Privacy policy

ChurchPlace keeps the data a church enters about its people on servers in the European Union (Frankfurt). Sign-in happens inside the app, in the same EU database: the app keeps your name, email and password as a hash (never in plain text), your language, phone and birth date if you enter them, and the devices you are signed in on or turned notifications on. If you turn on two-step verification or add a passkey, the app also keeps its secret and backup codes (encrypted) and the passkey's public key - never biometric data. When we send a service announcement (such as a change to the terms), we record the address and language it went to and whether it was delivered. All of it goes with the Account. Data is never sold or shared with third parties beyond the providers needed to run the service.