Privacy

Who this app is for

The app is for members of the Church in Tempe. Only adults (18 and older) can create an account, and every account is approved by a church admin. We don't sell or share your information, and the app has no advertising or tracking.

What we store about members

• Name and email, which church editors and admins can see. Other members may see your name where it's needed, such as on an event you sign up for.
• Phone, address, age, marital status and spouse's name, which only church admins can see.
• Your gender and the languages you speak. They put you in groups such as Sisters or Chinese speaking, which church editors and admins can see.
• Groups you're in, events you sign up for and messages sent to you. Some groups fill themselves: Brothers, Sisters, English, Chinese, Spanish and Korean speaking from your answers, YP for teens and their parents, and Children for parents of children under 13.
• If you turn on notifications, a push address for that device. Signing out removes it from that device.
• Feedback you send goes to the church admins, with your name.
• Replies to a message are seen by the people it was sent to, church admins and editors, and guardians of teens who received it.
• The app notes which parts you open (for example an announcement or an event) and when, to help the church serve better.

Phone, address, age, marital status and spouse's name are encrypted when stored. Names and email addresses are not encrypted, because the app needs them to sign you in and send you messages.

Children

Children under 18 can't create their own account. A parent or guardian who is a member can add them to their family from their Profile. The parent gives the details and confirms they are the child's parent or guardian.

• Under 13: a parent may add the child as a record on their own account: name, date of birth, gender and language. The child never signs in, and the app holds no email for them.
• 13 to 17: a parent may add the teen, and may also give an email so the teen can sign in, with read-only access. The teen's profile holds only their name, email, date of birth, gender and language, and the parent (not the teen) manages it. When a church admin approves the sign-in, the parents are told and the teen gets one email saying their sign-in is ready. Parents can change its email, and can give the teen a one-time sign-in code so they don't need their own inbox.
• A child's date of birth is seen only by their parents or guardians and church admins. Church editors see a teen's name, that they're a teen and who their parents are, but not their email, except on an event's sign-up list: there, church admins and editors see everyone signed up, children included, a teen's email, who signed them up, and any note the family left.
• Teens can't offer on or host hospitality requests, and never see visitors' contact details. When a message links a hospitality request, everyone it reaches, teens included, sees its summary: the visitor's name, dates, how many people and the purpose of the visit.
• A teen's account is read-only: they can read announcements, the calendar and messages, but can't sign up for events, change their details or share links. A parent signs them up for events from the event page, and the teen is told. Teens see how many people are going, not who.
• A parent can see, change or remove their child's record at any time from Profile → Family. Removing it deletes the record, and a teen's sign-in is deleted with everything in it.

Helping your teen sign in: on Profile → Family, choose “Get a sign-in code” and give your teen the code. On the sign-in page they choose “Have a code from your parent?” and enter their email and the code. A code works once, for 10 minutes.

Hospitality requests

When you ask the church for hospitality, its hospitality coordinators (its admins and editors) keep your names and contact details in their own records, not in this app. In the app they post only a summary: a name for your group (for example "Irvine young people"), your dates, how many are coming (each family's size, and how many brothers, sisters and others), what you need, and optional notes such as children's ages.

Adult members the request is sent to (everyone, or chosen groups) see that summary so they can offer to host; the coordinators choose the hosts and send them the details themselves. Notifications about a request give its dates and size, never names or ages.

Service providers

We use a small number of service providers to run the app: website hosting and spam protection, email delivery, and your device's notification service if you turn notifications on. They handle data only to provide those services to the church, not for their own purposes. Notifications are encrypted so the notification service can't read them.

Videos in the Library play from YouTube, which sees that you watched them.

Keeping and removing information

We keep your information while you're a member. You can update it from your Profile. A child's record is kept until their parent removes it. When an account is removed, its details are deleted; the church's activity log keeps only an internal id, not your name or email. To have your account or anything else removed, or to ask what we hold about you or your child, write to us.

Contact

Questions or requests: miaohe1@asu.edu or lius94@gmail.com.