Privacy Policy

1. Information We Collect

We collect only what you provide:

• Account details: name and email address (required)
• Contact details: phone number (optional)
• Photo: a profile photo you upload (optional)
• Dietary requirements: food restrictions or allergy notes (optional)
• Sharing consent: your explicit choice about directory visibility
• Session data: cookies and one-time login codes used to authenticate you

We do not collect payment information, location data, or device tracking data.

2. How We Use Your Information

Your information is used solely to:

• Operate the member directory within your congregation
• Send one-time login codes to your email address
• Allow authorised Elders to manage member records within their congregation

We do not use your information for advertising, analytics, profiling, or any commercial purpose.

3. Who Can See Your Information

• Other congregation members can see your name, email, phone, photo, and dietary requirements only if you have explicitly enabled Directory Sharing.
• Church Elders can view all member records within their own congregation, regardless of your sharing consent. This is necessary for administrative purposes (e.g. catering, pastoral care).
• No one outside your congregation has access to your information.
• We do not share your data with third parties, except as required by law.

4. Data Storage & Security

Your data is stored on servers located in Australia. We use HTTPS encryption for all data in transit and take reasonable technical measures to protect your information from unauthorised access, loss, or disclosure. Photos are stored in private, access-controlled storage.

5. Data Retention

Your data is retained for as long as your account is active. If your account is removed, all associated personal data is permanently deleted within 30 days.

6. Your Rights

Under the Australian Privacy Act 1988, you have the right to:

• Access the personal information we hold about you
• Correct inaccurate information (via your profile page)
• Request deletion of your account and all personal data
• Withdraw sharing consent at any time (via your profile page, immediately effective)

To exercise these rights, contact your church Elder or email [email protected].

7. Cookies

We use a session cookie to keep you logged in and a CSRF cookie for security. No third-party cookies or tracking scripts are used.

8. Contact

For privacy enquiries or data access requests, contact: [email protected]
or speak with your church Elder.