Privacy Policy

2. Information we collect

We collect information in three ways: from you, from authorized church records and staff, and automatically when you use our services.

Account and contact information

This may include your name, email address, phone number, campus, profile image, sign-in credentials, membership status, and App account role. Phone number and profile image are optional unless we clearly tell you otherwise.

Church participation information

Depending on the features you use, we may process service check-ins, serving-team membership, assignments and responses, service schedules, time-away dates and reasons, campus or group relationships, and similar church administration records.

Content and preferences

The App may remember devotional reading status, notification preferences, family details you choose to add, and other settings. Some preferences and draft features are stored only on your device and are not sent to us.

Photos and camera access

If you choose to add a profile, family, or team photo, the App receives only the image you select. In the current version, photos selected through the App are stored on your device and are not uploaded to our service. Images already associated with your church record may also be displayed in the App. Camera access is used to scan church check-in QR codes.

Technical information

Our hosting and security providers may process limited technical information such as IP address, request time, device or browser type, error details, and security logs. We use this information to operate, protect, and troubleshoot the App—not to track you across other companies’ apps or websites.

3. How we use information

We use personal information to:

• Create, authenticate, and maintain your account.
• Show church content, events, schedules, teams, and information relevant to you.
• Record service attendance and support safe, orderly check-in.
• Coordinate serving assignments, responses, availability, and time away.
• Maintain accurate church membership and contact records.
• Respond to questions, privacy requests, and support needs.
• Prevent misuse, protect accounts, diagnose errors, and improve reliability.
• Meet legal obligations and enforce our policies.

We do not use App data for third-party advertising, and we do not sell personal information.

4. Camera and photos

Camera and photo-library access is optional and requires your device permission. QR-code scanning is processed through the camera view for check-in; we do not store or upload camera frames used for scanning. Only the decoded check-in information is sent to our service. The App does not browse or collect photos you did not select, and it does not use camera access to record audio or video.

You can withdraw camera or photo permission at any time in your device settings. Features that need that permission may stop working, but the rest of the App will remain available.

5. How information is shared

We disclose information only where needed for the purposes described above:

• Authorized church staff and leaders. Access is limited according to their responsibilities, such as membership administration, attendance, or serving coordination.
• Service providers. We use providers such as Supabase for authentication, database, and file storage, and Vercel for application hosting and delivery. They process information on our instructions and are required to protect it consistently with this policy and applicable law.
• Legal and safety reasons. We may disclose information when reasonably necessary to comply with law, protect people, investigate abuse, or defend legal rights.
• Organizational changes. If responsibility for the App is reorganized or transferred, information may transfer with it subject to this policy or protections that are at least equivalent.

We do not share personal information with advertising networks or data brokers.

6. Retention and deletion

We retain account information while your account is active and for as long as reasonably needed to provide the App. Church participation records may be kept for legitimate ministry administration, safeguarding, dispute resolution, security, or legal requirements.

When we approve a verified deletion request, we delete or de-identify personal information that is no longer required. Information may remain temporarily in restricted backups until those backups are replaced through our normal cycle. We may retain limited records where required by law or where necessary to protect the rights and safety of Catalyst, our members, or others.

Information stored only on your device can be removed by using the relevant App controls, signing out where applicable, or deleting the App.

7. Your choices and rights

Depending on where you live, you may have the right to request access to, correction of, or deletion of your personal information, or to object to or restrict certain processing.

You can update certain profile details in the App and manage camera, photo, and notification permissions in your device settings. To close your account, request deletion, withdraw consent where processing relies on consent, or exercise another privacy right, email us at info@thecatalystchurch.org.

We may ask you to verify your identity before completing a request. We will respond within the period required by applicable law.

8. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. These include encrypted connections, managed authentication, access controls, and role-based access to church records. No system can guarantee absolute security, so please use a strong, unique password and protect access to your device.

9. Children’s privacy

Catalyst Connect is intended for church members and is not directed to children under 13. A parent or guardian may choose to provide limited information about a child for family or church check-in features. We expect adults to provide this information only when authorized to do so.

If you believe a child’s information was provided without appropriate permission, contact us so we can review and delete it where required.

10. International processing

Catalyst serves communities in more than one country. Information may therefore be processed in Canada, the United States, or other countries where Catalyst or our service providers operate. Privacy laws in those locations may differ from those where you live. We use appropriate protections for cross-border processing as required by applicable law.

11. Changes to this policy

We may update this policy when the App, our providers, or legal requirements change. We will post the revised policy here and update the effective date. If a change materially affects how we use personal information, we will provide additional notice where required.