Privacy Policy

This policy explains what data CIS collects, what it is used for, and how a church and its members can control it.

1. Roles of the parties

The church owns and controls its members' data. CIS acts as the service provider, processing that data on the church's instructions.

2. Data we collect

• Account data: name, email address and/or phone number, and the password stored as a one-way hash.
• Member data: details entered by the member or the church office, such as gender, date of birth, address, marital status, and baptism record.
• Attendance data: a record of service attendance captured by scanning a QR code.
• Giving data: the category, amount, transfer date, and the receipt uploaded by the member.
• Prayer requests: the content of the request, along with the choice to remain anonymous or address it to the pastor only.
• Technical data: service activity records such as sign-in times and system errors.

3. How data is used

Data is used only to run the service: showing church content, recording attendance and giving, passing on prayer requests, and keeping accounts secure. We do not use member data for advertising.

4. Separation between churches

Every record belongs to the church that owns it. Church identity is determined by the signed-in session, never by what the app asks for, so one church's admin cannot see another church's data.

5. Sharing with third parties

We do not sell data. It is shared only with the infrastructure providers we use to operate the service, or where required by applicable law.

6. Storage and security

Passwords are stored as hashes. Access to data is limited by role (member, pastor, treasurer, church admin). Data is kept for as long as the church continues to use the service.

7. Member rights

• View and update their own personal data through the app.
• Request account deletion through the church admin or by contacting us.
• Request a copy of their data.

8. Account deletion

A deletion request can be made through the church admin or by writing to cis@ikonmedia.id. Some financial records may be kept longer where the church's bookkeeping requires it.

9. Children's data

Data about children is entered only by a parent or guardian or by the church office, and is used solely for church ministry purposes.

10. Changes to this policy

Changes will be announced on this page together with the date they take effect.

11. Contact

Questions about this policy can be sent to cis@ikonmedia.id.