Privacy Policy
A clear summary of how Church Directory Hub handles church data, SMS consent, and staff assistant usage.
What we commit to
- We do not sell personal information.
- Church-owned data stays scoped to the correct church_id.
- Only authenticated, approved users can access private directory data.
- SMS opt-in and opt-out status is tracked so we can honor consent.
- Woven uses server-side AI only for staff assistance and stays grounded in church data.
- Uploaded profile and household photos are safety-screened before storage.
- You can request account deletion from Member settings; access is disabled immediately.
- Accounts are limited to adults age 18 or older; minors appear only in authorized church-managed records.
- Location is requested only after separate check-in consent; exact member coordinates are discarded after the server verifies the configured church radius.
Information we use
We use the details needed to run the church directory, including names, emails, phone numbers, family relationships, attendance records, prayer requests, and staff notes.
Text messages
If you opt in to SMS, your phone number and message status may be processed by Twilio so the church can send reminders and follow-up texts. Reply STOP to opt out.
Photo safety screening
When you upload a profile or household photo, OneThread creates a normalized copy and sends it to an automated safety provider before Cloudflare stores it. The check looks for inappropriate or harmful content. OneThread does not use the result for facial recognition or identity matching. Images that cannot be screened are not accepted.
Optional location check-in
When a church enables location check-in, OneThread asks for separate permission and consent only after you choose that option. Your device sends its current coordinates and accuracy to the server to confirm that you are within the configured check-in radius. Exact member coordinates are discarded after that one-time verification. The attendance record keeps the check-in method, time, approximate distance, and reported accuracy. Regular and QR check-in remain available without sharing location.
Account deletion
A signed-in adult member can request deletion from Member settings. Access is disabled immediately. The sign-in identity and account profile are deleted or de-identified through the reviewed deletion process. Household, attendance, financial, and other church-managed records may be retained for church operations or legal requirements.
Adults and minor records
OneThread accounts are for adults age 18 or older. We verify eligibility from the church-managed member classification and do not collect a birth date for account screening. A minor may appear in private household or attendance records managed by an authorized adult or church staff member, but cannot own an account or sign in.
Questions
For privacy questions, contact your church office. This policy is intended to keep the app simple, private, and church-scoped.
