Privacy Policy for God Finder

Effective date: August 14, 2026

Contact: info@merushq.com

God Finder helps people find church services and submit church information for moderator review. This policy covers the God Finder mobile app, website, and admin moderation dashboard.

Some app activity may reveal religious interests, so saved churches, reminders, and denomination-related activity should be treated as sensitive.

Information We Collect

Account data, including anonymous app user IDs, optional mobile account email and name, admin email addresses, roles, country scope, and denomination scope.
Location data when you choose to allow location access. While the app is open, coordinates are sent to our backend to return nearby churches. When you choose to pin a church contribution, those church coordinates are stored with the submission. We do not request or use background location.
Church contribution data, including church names, denomination, country, area, local area, address, service times, phone, email, website, notes, corrections, coordinates, and optional photos.
Preference data. Language, recently viewed churches, and reminder settings stay on your device. Saved churches and denomination preferences also stay on-device for guests; they sync to our backend only for a linked account.
Moderation data, including moderator decisions, notes, audit logs, actor display names, timestamps, and submission status.
Ambassador program data, including applications, contact details, area, languages, preferred service tracks, availability, reviewer decisions, missions, contribution history, and optional public-recognition consent.
Technical diagnostic data, including crash logs, app version, operating-system and device-model context, session health, and sampled performance timings. We do not attach your God Finder account ID, email, request payloads, screenshots, or view hierarchy to these reports.
God Finder does not use advertising SDKs, cross-app tracking, or third-party behavioral analytics in the mobile app.

How We Use Information

To show nearby churches, schedules, contact details, and directions.
To save churches and schedule local service reminders.
To let users suggest churches or submit corrections.
To let moderators review, approve, reject, request more information, or mark submissions as duplicates.
To keep audit records for trust, safety, and church-data quality.
To authenticate admins and optional signed-in users.
To review ambassador applications, manage membership, assign community missions, and maintain verified impact records.
To secure the service and respond to support requests.

Sharing

We do not sell personal data.
Supabase processes authentication, account IDs, database records, and photo storage on our behalf. We configure access controls so each user can reach only data allowed for their role.
Sentry processes crash, release-health, and sampled performance diagnostics on our behalf so we can identify crashes and improve app reliability. This data is used only for app functionality and is not used for advertising or tracking.
Apple or Google processes sign-in information only when you choose the corresponding sign-in option.
We may use device services such as location permissions and local notifications when you choose those features.
We may open map or directions apps when you choose to request directions.
Moderators and admins may access submissions and moderation records needed for review.
Country admins and authorized program managers may access ambassador applications and membership records needed to operate the program.
Approved church information and approved submitted photos may become public church content.
We may disclose information where required by law, to protect rights and safety, or to obtain legal advice.

Photos and Public Content

If you submit a church photo, moderators may review it. If approved, the photo may become public church content.
Do not upload photos of people, private property, or children unless you have the right permission.
Deleting your account removes pending or rejected photos uploaded by that account. Approved photos remain as public church content, but their account attribution and Storage ownership are removed.

Your Choices and Consent

Location is requested only after you tap Use my location. You can decline and browse by area instead, or withdraw access in your device settings.
The iOS system photo picker lets you choose a specific photo without giving God Finder full access to your Photo Library. Camera access is requested only after you choose Take Photo.
Notifications are requested only when you choose a service reminder. Reminders are scheduled locally and can be disabled in the app or iOS Settings.
Submitting a church or correction creates the minimum anonymous contributor account needed to manage and delete that submission. Ordinary browsing does not create an account.
You can change linked-account denomination preferences and saved churches in the app, sign out, or permanently delete the account from Profile.

Retention and Deletion

We keep an account, its profile, saved churches, preferences, and pending contribution records while the account remains active. Permanent account deletion removes those records and the authentication account.
Account deletion removes pending or rejected photos uploaded by that account. Approved photos and approved factual church details may remain in the public directory as unattributed church content; the original submission, account attribution, and personal data are deleted.
Moderation audit records may remain only after the account identifier and personal attribution are removed, where needed for abuse prevention, security, and directory integrity.
Sentry diagnostic events are retained according to the retention period configured for our Sentry project and then deleted. They are not associated with your God Finder account.
You may request access, correction, export, restriction, objection, or deletion by contacting us.
You can permanently delete a linked account or anonymous contributor account from Profile in the God Finder mobile app. You may also contact us for privacy assistance.

Security

We use reasonable technical and organizational measures, including HTTPS/encryption in transit, row-level access controls, scoped admin roles, and restricted moderator access.
No method of transmission or storage is completely secure, but we work to protect personal data against unauthorized access, loss, misuse, alteration, and destruction.

International Storage

Personal data may be processed or stored by service providers outside your country. Where required, we will use appropriate registrations, safeguards, or transfer mechanisms.
If you are located in Rwanda, Rwanda data-protection requirements may apply to how personal data is stored or transferred.

Children

God Finder is not intended for children to submit personal data without parent or guardian permission.
If you believe a child submitted personal data, contact us so we can review and delete it where appropriate.

Changes

We may update this policy from time to time. The latest version will be posted on this page with the effective date above.

Account Deletion

You can permanently delete a linked account or anonymous contributor account directly from Profile in the God Finder mobile app. For privacy assistance, you can also use our account deletion support page or by contacting us at info@merushq.com.