Privacy Policy

1. Overview

Church Management Platform ("we," "our," or "us") is an independent software platform designed to provide church organizations with tools for attendance tracking, family management, volunteer coordination, and secure account access.

We are not a church. We provide software services to churches.

This Privacy Policy explains what information we collect, how we use it, and how it is protected.

2. Information We Collect

We collect only the information necessary to provide secure platform access and church management functionality.

A. Required Contact Information (Account Verification)

To create an account, users must provide:

• A valid email address, or
• A valid mobile phone number, or
• Both

At least one verified contact method must remain active at all times to maintain account access.

B. Two-Factor Authentication (2FA)

We use Two-Factor Authentication (2FA) for account security. Depending on the selected verification method, we may send:

• One-time SMS verification codes
• One-time email verification codes

We collect:

• Phone number (if SMS verification is selected)
• Email address (if email verification is selected)
• Verification timestamps
• Login activity logs

3. SMS Communications

If you provide a mobile phone number:

• You consent to receive SMS messages for account verification purposes only.
• Message frequency is limited to authentication events (e.g., login or account setup).
• Message and data rates may apply depending on your carrier.

We use Twilio Inc. as our SMS delivery provider. Twilio processes messages solely for delivery purposes and does not use your information for marketing.

We do not send bulk promotional SMS messages.

You may remove your phone number from your account at any time, provided another verification method remains active.

4. Additional Information Collected by Churches

Church organizations using this software may collect additional information about their members, such as:

• Names
• Family relationships
• Attendance records
• Volunteer roles
• Contact information
• Emergency contacts
• Ministry participation

This information is controlled by the individual church organization using the software.

Church Management Platform acts solely as a data processor on behalf of the church. Each church is responsible for how it collects and uses member information.

5. How We Use Information

We use information to:

• Authenticate users securely
• Maintain system integrity
• Provide church management functionality
• Maintain audit and security logs
• Prevent fraud and unauthorized access

6. Data Sharing

We may share information only with:

Infrastructure Providers

• Cloud hosting providers
• SMS delivery providers (Twilio)
• Email delivery services

These providers:

• Receive only necessary data
• May not use data for marketing
• Are contractually obligated to protect data

Legal Requirements

We may disclose information if required by law or court order.

7. Data Security

We implement reasonable security safeguards including:

• HTTPS encrypted connections
• Encrypted credential storage
• Two-Factor Authentication
• Role-based access controls
• Audit logging

No system can guarantee absolute security, but we follow industry-standard practices.

8. Data Retention

We retain information only as long as necessary to:

• Provide the service
• Meet legal obligations
• Maintain account security

Users may request account deletion by contacting us at:

9. Your Rights

Users may:

• Update contact information
• Add or remove verification methods (maintaining at least one)
• Request deletion of their account
• Request access to stored information

10. Children's Information

This platform is intended for use by churches and adult account holders.

Minor profiles (if created) are managed by authorized adults within a church organization.

11. Changes to This Policy

We may update this Privacy Policy periodically. Updates will be posted at:

https://checkin.ilheureux.dev/privacy.html

12. Contact