Privacy Policy
Last updated: December 7, 2024
Welcome to Flock. We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, store, and protect your information when you use our service for discovering churches, Christian businesses, and ministries.
1. Information We Collect
1.1 Information You Provide
- Account Information: Email address, password (encrypted), and display name
- Profile Information: If you claim or create profiles for churches, businesses, or ministries, we collect details, photos, service/operating times, and other information you provide
- Subscription Information: For paid business accounts, we collect billing information processed through secure payment providers
- Reviews: Text, ratings, and your display name when you review churches, businesses, or ministries
- Favorites: Churches, businesses, or ministries you save to your favorites list
- Volunteer Applications: Information you provide when expressing interest in volunteering or connecting with ministries
- Messages: Communications you send through our platform
- Uploaded Content: Photos and videos you upload for profiles
1.2 Automatically Collected Information
- Location Data: When you search, we collect your location (with your permission) to show nearby churches, businesses, and ministries
- Usage Data: Information about how you interact with our service, including search queries, profiles viewed, and features used
- Device Information: Browser type, operating system, IP address, and device identifiers
- Cookies: We use cookies and similar technologies to remember your preferences and improve your experience
1.3 Third-Party Information
- Google Places API: We use Google Places to display information about churches, businesses, and ministries. Google's privacy policy applies to data collected through their services
- Social Login: If you sign in with Google or other providers, we receive basic profile information (name, email) as permitted by that service
2. How We Use Your Information
We use your information to:
- Provide and improve our platform for discovering churches, businesses, and ministries
- Create and manage your user account
- Display personalized search results based on your location
- Allow you to save favorites and write reviews
- Connect you with churches and ministries for volunteer opportunities
- Process subscriptions for business accounts
- Send you important service updates and notifications
- Prevent fraud and ensure platform security
- Analyze usage patterns to improve our service
- Comply with legal obligations
3. How We Share Your Information
3.1 Public Information
The following information is publicly visible to all users:
- Church profiles you create or claim
- Reviews you post (with your display name)
- Photos and videos you upload to church profiles
3.2 Churches
When you apply for volunteer opportunities or contact a church, we share your name and contact information with that church.
3.3 Service Providers
We share data with trusted service providers who help us operate:
- Supabase: Database and authentication services
- Google: Maps, Places API, and analytics services
- Cloud Storage: For storing uploaded images and videos
These providers are contractually obligated to protect your data and only use it for the services they provide to us.
3.4 Legal Requirements
We may disclose your information if required by law, court order, or government request, or to protect our rights, property, or safety.
3.5 Business Transfers
If Flock is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your data is transferred and becomes subject to a different privacy policy.
We will never sell your personal information to third parties.
4. Data Storage and Security
4.1 Security Measures
We implement industry-standard security measures including:
- Encryption of data in transit (HTTPS/TLS)
- Encrypted password storage
- Secure authentication tokens (JWT)
- Regular security audits and updates
- Access controls and authentication requirements
- File type and size validation for uploads
4.2 Data Retention
We retain your data for as long as:
- Your account is active
- Needed to provide you with our services
- Required by law or for legitimate business purposes
When you delete your account, we will delete or anonymize your personal information within 30 days, except where we must retain it for legal compliance.
4.3 Data Location
Your data is stored on secure servers provided by Supabase and may be processed in the United States or other countries where our service providers operate.
5. Your Rights and Choices
You have the following rights regarding your personal data:
5.1 Access and Portability
You can access, download, and export your personal data at any time through your account settings.
5.2 Correction
You can update or correct your account information, church profiles, and reviews at any time.
5.3 Deletion
You can delete your account and personal data at any time. Note that some information may remain in backups for a limited time, and we may retain certain data where required by law.
5.4 Object to Processing
You can object to certain uses of your data, such as marketing communications.
5.5 Location Data
You can disable location services at any time through your browser or device settings. Note that this will limit search functionality.
5.6 Cookies
You can manage cookie preferences through your browser settings. Some features may not work properly if you disable cookies.
To exercise your rights, contact us at our contact pageor use the account settings in the application.
6. Additional Rights for EU Users (GDPR)
If you are located in the European Union, you have additional rights:
- Right to Erasure: Request deletion of your personal data ("Right to be Forgotten")
- Right to Restrict Processing: Request we limit how we use your data
- Right to Data Portability: Receive your data in a machine-readable format
- Right to Object: Object to processing based on legitimate interests
- Right to Withdraw Consent: Withdraw consent for data processing at any time
- Right to Lodge a Complaint: File a complaint with your local data protection authority
Legal Basis for Processing: We process your data based on your consent, performance of our contract with you, compliance with legal obligations, and our legitimate interests in providing and improving our service.
7. Children's Privacy
Flock is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately, and we will delete such information from our systems.
8. Third-Party Links and Services
Our service may contain links to third-party websites, including church websites and social media pages. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.
Third-party services we use:
- Google Maps & Places: Subject to Google's Privacy Policy
- Supabase: Subject to Supabase's Privacy Policy
9. Changes to This Privacy Policy
We may update this privacy policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of any material changes by:
- Posting the updated policy on this page with a new "Last Updated" date
- Sending an email notification to registered users
- Displaying a prominent notice on our service
Your continued use of our service after changes become effective constitutes acceptance of the updated privacy policy.
10. Contact Us
If you have questions, concerns, or requests regarding this privacy policy or our data practices, please contact us:
Email: our contact page
Address: [Your Business Address]
Response Time: We will respond to privacy inquiries within 30 days
Data Protection Officer: For GDPR-related inquiries, you can contact our Data Protection Officer at our contact page
In Summary
- ✓ We collect only the information necessary to provide our service
- ✓ We never sell your personal information
- ✓ You control your data and can delete it at any time
- ✓ We use industry-standard security to protect your information
- ✓ We are transparent about how we use and share your data
- ✓ We comply with GDPR and other privacy regulations