Congregant Privacy Policy for Church Service Hub

Last Updated: October 18, 2026

Overview

Church Service Hub provides software and services designed to assist churches in managing and organizing their ministries. This Congregant Privacy Policy outlines how we handle and protect the privacy of the information your church collects and stores using our services. This document is intended to complement our general Privacy Policy, which provides further details about how we collect, use, and protect personal information. Both this Congregant Privacy Policy and the general Privacy Policy are incorporated into our Terms of Service by reference.

Data Ownership

The data stored by your church in Church Service Hub remains the property of your church. We act as a "Service Provider" under the California Consumer Privacy Act (CCPA) and as a "Processor" under the General Data Protection Regulation (GDPR). This means that while we manage and protect the data on behalf of your church, we do not own it.

Our obligations regarding the data include, but are not limited to:

• Never using, retaining, or disclosing your church's data: We do not use, retain, or disclose your church's data for any purposes other than those necessary to provide the Church Service Hub services.
• Implementing appropriate technical and organizational measures: We secure the data with suitable measures.
• Assisting your church: We help your church in fulfilling its legal obligations concerning the data processed through Church Service Hub.

For more detailed information on our data processing practices, please refer to our Terms of Service and Privacy Policy.

The Types of Information Processed

Church Service Hub is utilized by churches to manage a variety of data types, which may include personal information about you, such as:

• Personal Identifiers: Name, contact details, address, email, phone number.
• Attendance Records: Information regarding your participation in church services, events, and activities.
• Children's Pickup Records: When a child is collected, who collected them, when, and on what proof — a pickup pass, a pickup code, or a team member's recorded override and the reason for it.
• Donation History: Records of any financial contributions you have made to your church.
• Sensitive Information: Notes from counseling sessions, prayer requests, medical details like allergies, or information related to your spiritual journey.
• Digital Footprints: Information linked to your social media profiles and online interactions with your church.
• Language Preference: The language you choose for the app, kept with your account so every device you sign in to, and the messages sent to you, use it.

It is important to note that Church Service Hub does not have the right to disclose the specifics of what your church stores. If you have questions about the information your church holds about you, these should be directed to your church.

Paperless Pickup and Authorized Adults

When you arrive, you take a photo of each child in the app (or a team member takes it), so the team can recognize your child and the clothes they are wearing when they are collected. It is used only for pickup and is deleted with other check-in photos.

When your child is checked in, your Church Service Hub app holds a pickup pass that a team member checks before releasing your child. The pass changes every 30 seconds, works only for that check-in, and stops working once your children are collected or within 24 hours.

You may name other adults who are allowed to collect your children — for example a grandparent. For each one you provide their name, their relationship to your family, a photograph so the team can recognize them, and optionally an email address. Please share these details only with that person's agreement. When you send one of them a one-time pickup pass, it is emailed to the address you give. You can remove an adult at any time; their details are deleted when you do, and when you delete your account.

Your church's administrators may record alerts about who must not collect a child — usually because of a court order they hold. These alerts are shown to the team at pickup and are kept until the church removes them.

If your child is still in class after the session ends, you and any other guardian on your child's profile are notified to come and collect them. The classroom's leaders and your church's administrators see your name and phone number so they can call you, and a record of how long your child waited and who on the team handled it is kept with the pickup records.

So that a team can account for everyone during an evacuation even without a connection, the latest emergency roll call (who is checked in, any allergies or medical notes, and guardians' names and phone numbers) is kept on the devices of team members who open it. It is replaced each time it is reloaded and is discarded after 24 hours.

The first time your family is checked in at a church, its team sees that it is your first visit, so they can welcome you, and if a family who came most weeks stops coming, the team may see that so someone can check in on you. A team member may record that they have been in touch and keep a short note. It is kept with the church's check-in records and deleted when you delete your account.

Devotional Reading Plans

If you start a devotional reading plan, the day you started, the reminder time you choose and your time zone are kept, so the app can show you which day you are on and remind you at your own time. When you mark a devotional as read, that is kept too, so you can see your progress.

Your church's administrators see only totals, such as how many people opened or finished each day of a series. They do not see which devotionals you read. Stopping a plan removes its start date and reminder, unmarking a devotional removes that mark, and all of it is deleted when you delete your account.

If a leader of one of your groups starts a group reading, each day of the series is posted into the group's chat under that leader's name. Respond in Notes starts a note in your private Notes, which only you can read.

Your church can credit you as the author of a devotional, a series, a blog article or an announcement. Your name and profile photo then appear beside it, along with your title if you serve on its leadership team, to everyone it is shown to, which can include the public. If you delete your account, it keeps your name but no longer shows your photo.

Your Rights

Depending on your jurisdiction, you may have specific rights regarding your personal data. These rights could include, but are not limited to:

• Access: The right to request a copy of the personal data your church holds about you.
• Correction: The right to request corrections to inaccurate or incomplete data.
• Deletion: The right to request the deletion of your personal data under certain circumstances.
• Objection: The right to object to the processing of your personal data.
• Complaint: The right to lodge a complaint with a relevant data protection authority.
• Withdrawal of Consent: Where processing is based on your consent, you have the right to withdraw this consent at any time, affecting future processing.

To exercise any of these rights, you should contact your church directly. Church Service Hub will assist your church in responding to such requests to the extent required by law.

Third Parties

To deliver the Church Service Hub services, we may work with several third-party service providers. These providers are only authorized to use your personal data to the extent necessary to provide their services to us and are bound by the same legal and contractual obligations to ensure the security and privacy of your data as we are.

An up-to-date list of the service providers we work with is available upon request.

Additionally, your church may choose to use our APIs to share your data with other third-party services. Any questions regarding this sharing of data should be directed to your church.

Security

We take the security of your personal information very seriously. We are legally and morally committed to protecting your data from unauthorized access, loss, or misuse. Some of the measures we implement include:

• Encryption: Data is encrypted both in transit and at rest.
• Access Controls: Strict access control measures are in place to ensure that only authorized personnel can access your data.
• Auditing: Regular security audits are conducted to identify and mitigate potential vulnerabilities.
• Incident Response: We have a comprehensive incident response plan to address any security breaches promptly.

For more detailed information about our security practices, please refer to our Security Overview page.

Questions

If you have any questions or concerns about how your personal information is handled within Church Service Hub, you are encouraged to contact your church directly. For further inquiries or concerns related to privacy, you may also reach out to our privacy team at:

Email: contact@churchservicehub.com