Privacy Policy

1. Information We Collect

We collect information you provide directly to us, including:

• Email address and password (for account creation)
• Name (first and last name)
• Address (street, city, state, zip code)
• Phone number
• Date of birth
• Profile picture (optional)

You can sign in using email/password, Google Sign-In, or Sign in with Apple (iOS). If you use Google Sign-In or Sign in with Apple, we receive your name, email, and profile picture from that service. If you sign in with email/password, we only collect the information you provide directly.

We also collect:

• Push notification tokens — device tokens used to deliver notifications via the Expo push service
• User-generated content — verse reflections, prayer requests (stored encrypted), and confession appointment bookings

2. How We Use Your Information

We use your information to:

• Provide and maintain our services
• Send you announcements and event notifications
• Manage your account and profile
• Communicate with you about church activities
• Ensure app security and prevent fraud

3. Data Storage and Security

Your data is stored securely using Supabase, a cloud database service. We implement industry-standard security measures including encryption, secure authentication, and access controls. However, no method of transmission over the internet is 100% secure.

4. Third-Party Services

We use the following third-party services:

• Supabase: Database and authentication services
• Google Sign-In: Authentication option (if you choose to use it instead of email/password)
• Sign in with Apple (iOS): Authentication option on Apple devices
• Expo: Push notification delivery

These services have their own privacy policies. We encourage you to review them.

5. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Opt-out of certain communications
• Export your data

To exercise these rights, contact us at the email address below. To request account deletion, use Profile → Request account deletion in the app or email us as described on our Account Deletion page.

6. Children's Privacy

Our app is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately. Parents or guardians may also contact us to request deletion of a child's data.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. The app does not offer instant self-service account deletion. To request deletion, go to Profile → Request account deletion in the app or email us as described on our Account Deletion page. We process verified requests within 30 days. Limited security and audit logs may be retained for up to 90 days for fraud prevention.

8. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and the right to opt-out of the sale of personal information (we do not sell your personal information).

9. International Users

If you are using our app from outside the United States, please note that your data may be transferred to and stored in the United States. By using our app, you consent to this transfer.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last Updated" date. You are advised to review this policy periodically.