Privacy Policy · ChurchOS

1. Who we are, and who your church is

ChurchOS is a multi-church platform. Each church decides what member information to collect and who gets access. The church is the primary steward of its members’ information; we host and protect that data for the church according to the church’s settings and this policy.

How your church uses your information is also governed by the church’s own rules. If you have questions, start with your church admin.

2. What we collect

We collect only what we need to run the service:

Account information: your email (for sign-in and verification codes) and name; optionally your phone number, photo and language preference.
Church membership information: which church you belong to, your status (member, believer, seeker), the roles you hold, and roster details entered by church admins.
Content you create: event registrations, confirmations and swap requests for serving, prayer requests, and any notices or comments you post.
Device and usage information: device model, OS version, app version, push notification token, crash logs and basic diagnostics, used to keep the service stable.
Location (optional): only if you allow it, approximate location helps you find churches by distance on the Plaza. You can turn it off in system settings at any time without affecting other features.
Church applications: the church details, contact name, role, email and phone you enter when applying through this website.

3. What we do not collect

We do not collect your card number or payment details. There are no payments in the app, and members are never asked to pay.
We do not track you across apps or websites, do not use advertising identifiers, and do not show ads.
We do not sell your personal information.

4. How we use information

To create and maintain your account and verify your identity.
To show you the bulletins, sermons, notices, events and schedules your church publishes.
To send push notifications and service emails (such as sign-in codes) on behalf of your church.
To review church applications, prevent fraud and abuse, and handle reports.
To diagnose problems and improve stability and security.
To comply with legal obligations.

5. Who can see your information

Authorized admins and staff in your own church: based on the roles that church sets, they see only what their duties require.
The ChurchOS platform team: only church-level totals (for example the number of members or posts). We cannot see any member’s name, contact details, prayer requests or care notes. When we need to investigate a problem, we can only contact the church admin.
Service providers: cloud hosting and networking (Cloudflare), database hosting (Neon), email delivery (Resend), Apple Push Notification service (APNs), payments (Stripe, for church payments only) and crash monitoring (Sentry). They process data only as needed to provide services to us and are bound by contract.
AI services: sermon summaries are generated by an AI service from the sermon content a church publishes (video or notes). Members’ personal data is not part of that input.
Legal requirements: we may disclose information when required by law, court order or a lawful government request, and we will notify the affected church where the law allows.

6. Children’s information

ChurchOS is intended for people aged 13 and older. We do not knowingly collect personal information from children under 13, and children under 13 may not create an account on their own.

A church’s children’s ministry may need to record information about children (such as name, grade and parent contact). That information can only be entered by church admins or parents, and is visible only to authorized staff in that church. We do not use it for advertising or any other purpose.

If you are a parent or guardian and believe your child has provided information without your consent, contact privacy@churchosapp.com and we will delete it promptly.

7. Retention and security

We keep your information while your account exists. After you delete your account we remove your personal data from production systems within 30 days; copies in backups are overwritten within the backup cycle of up to 30 days. Records we must keep by law (such as billing records for church payments) are excepted.

Data is sent over HTTPS, access tokens are short-lived, each church’s data is isolated from the others, and sensitive actions are logged. No system is perfectly secure; if a breach affects you, we will notify you as required by law.

8. Your rights and choices

View and correct: you can view and edit your profile under “Me” in the app.
Export: email privacy@churchosapp.com and we will provide a copy of your personal data.
Turn off push: switch notifications off in system settings at any time.
Turn off location: switch location access off in system settings at any time.
Residents of California and other states have legal rights to access, delete and correct personal information and not to be discriminated against; we offer these choices to all users alike.

9. Deleting your account

You can delete your account at any time:

In the app: Me › Settings › Delete account, then confirm.
Or email privacy@churchosapp.com from your registered email address and we will process it within 30 days.

10. Where data is stored

Our servers are mainly located in the United States. If you use ChurchOS from another country or region, your information will be transferred to and processed in the United States.

11. Changes to this policy

We may update this policy. For material changes we will notify you in the app or by email in advance. Continuing to use the service means you accept the updated policy.

12. Contact us

For any privacy question or request, write to privacy@churchosapp.com. For general help, write to support@churchosapp.com.