DRAFT. Assembled from the data the Ministry Angel codebase actually stores. A starting point for counsel, not legal advice, and not in force until [Legal entity — to be confirmed] says it is.
1. Scope
This policy explains what [Legal entity — to be confirmed] collects when you use the Ministry Angel apps, ministryangel.org, and our APIs, why we collect it, who else sees it, and what you can do about it.
The Terms of Service is a different document: it governs your relationship with us. This one governs your data.
2. What we collect
You give us:
| What | Where it comes from |
|---|---|
| Email address, name | Sign-up (via Clerk) |
| Profile photo, bio, language | Your profile |
| Location — city, state, country | Your profile; used to show nearby ministries and to target ads |
| Role, church organisation, volunteer skills and availability | Onboarding |
| Campaigns, updates, events, help-wanted posts, donation items | What you post |
| Community posts, comments, testimonies | What you post |
| Direct messages | Messaging |
| Prayer partner preferences and prayer engagement | Prayer features |
| Donation records — amount, currency, message, transaction reference, and an optional proof-of-payment image | Recording a gift |
| Government identification and letters of authority | Ministry verification |
| Shipping name and postal address | Redeeming Crowns for merchandise |
| Reports you file and users you block | Moderation |
| Referral code and who referred you | Referral programme |
We collect automatically:
- A device push token, if you enable notifications
- Approximate location from your device, if you grant permission, to show what is near you
- Account activity — last active time, streaks, Crown transactions, badges
- Technical logs needed to run and secure the Service, including IP address
- Email deliverability signals (bounces and spam complaints) from our email provider
We do not collect payment card numbers or bank details. See section 4.
3. Sensitive data
Two categories deserve specific mention.
Identity documents. Ministries submitting for verification upload government identification and letters of authority. These are stored in a private bucket that is never publicly readable, are accessible only to reviewing administrators, and are deleted from storage once the verification decision is made. We keep the decision, not the document.
Religious affiliation. Ministry Angel is a Seventh-day Adventist platform. Your use of it, and the church organisation on your profile, may imply religious belief, which several laws treat as a special category of data. We process it on the basis of [Lawful basis — to be confirmed] — for counsel: under GDPR Article 9 this most likely rests on explicit consent, or on Article 9(2)(d) as a not-for-profit body with a religious aim.
4. Payments
We never see your payment details.
- Donations to campaigns do not pass through us at all. You pay the ministry directly through its own payment link. We store only what you tell us afterwards: the amount, an optional message, and a transaction reference.
- Payments to Ministry Angel are processed by Stripe. Stripe receives your card details directly; we receive a confirmation and an amount. Stripe's handling of your data is governed by Stripe's own privacy policy.
5. Why we use it
- To run the Service and the features you ask for
- To show you campaigns, events, and ministries relevant to where you are
- To send transactional email and push notifications about your account and activity
- To match prayer partners who have opted in
- To review campaigns and verify ministries
- To moderate content, investigate reports, and enforce the Terms
- To target advertisements by location and audience
- To protect the Service against fraud and abuse
- To meet legal obligations
We do not sell your personal information, and we do not share it with advertisers. Advertisers choose a location and audience; they receive aggregate performance data, never your identity.
6. Who we share it with
Other users. Your profile, campaigns, posts, comments, and testimonies are visible to other users. Donations can be made anonymously, and a profile can be set to anonymous. Ministries can write private notes about their donors — if a ministry has written notes about you, those notes are your personal data and are included in your data export.
Service providers, each only with what they need:
| Provider | Purpose |
|---|---|
| Clerk | Authentication and identity |
| Stripe | Payment processing |
| Resend | Transactional email |
| Cloudflare R2 | File and image storage |
| Railway | Application hosting and database |
| Apple / Google | Push notification delivery, app distribution |
| Google Maps | Map display |
Authorities, where the law requires it, or where we believe someone is at risk of serious harm. Content that sexually exploits a child is reported to the relevant authorities.
7. Your rights
Export. Settings → Data & Privacy exports your data as JSON, including notes ministries have written about you.
Deletion. Settings → Data & Privacy deletes your account. This removes your profile, campaigns, posts, comments, messages, prayer data, streaks, Crown transactions, merchandise orders including the shipping address you gave us, and purges your identity documents and proof-of-payment images from storage.
What survives deletion, and why — please read this:
- Donation records are retained, but no longer linked to you. A gift is a record of a transaction between you and a ministry, and it is part of that ministry's financial history as much as yours, so the record itself stays. Your identity is removed from it — the gift becomes an anonymous one — and the proof-of-payment image you uploaded is deleted.
- Moderation records are retained as an audit trail, also with the identity removed.
Deletion completes immediately and takes effect on every one of these records at once. You do not need to contact us, and there is nothing left pointing at you.
Depending on where you live you may also have the right to correct your data, object to or restrict processing, withdraw consent, and complain to a data protection authority. Contact [Privacy contact email — to be confirmed].
8. Retention
We keep your data while your account is open. After deletion we keep only what section 7 lists. Logs are retained for [Log retention period — to be confirmed]. Verification documents are deleted at the point of decision, not at the end of a retention window.
9. Children
The Service is not directed at children under 13, and we do not knowingly collect their data. If you believe a child under 13 has given us personal information, contact [Privacy contact email — to be confirmed] and we will delete it. See the Terms for age requirements.
10. Security
Files that should not be public — identity documents, letters of authority, proof-of-payment images — are held in a private bucket and served only through short-lived signed links. Access to production data is limited to administrators. No system is perfectly secure, and we cannot guarantee absolute security.
11. International transfers
Our providers operate in several countries, so your data may be processed outside the country where you live, including in the United States. Where required, transfers rely on [Transfer mechanism — to be confirmed] — for counsel: Standard Contractual Clauses plus a transfer risk assessment, or the EU-US Data Privacy Framework where the provider is certified.
12. Changes
We will update this policy as the Service changes. The version is at the top. We will notify you in the app before material changes take effect.
13. Contact
[Legal entity — to be confirmed]
[Registered address — to be confirmed]
[Privacy contact email — to be confirmed]
[Data protection officer / EU representative — to be confirmed]
Ministry Angel Privacy Policy, version 2026-09-16.draft-2.