- Effective date
- October 10, 2026
- Data controller
- RCCG Chapel of Resurrection, 590 Shawmut Ave, Boston, MA 02118, United States
- Contact
- info@rccgcor.org · (508) 649-1932
The RCCG Chapel of Resurrection mobile app (“the app”, “we”, “us”) is operated by RCCG Chapel of Resurrection (“the church”), a parish of the Redeemed Christian Church of God.
1. What we collect
| Data | When | What exactly |
|---|---|---|
| Account details | When you create an account | Your name and email address, plus a password (stored only as a secure credential by our provider, and we never see it) |
| First-timer details | When you fill in the “I’m new here” form | Your name and phone number; optionally your email, how you heard about us, whether you’d like a call, whether you made a decision for Christ, and WhatsApp opt-in. The same card is also recorded in the church office’s records (see section 4) |
| Prayer requests and testimonies | When you post to the prayer wall or send a private request | The text you write, whether it is public (“wall”) or private to pastors, and whether you chose to post anonymously |
| Reactions and comments | When you react to a post or comment on a reading-plan day | The emoji you chose, and the comment text with your name, or anonymously if you chose that |
| Reading notes | When you write a note under a day’s reading | The note text. Only you can read it; church staff cannot |
| Group membership | When you join a group | Which groups you belong to |
| Prayer rota | If you volunteer to lead prayer or Bible Study | That you volunteered, and the days you were asked to lead |
| Photos | Church staff only, when adding a picture to an announcement or a theme | The picture they choose from their phone. The app never reads your photo library unless you are staff and choose a picture |
| Push notification token | If you allow notifications | A device token used to deliver notifications to your device |
| Basic technical data | Automatically | Standard operational logs kept by our hosting provider (for example timestamps and anonymised diagnostics) |
We do not collect your precise location, contacts, or browsing history, and the app does not use the camera or microphone. Service reminders are scheduled locally on your device; reminder notifications contain no personal data.
2. Religious affiliation: special category data
Using a church app, and in particular posting prayer requests, recording a decision for Christ, or joining a fellowship group, can reveal your religious beliefs. Under the EU/UK GDPR this is “special category” data (Article 9) and under other laws it may be classed as sensitive data.
We process this data only on the basis of your explicit consent, which you give by choosing to submit that content (creating an account, posting a prayer, submitting the first-timer form, joining a group). You can withdraw consent at any time by deleting the content, deleting your account in the app, or contacting us at info@rccgcor.org.
3. How we use your data
- To run the app: show your profile, your prayers, and your groups.
- To follow up with first-time guests who asked to be contacted (within about 48 hours, by the pastoral team only).
- To let the congregation pray with you, when you choose the public prayer wall.
- To review every wall post and every plan comment before it is published, and to act on anything members report, so that the app stays safe (see section 5).
- To arrange who leads the daily prayer call and Bible Study, if you volunteer.
- To let pastors see private prayer requests you send to them.
- To send push notifications you have opted into (announcements, follow-ups). Prayer content is never included in push notifications.
We do not sell your data, show ads, or use tracking or advertising SDKs. We do not share your data with third parties except the processors in section 4, or where the law requires it.
4. Who processes the data
Data is stored and processed on Google Firebase (Google LLC), which acts as our data processor for authentication, database, and push notification delivery, under Google’s data-processing terms. Push notifications are routed through Expo’s and the platform vendors’ (Apple and Google) notification services using only a device token. Data is stored in the United States; where data leaves your region it is protected by the processor’s standard contractual safeguards.
Two further processors handle specific data:
- Supabase (Supabase Inc.) hosts this website’s database and file storage. The “I’m new here” card you submit in the app is also recorded there, in the same place the website’s own welcome form puts it, so the office has one list of guests. Photos that church staff add to announcements or themes are stored there too, and the app reads the church calendar from it.
- Breeze (Breeze Church Management) is the church office’s membership system. The “I’m new here” card is sent there as well, so the pastoral team can follow up.
The app tells you under the “I’m new here” form that the card goes to the church office’s records as well as to the app.
5. Who can see what
- Public prayer wall posts: every wall post is read by a parish leader or administrator before it appears. Nothing you post to the wall is published automatically. Until a leader approves it, the post is visible to you (if you posted under your name) and to the parish leaders and administrators, and to nobody else. A post a leader declines is never shown to the congregation, but the church keeps it. This applies to anonymous posts too: posting anonymously hides your name from other members and from the leaders reviewing it, but it does not mean nobody reads the post. Once approved, the post is visible to all app users.
- Plan comments: a comment you leave under a day’s reading is read by a parish leader before it appears, exactly like a wall post, and can be posted under your name or anonymously. Once approved it is visible to signed-in members. Your reading notes are private to you.
- Reactions: the count of each emoji on a post is visible to everyone who can see the post; who reacted is not shown. Parish leaders can remove a reaction from a post.
- Group notices: posted by the members the church has appointed to run a group, and visible to that group’s members and to parish staff.
- Reporting: any member whose account is in good standing can report a wall post, a plan comment or a group notice to the parish leaders (an account on hold cannot). Your report records your account, the item, and the reason you chose, and it is visible to parish leaders and administrators. Reporting does not remove anything by itself; a leader decides.
- Private prayer requests: visible only to you and authorised pastoral staff (leaders and administrators), enforced by server-side security rules.
- First-timer submissions: visible only to authorised pastoral staff.
- Group membership: the fact that you belong to a group is visible to authorised pastoral staff and to any member the church has appointed to lead that group, who can see the list of names in their own group and nothing else. Appointed group leaders are ordinary members, not pastoral staff, and their access is limited to the roster of the group or groups they lead. It shows names only, not contact details.
- Your profile: visible to you; administrators can see basic account details for support and role management. Parish leaders can see members’ names (and whether they have volunteered for the prayer rota) when arranging who leads prayer or Bible Study; the app does not show them your email address.
6. Retention
- Account data: kept while your account exists; deleted when you delete your account.
- Prayer posts: kept until you delete them or your account; the church may periodically archive or remove old wall posts. Posts a leader declined to publish, and posts taken off the wall after a report, are kept as a moderation record.
- Reports: kept as a moderation record, and not removed when the member who filed the report deletes their account.
- First-timer submissions: kept only as long as needed for follow-up, then deleted or anonymised within 12 months.
- Push tokens: removed when you sign out or delete your account, and the next time the app opens after you turn its notifications off.
7. Your rights
Depending on your jurisdiction (for example GDPR, UK GDPR, CCPA) you have the right to access, correct, export, restrict, object to processing of, and delete your personal data, and to withdraw consent at any time without affecting prior processing. You may also complain to your data-protection authority.
Deleting your data
- In the app: Profile → Delete account. This removes your account and profile, your group memberships, your place on the prayer rota, any appointment you hold as a group leader, the prayer posts and plan comments you made under your name, your reading notes and progress, your reactions, and the record of which posts you prayed for.
- What in-app deletion cannot reach: posts and comments you made anonymously (they carry no link to your account at all, which is what makes them anonymous, so we cannot find them to delete them); reports you filed on other people’s content, which are kept as a moderation record; first-timer forms submitted without an account, and the copy of any “I’m new here” card kept in the church office’s records (Breeze and this website’s database, section 4), which the app cannot reach; the record that an account was put on hold, if it was, which we keep as part of our safeguarding records; your name on the prayer-rota days you led or were asked to lead, which stays on those days until the parish office changes them; notices you posted to a group as its admin, which stay with the group until its leaders or the office remove them; and the church’s own offline records. To have the office’s copy of your card removed, email info@rccgcor.org with the name and phone number you gave, and we will remove it from Breeze and this website’s database within 30 days.
- By email: write to info@rccgcor.org from the address on your account and we will delete your data within 30 days, including anything the in-app deletion cannot reach. For an anonymous post, tell us roughly when you posted it and what it said, and we will remove it by hand.
8. Children
The app is intended for people aged 13 and over and is not directed at young children. We do not knowingly collect children’s data through the app; children’s ministry records are handled offline by the church under its safeguarding policy. If you believe a child has submitted personal data, contact info@rccgcor.org and we will delete it.
9. Security
Data is encrypted in transit, and access is restricted by server-side security rules and role-based permissions rather than by the app alone. Non-public content is reachable only by authorised pastoral staff (parish leaders and administrators), with one deliberate exception: a member the church has appointed to lead a particular group can see the list of names in that group, and nothing else in the parish. Section 5 sets out who sees what. No system is perfectly secure; if a breach affecting your data occurs we will notify you and the relevant authority as the law requires.
10. Changes and contact
We may update this policy; material changes will be announced in the app and the effective date above updated. Questions or requests: info@rccgcor.org, (508) 649-1932, or by post to RCCG Chapel of Resurrection, 590 Shawmut Ave, Boston, MA 02118, United States.
See also the Terms of Use for the RCCG Chapel of Resurrection app.