Privacy Policy

At ChurchFoundry, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use ChurchFoundry’s church management website, church-branded mobile apps, and related services, operated by Moriah LLC.

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• Name and email address
• Password hash (your password is not stored in plain text)
• Profile information (bio, profile picture)
• Church membership and affiliation preferences
• Language preferences

1.2 Third-Party Authentication

When you sign in using third-party services (Google and Apple), we may receive:

• Your name, email address, and profile picture
• Public profile information as permitted by your privacy settings
• Unique identifier from the authentication provider

We only request the minimum permissions necessary to provide our services. You can revoke these permissions at any time through your third-party account settings.

1.3 Community and Content Data

As part of our community platform, we collect:

• Posts, comments, and reactions you create
• Bible study progress and reflections
• Prayer requests (with privacy settings you control)
• Church event participation and RSVPs
• Small group memberships and interactions
• Church directory, family, attendance, volunteer and pastoral-care records supplied by your church
• Giving records, event registrations, forms and payment transaction references
• Device push tokens associated with your church app

1.4 Usage Information

We automatically collect information about how you use our services:

• IP addresses and device identifiers
• Browser type, operating system, and version
• Pages visited, features used, and time spent
• App usage patterns

1.5 Communications

We collect information when you contact us:

• Support requests and feedback
• Email communications
• In-app messages

2. How We Use Your Information

2.1 Service Provision

• Provide community features and Bible study tools
• Enable church connections and small group participation
• Deliver personalized devotional content
• Track your spiritual growth journey
• Facilitate prayer request sharing

2.2 Account Management

• Create and manage your account
• Authenticate users and prevent unauthorized access
• Provide customer support
• Send account-related notifications

2.3 Communication

• Send service-related notifications
• Notify you of new content and features
• Respond to inquiries and support requests
• Send devotional reminders (with your consent)

2.4 Improvement and Analytics

• Analyze usage patterns to improve our services
• Develop new features and functionality
• Troubleshoot issues and optimize performance

3. Information Sharing and Disclosure

3.1 Within Your Church Community

Certain information is shared within your church community based on your privacy settings, such as your profile, posts, and prayer requests you choose to share. Your sharing preferences control member-facing visibility. Authorized church staff may also access records needed to administer the church; those records are separate from your public profile.

3.2 Service Providers

We may share information with trusted third-party service providers necessary to deliver our services:

• Cloud hosting and infrastructure
• Email delivery services
• Analytics tools
• Authentication providers
• Firebase and Apple/Google notification services for your church app
• Stripe for payments; card details are handled by the payment provider
• Moriah for licensed Bible, study and devotional content

These service providers are contractually bound to use your data only to provide services to us.

3.3 Legal Requirements

We may disclose information when required by law or to:

• Comply with legal processes or government requests
• Protect our rights, property, or safety
• Investigate potential violations of our terms
• Prevent fraud or security threats

4. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: Encrypted connections and protection of stored credentials
• Access Controls: Role-based access with secure authentication
• Secure Sessions: HTTP-only encrypted cookies
• Regular Monitoring: Security assessments and monitoring

5. Data Retention

We retain your information for as long as necessary to provide our services:

• Account Data: While your account is active and as needed to process deletion, resolve disputes and meet applicable obligations
• Church Records: Your church determines retention of its directory, pastoral, attendance and financial records. Deleting your login does not automatically delete these records or records the church must retain.
• Usage Logs and Backups: Retained as needed for security, recovery and operation of the service

6. Your Rights and Choices

6.1 Account Access and Control

• Access and update your account information
• Download your personal data
• Request deletion of your account at gospelfoundry.com/account-deletion; contact your church regarding records it maintains about you
• Control notification preferences
• Manage privacy settings for your content

6.2 Third-Party Integrations

• Manage connected third-party services in your account
• Revoke access to OAuth applications at any time

6.3 Deleting Your Account and Data

You can delete your ChurchFoundry login, from the app or on the web, without contacting anyone: go to gospelfoundry.com/account-deletion, enter your email address and confirm with the code we send you.

This deletes your login on every device and in every church app that uses it, and it can't be undone. Your churches keep their own records about you, such as membership, giving and attendance, some of which they must retain (see Data Retention above). Ask a church if you want its records changed.

7. Children's Privacy

Churches and authorized parents or guardians may enter children’s information for family records, check-in and church activities. Child profiles have restricted access. Churches are responsible for obtaining the permissions necessary to provide these records. Contact your church about its records or contact us about a child’s account or information submitted without authorization.

8. Third-Party Services

8.1 OAuth Providers

When you authenticate using third-party services, you are also subject to their privacy policies:

• Google: Google Privacy Policy
• Apple: Apple Privacy Policy

9. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Maintain user sessions and authentication
• Remember user preferences and settings
• Analyze usage patterns and performance

You can control cookie settings through your browser preferences. Note that disabling certain cookies may limit functionality.

10. Updates to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by:

• Posting the updated policy on our website
• Sending email notifications to registered users
• Displaying notices in our application

Your continued use of our services after the effective date constitutes acceptance of the updated policy.

11. Contact Information

For questions about this Privacy Policy or our privacy practices, please contact us:

12. California Privacy Rights

Depending on applicable law, California residents may have rights including:

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of the sale of personal information
• Right to non-discrimination for exercising privacy rights

To exercise these rights, please contact us using the information provided above.

By using ChurchFoundry, you acknowledge that you have read and understood this Privacy Policy and agree to the collection and use of information as described herein.