Privacy Policy

Church Pantry and Assistance

Public hub information is separate from assistance requests. A request shares your selected items, optional practical note and chosen pickup contact only with the named current coordinator. We do not copy your sign-in email. Coordinator notes and outcome reasons have separate restricted access. Your own ended entries can be cleared; account deletion removes personal text under the existing deletion, selected-report and backup rules. Other church managers do not inherit recipient histories. Partner referrals are unavailable, and no assistance request authorizes another organization to receive your information.

What We Collect

Account registration collects your name, email address, public username, profile category, and password. Passwords are stored as salted hashes. We store the posts, comments, reactions, follows, and profile details you choose to provide. Church connections, shared directory details, and support records have separate access requirements.

How We Use Information

We use account and session information to provide sign-in and account controls, display your public contributions, and enforce access to church tools. Visitors can read public posts, comments, church pages and basic author information such as names and usernames. Viewing member profiles requires sign-in. Your account email and password are excluded from profile and public content.

Discovery and Profile Location

Your discovery country, named area, radius and reading-language choices are private account preferences. You can enter an area manually without device location permission. Eligible adult accounts can optionally ask the browser for location once to suggest towns in their selected country. The position is rounded on your device before an approximate area is sent to this website for that lookup. We do not save device coordinates. Your browser or operating system may use its own location service under its own permission controls.

Choose a named area and save separately; requesting suggestions does not save a discovery preference. Denying permission or cancelling keeps manual entry available. Your optional profile location has its own Only me or permitted-member audience. Discovery choices never fill that field or broaden its audience. Your account download includes saved discovery choices and profile location; permanent deletion clears them under the existing deletion and backup-retention process.

Optional Platform Measurement

Settings → Privacy and interactions → Optional platform measurement lets you choose limited first-party measurement. It is off by default. When enabled, trusted foreground navigation on Home, Menu and discovery pages records your account and reporting day, and the service measures getting-started choices and successful ordinary follows, posts, replies, event responses and volunteering from current records. This is limited measured use, not reading time or proof of attention. It excludes private messages, prayer content and prayer acknowledgments, page addresses, advertising identifiers and faith scores.

You can separately choose a declared referral category and coarse device/browser family. Full user-agent strings, arbitrary referrer addresses and precise locations are not stored for this measurement. Optional raw use and session facts are retained for up to 90 days. Turning measurement off removes them and optional dimensions; re-enabling starts new coverage. Your account export includes your current choice and retained facts. Deactivation, suspension and deletion remove optional use records. Restoring a backup disables restored choices before traffic can resume.

Restricted administrators receive aggregate reports and need a separate permission for aggregate exports. Small complementary breakdowns are suppressed. Operational account creation method, current account states, church sources and unique support cases remain available from service records independently of optional use measurement. Anonymous daily lifecycle totals contain no account or content identifiers and remain as historical counts; personal-source reports can change after withdrawal or deletion. Metrics never grant access to an individual’s private case or content.

Calendars, Events and Responses

Personal calendars start private. You may share a chosen calendar or event series with approved members of your church as busy-only availability or full event details. Whole-calendar sharing includes current and future events. Calendar and event shares are separate; ending one does not end the other. Shared source names use your chosen church directory name when listed. Account sign-in contacts are not added to event details automatically.

Church calendar editors and publishers can view private church drafts. Authorized publishers choose whether a church event is visible to approved members or everyone, including visitors without accounts. We store event details, local dates, time zones, recurrence, sharing choices, responses and a restricted change history. Your commitments and conflict hints are visible only to you; busy-only sharing does not reveal private appointment titles.

Leaving a church ends dependent calendar sharing and church commitments. Deactivation ends your active sharing and responses while retaining private calendar records. Rejoining or reactivating does not restore these permissions. Your account download includes your own calendars, events, shares and response records. Canceling events preserves their history and existing response references. Information someone has already seen cannot be recalled.

Church Structure and Responsibilities

Church positions, reporting lines and assignments are available to eligible approved members of that church. An unlisted member may hold a position without showing their name or contact details. Listed names and contact cards follow the member's directory sharing choices; account sign-in email is not used as a contact fallback. Position titles do not grant software permissions.

Authorized managers record position changes and explicit access assignments. Members can step down from their own positions. Leaving or being removed ends position assignments and related church access; rejoining does not restore old appointments or sharing consent. Historical church operations and audit records are retained with restricted access.

Church Representative Setup

Representative requests store private role and contact information, requested permissions, public profile drafts and optional preparation notes. Submitted requests are available to independently authorized God’s Churches reviewers or appropriately authorized managers of that church. Reviewers can see the claimant’s account name, username and verified sign-in email for the review. Independent review references and staff notes stay in the restricted review record; they are never public church contacts.

You can download your own setup information through account settings. Withdrawing or ending access preserves the request and decision history. Activation grants only approved permissions after current eligibility and authority checks. Verification describes representative authority, and does not guarantee a church’s teachings, safety or legitimacy. Deactivation preserves setup records; active duties must be removed first.

Church Listings and Drafts

We store church listing drafts, proposed corrections, and review responses. Unsubmitted drafts are available to their contributor; submitted information is also available to authorized listing reviewers. Publishing requires confirmation of the public preview. Published church names, descriptions, areas, meeting information, sources, and optional public church contacts can be read by anyone. Your sign-in email is not copied into a public church contact field. Adding a listing does not grant church management or member access.

You can download your own listing drafts and submissions through account settings. Withdrawing a submission ends that submission; it does not delete its history or a published church page. Account deactivation preserves these records and does not remove public church information. Use the correction or help route for changes.

Community Exchange

Exchange stores the listing details you enter, its owner, audience, status and optional photos. Drafts stay private to the personal owner or currently authorized church delegates. Publishing shares the listing with the chosen public or approved church audience. Public listings can be read without signing in. Your private profile location and account email are not copied into a listing. Keep exact addresses, private contact details and identity documents out of descriptions and photos.

Favorites and named searches belong only to your account. A favorite stores a reference to a listing, and its current access is checked again when displayed. Saved searches retain the name, filters, sorting and alert choice you select. Search areas use named town centers; they do not change your profile location or save device coordinates. Removing a search stops its alerts. Account export includes your saved choices, and permanent account deletion removes them. Protected recovery records prevent older backups from silently restoring removed choices or alert consent.

Private inquiries store your brief purpose and go only to the listing’s named receiving adult. Other church managers do not gain that adult’s private inquiry history. Both participants must agree to the current pickup window before the inquirer can see precise instructions. Current account, block, church and listing access is checked again when these details are read. Handoff notification previews exclude the inquiry body and pickup instructions.

Church Needs stores action slots, quantities, private quotes and notes, commitments, confirmed receipts and equipment returns. Current permitted readers see aggregate progress. Contributor name sharing starts off and requires a separate choice. Private entries are limited to the contributor and current responsible coordinator; church membership or another management duty does not grant access. Changes and corrections retain a history. Your account export includes your own contributions. Account deletion removes private text and attribution except evidence protected by existing report retention or a hold; aggregate fulfillment history remains separate. Older backups cannot restore withdrawn consent. Needs notifications exclude private notes, and phone delivery requires its own choice.

Ending a handoff removes its ordinary pickup instructions. Details deliberately selected for a report remain under restricted review and report retention. Clearing an ended inquiry removes it from your history, without removing the other participant’s receipt or report evidence. Shared inquiry text is eligible for protected cleanup when neither participant retains it and no report or retention hold requires it. Recovery cannot silently restore an ended agreement or an older disclosure permission.

Personal listing defaults, including reusable pickup instructions, belong only to your account. Applying defaults to a new personal draft copies listing choices without private pickup text or inquiry consent. Pickup text is copied separately when you choose to propose a plan. Export includes your private defaults and currently authorized inquiry details; permanent deletion removes your defaults and deidentifies retained handoff history.

Opening a listing does not contact its owner or change your contact consent. Account export includes your personal listings. Permanent deletion removes unreported personal listing text and retires its photos through the existing cleanup process. Necessary text selected for a report follows restricted review and report retention. Church-owned listings remain owned by the church when a delegate leaves. Archive removes public discovery and access while retaining authorized management and necessary review records.

Private Messages and Reports

Adult private messaging uses current account eligibility, contact preferences, explicit acceptance and blocking controls. We store conversation history and each participant's inbox choices. Clear for me removes messages from your view; the other participant may still retain their copy. Archive and temporary deactivation do not delete conversation history.

Reports disclose only the selected item and necessary context to authorized review. Andrew, the founder, is the sole initial report reviewer, including reports involving himself. Reconsideration is founder review, not independent review. Reasons and review history remain restricted. Reporting and new messaging stay paused where current reviewer coverage is unavailable.

Authors can receive a private explanation of a decision about their post, comment or listing without the reporter's identity or private review notes. If you request reconsideration, your explanation and later replies are shared with the named assigned reviewer through a linked help case. The reviewer may be the original decision maker. This does not provide independent review or automatically restore restricted content.

Welcomes and Optional Notifications

When founder welcomes are available, an eligible new account receives one clearly labeled automatic welcome after setup and verification. Choosing to reply opens the conversation with Andrew; it does not change your ordinary contact preferences or make you friends. Optional founder announcements have a separate preference from personal replies.

Phone notifications require your deliberate Enable notifications action and browser permission. We store a private device subscription associated with your current sign-in. Delivery uses your browser's push service with a generic preview and an opaque reference; message bodies and report evidence are excluded. Opening a notification requires sign-in and current access. Quiet hours, category choices and conversation muting apply. Logging out or switching accounts revokes the old device association.

Historical Waitlist and Email

The former waitlist collected name, email, selected role, and an optional message. New submissions are closed. Existing records retain their original consent context; they are not converted into accounts, church roles, or new subscriptions. Creating an account does not subscribe you to promotional email. You can unsubscribe from earlier communications using the email link or by emailing mcdrew169@yahoo.com.

Cookies and Collection

A session cookie keeps you signed in. A separate reading-preference cookie can save appearance, text size, feed mode, and motion choices. These are not advertising cookies. The former page-view, button-click, and waitlist collection hooks are retired. Historical analytics records are retained; new reading analytics are not enabled by this change. Hosting and security services may retain operational logs.

Data Sharing

We do not sell personal information. We may use service providers for hosting, private storage, email and optional push delivery who process data on our behalf.

Retention

A verified permanent account-deletion request immediately ends account access. Non-exempt personal data is removed from active systems within 30 calendar days. Permanent deletion is distinct from reversible deactivation. Settings explains availability, confirmation and any church or support duty handoff.

Another participant may retain shared messages under Deleted member. Personal information you wrote in those messages may remain; contact us about a specific removal request. Once neither participant retains a message, its body and unnecessary linked data are removed within 30 days unless that selected item is needed for a report or documented preservation hold. Church-owned shared records retain their own ownership and access controls.

Selected report evidence and necessary linked reconsideration records are reviewed while a case is open and removed within 180 days after final closure, including after account closure. Removing your post or comment keeps it out of ordinary views; selected text needed for a report follows this same period. A documented hold preserves only the necessary records and is reviewed at least every 30 days. Ordinary recovery copies expire within 30 days of their original creation, so older backups may take up to 30 additional days after active deletion. Restoration must reapply deletion and current access controls before the service reopens.

Minimal deletion receipts contain references, dates and outcomes without message bodies or credentials and are retained for 90 days after completed removal. Content-free push diagnostics are retained for 14 days after the final attempt. Revoked device associations stop sending immediately; endpoint and key material is removed within 24 hours of detection. We cannot remove copies someone has independently saved, such as screenshots.

Closing the waitlist does not change the original consent context of historical records. Contact us about access, correction or deletion requests concerning those records.

Your Rights

Depending on your location, you may have rights to access, correct, delete, or limit use of your personal data. Contact mcdrew169@yahoo.com to request support.

Security

We use reasonable administrative and technical safeguards, but no system can guarantee absolute security.

Children

This website is not directed to children under 13, and we do not knowingly collect their personal information.

Changes

We may update this policy as the platform evolves. The effective date above reflects the latest version.

Contact

Questions: mcdrew169@yahoo.com