Privacy Policy

ShommyX Technologies Inc. ("ShommyX," "we," "us," or "our") operates the ShommyX Church platform, including the website at shommyxchurch.com and the ShommyX Church mobile application (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By accessing or using the Service, you agree to the terms of this Privacy Policy. If you do not agree, please do not use the Service.

1. Information We Collect

1.1 Information You Provide

When you create an account, join a church, or use our features, you may provide:

• Account information: name, email address, password
• Profile information: phone number, birth month and day, marital status, address, profile photo
• Church membership data: church affiliation, department memberships, assigned roles and titles
• Communication content: messages sent through chat, announcements, documents, sermon notes, and prayer requests
• Event participation: RSVP responses, check-in records, attendance data
• Media uploads: photos uploaded to galleries or chat
• Children's information: names, ages, and guardian details for kids check-in services (provided by parents or guardians)
• Dating profile: if you opt in to Believers Dating, preferences and profile information you choose to share
• Payment information: processed securely through Stripe or Paystack — we do not store your credit card numbers

1.2 Information Collected Automatically

When you use the Service, we may automatically collect:

• Device information: device type, operating system, browser type, and unique device identifiers
• Usage data: pages visited, features used, timestamps, and interaction patterns
• Push notification tokens: device tokens used to deliver push notifications (Firebase Cloud Messaging)
• Log data: IP address, request URLs, response times, and error logs for service reliability

1.3 Information from Third Parties

Church administrators may add your information to the platform when registering you as a member. We may also receive information from payment processors (Stripe, Paystack) regarding transaction status.

2. How We Use Your Information

We use the information we collect to:

• Provide the Service: manage your account, church memberships, event participation, and communications
• Facilitate communication: deliver announcements, chat messages, documents, and notifications within your church community
• Enable church operations: support attendance tracking, member directories, department management, and reporting
• Send notifications: deliver push notifications, email alerts, and in-app notifications about church activities
• Process payments: manage subscriptions and billing for church plans
• Improve the Service: analyze usage patterns, fix bugs, and develop new features
• Ensure security: detect and prevent fraud, abuse, and unauthorized access
• Provide customer support: respond to your inquiries and resolve issues

3. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• Within your church: Your profile information, department memberships, and attendance records are visible to church administrators and, where applicable, other church members according to your church's privacy settings
• Believers Dating: If you opt in, your dating profile is visible only to other eligible, verified church members within the dating feature
• Service providers: We use third-party services to operate the platform:
  • CDN and DNS providers (content delivery and routing)
  • Cloud hosting providers (application and database hosting)
  • Object storage providers (file storage)
  • Email delivery providers (transactional emails)
  • Push notification services (mobile notifications)
  • Payment processors (subscription billing)
  • Error monitoring services (application reliability)
• Legal requirements: We may disclose your information if required by law, court order, or governmental regulation
• Business transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity

4. Data Storage and Security

• Hosting: Your data is stored on secure cloud servers in the United States with enterprise-grade database hosting
• Encryption: All data is transmitted over HTTPS/TLS. Passwords are hashed using Argon2 (industry-standard one-way hashing)
• Access control: Role-based permissions ensure only authorized users can access sensitive data
• Multi-tenant isolation: Each church's data is logically isolated — one church cannot access another church's data
• Backups: Regular automated backups are performed with optional encryption
• Security headers: We implement HSTS, CSP, X-Frame-Options, and other security headers to protect against common web vulnerabilities

While we implement commercially reasonable security measures, no method of transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

5. Data Retention

• Account data: Retained for as long as your account is active. You may request deletion at any time.
• Church membership data: Retained while you are a member of the church. Church administrators may remove your membership.
• Communication content: Chat messages, documents, and notes are retained until deleted by the user or church administrator.
• Attendance records: Retained according to your church's configured retention policy.
• Share links: Automatically deleted 7 days after expiry.
• Audit logs: Retained for up to 365 days for security and compliance purposes.

6. Your Rights and Choices

You have the right to:

• Access your data: View your profile and personal information through your account settings
• Update your data: Edit your profile, preferences, and notification settings at any time
• Delete your data: Request account deletion by contacting support@shommyxchurch.com
• Opt out of notifications: Disable specific notification types (announcements, programs, gallery, new members) in your notification preferences
• Opt out of dating: The Believers Dating feature is opt-in only — you are not enrolled unless you actively create a dating profile
• Withdraw consent: You may stop using the Service at any time

7. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13 without parental consent. The kids check-in feature is designed for use by parents, guardians, and authorized church staff — not by children directly.

If you believe a child under 13 has provided us with personal information without parental consent, please contact us at support@shommyxchurch.com and we will promptly delete the information.

8. Push Notifications

If you use our mobile application, we may send push notifications to your device about church announcements, events, messages, and other updates. You can disable push notifications at any time through your device settings or within the app.

We use Firebase Cloud Messaging (FCM) by Google to deliver push notifications. Your device token is stored securely and used solely for notification delivery. Invalid tokens are automatically removed.

9. Cookies and Local Storage

We use the following technologies:

• HTTP-only cookies: Used for secure authentication (access tokens and refresh tokens). These cannot be accessed by JavaScript and are essential for the Service to function.
• Local storage: Used to store user preferences such as theme settings (light/dark mode). No personal data is stored in local storage.

We do not use third-party tracking cookies or advertising cookies.

10. International Data Transfers

Our servers are located in the United States. If you are accessing the Service from outside the United States, please be aware that your data may be transferred to, stored, and processed in the United States. By using the Service, you consent to the transfer of your information to the United States.

11. Third-Party Links

The Service may contain links to third-party websites or services that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party services.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

• Email: support@shommyxchurch.com
• Company: ShommyX Technologies Inc.
• Website: shommyxchurch.com

14. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact us at support@shommyxchurch.com.

15. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR), including the right to access, rectify, erase, restrict processing, data portability, and to object to processing. Our legal basis for processing your data is your consent and the performance of our contract with you. To exercise your rights, contact us at support@shommyxchurch.com.