Privacy Policy

Saint Demiana Children App

Effective Date: January 2025
Last Updated: January 2025

1. Introduction

Saint Demiana Church ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Saint Demiana Children mobile application and related services (collectively, the "Service").

2. Information We Collect

2.1 Personal Information We Collect Directly

User Registration and Profile Information:

• Full name
• Email address
• Phone number
• Profile image/photos
• User role (Admin/Khadem/Makhdoum)
• Password (encrypted and hashed)

Additional Personal Data (Optional):

• Father's phone number
• Mother's phone number
• Birth date
• Home address
• Address location link (GPS coordinates)
• Father of confession
• Baptism date
• Family information

2.2 Activity and Usage Information

Church Activities:

• Attendance records (mass, special meetings, general meetings, praise)
• Class membership information
• User activity logs and app usage patterns
• Device information (device type, operating system, app version)

Technical Information:

• IP address and device identifiers
• Firebase Cloud Messaging tokens (for push notifications)
• Location data (if location services are enabled)
• App crash reports and performance data
• Network information

2.3 Media and Files

• Profile images uploaded by users
• Any other files uploaded through the application

3. How We Use Your Information

3.1 Service Provision

• User authentication and account management
• Role-based access control (Admin/Khadem/Makhdoum roles)
• Attendance tracking and reporting
• Class management and organization
• Push notifications for church activities and announcements

3.2 Communication

• Sending important church announcements
• Notifying about attendance requirements and church events
• Emergency communications
• Service updates and maintenance notifications
• Contacting users via phone calls and WhatsApp integration

3.3 Analytics and Improvement

• Understanding app usage patterns
• Improving user experience and app functionality
• Identifying and fixing technical issues
• Generating attendance reports for church administration
• Performance monitoring and crash reporting

3.4 Legal Compliance

• Complying with applicable laws and regulations
• Responding to legal requests and court orders
• Protecting our rights and interests
• Ensuring user safety and preventing fraud

4. Information Sharing and Disclosure

4.1 Within the Church Community

• Attendance records may be visible to church administrators (Khadem/Admin roles)
• Class membership information is shared with class leaders and administrators
• Contact information may be used for church-related communications
• User profiles may be visible to other church members based on role permissions

4.2 Third-Party Services

We use the following third-party services that may have access to your information:

Firebase (Google):

• Cloud messaging for push notifications
• Analytics and crash reporting
• Data storage and processing
• Performance monitoring

Google Fonts:

• Font loading for improved user experience

Other Services:

• WhatsApp integration for communication
• Phone call functionality
• Location services (if enabled)

4.3 Legal Requirements

We may disclose your information if required by law or to:

• Comply with legal processes, court orders, or government requests
• Protect our rights, property, or safety
• Ensure user safety and prevent abuse
• Prevent fraud or illegal activities
• Respond to emergency situations

5. Data Security

5.1 Security Measures

• All passwords are encrypted using industry-standard hashing (bcrypt)
• Data transmission is secured using HTTPS/TLS encryption
• Access to personal data is restricted to authorized personnel only
• Regular security audits and updates
• Secure server infrastructure

5.2 Data Storage

• Personal data is stored on secure servers
• Firebase services are used for data storage and processing
• Local device storage is encrypted when possible
• Regular backups with encryption

6. Your Rights and Choices

6.1 Access and Control

You have the right to:

• Access your personal information
• Correct inaccurate or incomplete information
• Request deletion of your account and associated data
• Opt-out of non-essential communications
• Request data portability

6.2 Data Portability

You may request a copy of your data in a portable format.

6.3 Account Deletion

You can request account deletion by contacting us. Note that some information may be retained for legal or administrative purposes.

6.4 Communication Preferences

You can opt-out of:

• Push notifications (through device settings)
• Email communications (unsubscribe links)
• Phone communications (contact us to request removal)

7. Children's Privacy

Our Service is designed for church community members of all ages. We take special care to protect the privacy of children and minors:

• Parental consent is required for users under 13
• Additional parental contact information is collected for minors
• Special restrictions apply to data sharing for users under 18
• Parents can request access to or deletion of their child's information

8. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers, including:

• Standard contractual clauses
• Adequacy decisions
• Other appropriate safeguards as required by law

9. Data Retention

We retain your information for as long as:

• Your account remains active
• Required for church administrative purposes
• Required by law or regulation
• Necessary for legitimate business purposes
• Required for legal proceedings or disputes

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the updated policy in the app
• Sending notifications through the app
• Email notification (if applicable)
• In-app notification

12. Regional Privacy Rights

12.1 European Union (GDPR)

If you are in the EU, you have additional rights under the General Data Protection Regulation:

• Right to access your data
• Right to rectification
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent

12.2 California (CCPA)

If you are a California resident, you have rights under the California Consumer Privacy Act:

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of sale of personal information
• Right to non-discrimination

12.3 Other Jurisdictions

We comply with applicable privacy laws in all jurisdictions where we operate.

13. Consent

By using our Service, you consent to the collection and use of your information as described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not use our Service.

14. Data Controller

The data controller for your personal information is Saint Demiana Church. For any privacy-related inquiries, please contact us using the information provided in Section 11.