Privacy policy
Last updated: 15 November 2026
This page explains plainly what CM Vida UK actually collects, why, who can see it, and how to delete it — no generic boilerplate that doesn't match what the app really does.
Age group
We store the age group declared at registration (13–17 or 18 or older), without requesting an identity document or full date of birth. It is used to apply donation access rules. Contact the church to correct this information.
Your account data
We store your email, name, supplied phone number, preferred language and declared age group to authenticate your account, maintain your profile, handle requests and apply access rules. A profile image may be displayed when available.
Prayer requests and testimonies
What you submit is recorded together with your account, even when you choose "anonymous" visibility for other members — in that case the app simply doesn't show your name on the public screen. The moderation team sees whatever the system's access rules allow for each person; not every team member automatically sees your full identity.
Volunteer interest and ministry join requests
The areas you select (or the message you send when asking to join a ministry) stay recorded against your account until the responsible team approves, rejects, or you withdraw the request.
Meeting requests
Name, email, phone, reason, and the suggested date/time are recorded together with your account (this form currently requires being signed in).
Donations
The amount, category and status of a donation are stored in our database. Your card number NEVER passes through our own servers — payment happens directly on Stripe's secure page, our payment processor. When your account is deleted, its direct profile link is removed, but financial records, Stripe references and receipts may remain. This does not mean complete anonymisation or deletion of data held by Stripe. Contact the church about retained records and deletion where applicable.
Who can see your data
By default, only you. Some data (public prayer requests, approved testimonies, the events calendar) is visible to anyone by nature. Staff/admin access to sensitive data is controlled by specific system permissions, never "everyone on staff sees everything".
How long we keep your data
There is no automatic deletion schedule today. Account data and personal submissions are handled through account deletion or a request to the church. For donation accounting records, we adopt a minimum retention period of 6 years after the end of the financial year in which they were recorded, following section 131 of the Charities Act 2011. After that period, the team must review and remove records no longer needed under another applicable obligation. This review is manual; there is no automatic cleanup. The accounting period does not justify indiscriminate retention of other personal data.
How to delete your account
In the app, open Profile → Delete account and confirm. If you cannot access the app, email either contact below, preferably from your registered email address. We will verify account ownership and respond within one month. Deletion removes your login, profile and linked personal submissions. Moderation history, being the sole principal administrator or a pending operation may require assistance from the team. Account deletion does not automatically cancel monthly donations: also request cancellation from the church.
Third parties involved
We use Supabase as our infrastructure (database and login) and Stripe to process donation payments. We do not use any third-party advertising, behavioural-tracking, or analytics tool inside the app.
Android app permissions
The Android app only requests internet access — no camera, gallery, location or contacts permission is requested.