fasting (by relatives) or food (by disbursement). Your beneficiary executes; they don’t guess.
Scholar-reviewed
The protocol above — particularly the dead-man’s-switch trigger, the sealed-until-verified data model, and the pre-authorized disbursement instructions — is reviewed by the UmmahPassport scholar council against the classical fiqh on wasiyya, qaḍāʾ zakāt, and the priority of debt settlement before estate distribution. The reviewed protocol is published as a versioned document in the Charter appendix.
How it connects to the rest of the network
One identity, every obligation, the same vetted ecosystem.
- →Ihsan Standard.When you mark zakāt complete, you pick from Ihsan Standard’s directory of orgs that meet the zakāt-policy standard (segregation, scholar board, fī sabīlillāh disclosure). You see the tier-badged orgs first.
- →Ihsan Standard · Universal Zakat Calculator. The calculator your dashboard uses for the annual reckoning. Live gold + silver nisab; 8-category allocation calculator.
- →Ihsan Standard toolkit · Wasiyya templates. The sharia-compliant will templates you use when the wasiyya item gets a status of “not yet in place.” Links to fiqh-aware estate-planning resources.
- →NoorMap.Where Tier-3 verification ceremonies and in-person attestations connect to your dashboard. Your local masjid’s zakāt program can show up directly under your “complete this year” flow.
- →Halal Travel (roadmap). When the Halal Travel pillar ships, your Hajj plan integrates with operator booking directly — same identity, no separate account.
Status · in active build
Keep the covenant. Carry the passport.
Ḥifẓ al-ʿAhd is in active build. Sign in to UmmahPassport now and you’ll be notified the day the dashboard opens.