Privacy Policy for Anoint

We collect information directly from you, automatically when you use our Platform, and through your interactions with communities.

A. Information You Provide Directly

• Account Information: When you register, we collect your email address and an encrypted password.
• Profile & Account Types: Information you provide when setting up a user profile, establishing a church or congregation account, or registering as a non-profit organization or donor.
• User-Generated Content: Videos, reels, sermon media, comments, messages, and posts uploaded to the Platform.
• Care Portal & Support Requests: Information submitted when requesting help, organizing assistance, or coordinating with community groups to serve others in need.
• Donations & Payments: If you donate or transact through the Platform, payment details (e.g., credit card info, billing address) are collected and processed directly by our third-party payment processors. We do not store full credit card numbers on our servers.

B. Sensitive Personal Data

Religious Affiliation & Beliefs: By joining congregations, enrolling in Bible studies, or posting faith-based content, you are voluntarily sharing information related to your religious beliefs. Under certain privacy laws, this is categorized as sensitive personal data. By using the Platform, you consent to our processing of this data to provide our services.

C. Information Collected Automatically

• Usage Data: Video viewing history (reels, sermons), interactions, searches, and communities joined.
• Device & Technical Data: IP address, operating system, browser type, device identifiers, and app diagnostic logs.

We use the information we collect for the following purposes:

• To Provide & Improve the Service: Operate your account, deliver video feeds, enable congregation management, and facilitate online and in-person Bible study connections.
• To Power the Care Portal: Enable individuals, churches, and community groups to coordinate and offer support to those in need.
• To Facilitate Donations: Connect donors with churches and non-profit accounts for charitable contributions.
• Communication: Send account notifications, updates, and community messages.
• Safety & Security: Detect and prevent fraud, abuse, and unauthorized access to maintain a safe community environment.

We do not sell your personal data. We share your information only in the following contexts:

• Public & Community Visibility: Content you post (reels, sermons, comments) and public profile details are visible to other users. Joining a congregation or Bible study group makes your profile visible to that group's leaders and members.
• Care Portal Coordination: Information shared in the Care Portal is disclosed to relevant ministry leaders and community helpers to facilitate real-world aid.
• Third-Party Service Providers: We work with trusted vendors who assist with cloud hosting, video streaming, email delivery, analytics, and payment processing.
• Legal Compliance: We may disclose your information if required by law, subpoena, or court order, or to protect the safety and rights of our users and the public.

We implement multi-layered technical, administrative, and physical security measures to protect your personal data and sensitive religious interactions on Anoint.

A. Database Security & Row Level Security (RLS)

• Access Control & RLS: Our platform infrastructure (hosted via Lovable and powered by Supabase) uses Row Level Security (RLS). This ensures database policies strictly restrict data access so that private Care Portal requests, internal congregation communications, and personal group messages are only accessible to authorized users, church leaders, or community administrators.
• Automated Security Scanning: Application code and database schemas undergo continuous automated security and dependency checks to identify and mitigate configuration issues, injection risks, or unauthorized data exposure.

B. Authentication & Encryption

• Account Credentials: Passwords are encrypted and hashed before being stored. We enforce strong password rules and screen credentials against known database breaches to prevent account takeovers.
• Data in Transit and at Rest: All communications between your mobile or web browser and our servers are encrypted using modern Transport Layer Security (TLS/HTTPS). Data stored in backend databases and file repositories is encrypted at rest.
• API Secret Protection: Payment keys and sensitive third-party API credentials are isolated in secure serverless environments (Edge Functions) and are never exposed in client-side code.

C. Data Retention & Deletion

We retain your personal information only for as long as your account is active or as necessary to provide service features (such as Care Portal coordination or video streaming). If you request account deletion, your account credentials and personal profile data will be permanently removed or anonymized, subject to any legally mandated record-keeping requirements (e.g., financial donation receipts).

Depending on your location, you may have the following rights regarding your data:

• Access & Portability: Request a copy of the personal information we hold about you.
• Correction: Request that we update or fix inaccurate information.
• Deletion: Request that we delete your account and associated personal data.
• Consent Withdrawal: Withdraw consent for us to process your sensitive religious data at any time by deleting your account or leaving specific groups.

To exercise any of these rights, contact us at connect@callahancare.org.

Anoint is not intended for children under the age of 13 (or 16 in certain jurisdictions). We do not knowingly collect personal information from children under these ages without verified parental consent. If we learn we have collected data from a child under the required age without consent, we will promptly delete it.

We may update this Privacy Policy periodically. We will notify you of significant changes by posting the new policy on the Platform and updating the "Last Updated" date above, or via email notification.

If you have questions, concerns, or requests regarding this Privacy Policy, please reach out to us:

• Email: connect@callahancare.org
• Address: 2600 W Camelback Rd, Phoenix, AZ