At Covenant Labs LLC ("Flock", "we", "us", or "our"), we understand that your church group's prayers and personal information are sacred. This Privacy Policy explains how we collect, use, protect, and handle your information when you use our service.
1. Information We Collect
Information You Provide
- Account Information: Name, email address, phone number, and profile photo
- Group Information: Group names, member details, roles, and organizational structure
- Prayer Requests: Prayer content, privacy settings, and updates submitted by you or your group members
- Attendance Data: Meeting attendance records and RSVP responses
- Communications: Messages, announcements, and support inquiries
Automatically Collected Information
- Usage Data: How you interact with our service, features used, and time spent
- Device Information: Device type, operating system, browser type, and IP address
- Log Data: Access times, pages viewed, and actions taken within the app
2. How We Use Your Information
We use your information to:
- Provide and improve our church group management services
- Enable real-time prayer sharing and attendance tracking
- Send notifications about group activities and prayer updates
- Provide pastoral AI insights to help leaders care for their people
- Detect and prevent disengagement through attendance patterns
- Communicate with you about your account and our service
- Ensure security and prevent fraud or abuse
- Comply with legal obligations
3. Data Privacy and Protection
Multi-Tenant Isolation
Your church's data is completely isolated from other organizations. We use enterprise-grade Row-Level Security (RLS) to ensure that your prayers, attendance records, and member information are never visible to other churches or groups using Flock.
Prayer Privacy Levels
We respect the privacy settings you choose for prayer requests:
- Group: Visible only to your group members
- Leaders: Visible only to group leaders
- Private: Visible only to you and church leadership you designate
Security Measures
- Bank-level encryption for data in transit and at rest
- Firebase Authentication with secure token management
- Regular security audits and vulnerability assessments
- Role-based access controls to limit data access
- Secure cloud infrastructure with automated backups
4. Data Sharing and Disclosure
We do not sell your personal information. We only share your data in these limited circumstances:
- Within Your Organization: According to role-based permissions you've set
- Service Providers: Third-party services that help us operate (e.g., cloud hosting, authentication)
- Legal Requirements: When required by law or to protect rights and safety
- Business Transfers: In the event of a merger, acquisition, or sale of assets
5. Third-Party Services
We use the following trusted third-party services:
- Firebase (Google): Authentication and real-time data synchronization
- Railway: Secure cloud hosting infrastructure
- PostgreSQL: Database storage with enterprise security
These services have their own privacy policies and security measures. We carefully vet all providers to ensure they meet our standards for protecting your data.
6. Your Rights and Choices
You have the right to:
- Access: Request a copy of your personal information
- Correction: Update or correct your information
- Deletion: Request deletion of your account and data
- Export: Download your data in a portable format
- Opt-Out: Unsubscribe from non-essential communications
To exercise these rights, contact us at [email protected].
7. Data Retention
We retain your information for as long as your account is active or as needed to provide services. When you delete your account:
- Personal information is deleted within 30 days
- Prayer requests you've submitted are removed from active systems
- Aggregated, anonymized data may be retained for service improvement
- Backup copies are purged within 90 days
8. Children's Privacy
Flock is designed for church leaders and adult group members. We do not knowingly collect information from children under 13. If we discover we've collected such information, we will delete it immediately.
9. International Data Transfers
Our services are hosted in the United States. If you access Flock from outside the U.S., your information will be transferred to and processed in the United States. We ensure appropriate safeguards are in place to protect your data.
10. Changes to This Policy
We may update this Privacy Policy periodically. We'll notify you of significant changes via email or through the app. Your continued use of Flock after changes constitutes acceptance of the updated policy.
11. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us:
Covenant Labs LLC
Email: [email protected]
5900 Balcones Drive STE 100
Austin, TX 78731