Privacy Policy

Effective Date: 29 October, 2025

CCFrederick ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how our mobile app ("the App") collects, uses, stores, and protects your personal information.

Table of Contents

1. Information We Collect
2. How We Use Your Information
3. Data Sharing
4. Data Storage and Security
5. Your Choices
6. Children's Privacy
7. Changes to This Policy
8. Contact Us
9. Legal Basis for Processing (EU/EEA Users)
10. Data Retention
11. International Transfers

1. Information We Collect

a. Personal Information

We may collect the following personal information when you use the App:

• Name and email address (via Zitadel authentication)
• Profile photo and display name
• Group memberships and messages
• Family information (including child profiles, allergies, and emergency contact details if provided)
• Prayer requests
• Files or media you upload to group chats or your profile (stored securely in Oracle Cloud Infrastructure Object Storage)

b. Device Information

We may collect non-personal data such as:

• Device type and operating system
• App version
• Local timezone

c. Usage Data

We may use OneSignal to collect:

• Push notification delivery and engagement data
• Device tokens for messaging

d. Analytics (Optional)

We may collect anonymized usage metrics to understand how the App is used and improve functionality.

2. How We Use Your Information

Your information may be used to:

• Manage your user profile and account
• Enable group messaging and calendar features
• Display personalized announcements and content
• Facilitate nursery check-in/check-out using QR codes
• Send relevant push notifications
• Allow access to livestreams and Bible study content

3. Data Sharing

We do not sell your data. We may share necessary information with:

• OneSignal (for push notifications)
• Authorized church staff for group, prayer, and nursery features

4. Data Storage and Security

Your personal data, including the Hasura GraphQL database and Zitadel authentication data, is stored securely on a Virtual Machine (VM) hosted in the Oracle Cloud Infrastructure (OCI) us-ashburn-1 (AD-1) region. We utilize role-based access controls (RBAC) managed by Zitadel and Hasura. Uploaded media files are stored in OCI Object Storage with strict access permissions. Cached media and data may also be stored locally on your device to improve performance. You may clear this cache in-app.

5. Your Choices

You are in control of your information:

• Edit your profile and visibility from the app
• Delete your account at any time from the Settings page
• Opt-out of notifications in your device settings
• Clear local app cache and preferences through in-app settings
• You may also contact us to request access to or deletion of your data

6. Children's Privacy

Children under 13 may have profiles created by parents or guardians for check-in purposes. These profiles may include the child's name, birthday, allergies, and emergency contact information. This data is only visible to family members and authorized nursery staff and is used solely for safety and check-in purposes.

7. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes through the App.

8. Contact Us

If you have any questions about this Privacy Policy, contact:

Center Church Frederick Email: ccfapp.centerchurch@gmail.com Website: https://centrocristianofrederick.com

9. Legal Basis for Processing (EU/EEA Users)

If you are located in the European Economic Area (EEA), we process your personal data under the following legal bases:

• Your consent
• The performance of a contract (e.g. enabling app features)
• Compliance with legal obligations
• Our legitimate interests, such as improving the App experience

10. Data Retention

We retain your information as long as your account is active or as needed to provide services. You may delete your account at any time, and your personal data will be permanently removed from our systems where legally permissible.

11. International Transfers

Your data is primarily stored on our self-hosted VM in the Oracle Cloud Infrastructure (OCI) us-ashburn-1 (AD-1) region in the United States. Data is also transferred to OneSignal (notifications) which may store data outside your country. We ensure that such transfers are made in accordance with applicable data protection laws.

By using this App, you agree to this Privacy Policy.

Last Updated: 29 October, 2025