Legal

Privacy Policy

Church data is pastoral data. This page explains what we collect, why we collect it, how it is protected, and what you can ask us to do with it.

Last updated August 2026

1. Scope

This policy covers the Disciplytics website, the analytics platform, and our professional services work. It applies to information about you as a customer and to congregational data your church chooses to connect or upload.

2. Information we collect

Account information: name, email address, role, church name, location, and church size, provided when you sign up or contact us.

Congregational data: records synced at your direction from systems such as Planning Center — for example attendance, group and serving participation, giving records, and contact fields — plus any survey responses collected through the platform.

Billing information: subscription amount and payment status. Card details are handled by our payment processor; we never store full card numbers.

Usage data: log data such as pages viewed, features used, device and browser type, and timestamps, used to keep the service working and improve it.

3. How we use information

To provide dashboards and analysis, sync your connected systems, deliver professional services you have engaged us for, support your account, process payments, send service and security notices, and improve the product. We use aggregated, de-identified statistics to improve models and benchmarks. We do not use congregational data for advertising, and we do not sell it.

4. Legal bases

Where required, we process personal data to perform our contract with you, to meet legal obligations, with consent (for example marketing email), or on the basis of legitimate interests in operating and securing the service.

5. Connected systems

When you authorize a connection such as Planning Center, we request only the scopes needed to produce your dashboards. Tokens are stored encrypted. You can revoke the connection at any time from your account or from the provider, which stops future syncing.

6. Sharing

We share data only with service providers who help us run the platform — hosting, database, email delivery, and payment processing — under contracts that limit their use to providing those services. We may disclose information if required by law or to protect rights and safety. If our business is ever transferred, we will notify you before your data becomes subject to a different policy. We never share one church’s identifiable data with another.

7. Security

Data is encrypted in transit and at rest. Access is restricted by row-level security so that each church’s records are isolated, and internal access is limited to staff who need it for support. No system is perfectly secure, but we treat congregational records as sensitive by default.

8. Retention

We keep account and congregational data while your subscription is active. If you cancel, you can request an export within 30 days; after that we delete or de-identify your congregational data on our normal deletion schedule. Limited billing and legal records are kept as long as the law requires.

9. Your choices and rights

You can access, correct, export, or delete your data by asking us. Depending on where you live, you may also have rights to object to or restrict processing and to lodge a complaint with a regulator. Because your church is the controller of its congregational data, we act on the church administrator’s instructions for those records.

10. Congregant information

Your church is responsible for having an appropriate basis to collect and share congregant information with us, and for telling congregants how their information is used. Surveys can be run anonymously; where they are, we do not attach responses to identified individuals.

11. Children

The platform is intended for church staff and leaders, not children. Where a church syncs records that include minors (for example children’s ministry check-ins), we process them only to provide the service and apply the same protections described here.

12. Cookies

We use cookies and similar technology that are necessary to keep you signed in and to understand basic, aggregate usage of the site. We do not run third-party advertising trackers.

13. International transfers

Our infrastructure is operated in the United States. If you access the service from elsewhere, your information is transferred and processed there, with appropriate safeguards where required by law.

14. Changes

We will update this page as the product changes and will note the effective date above. Material changes will be communicated by email or in-app notice.

15. Contact

For privacy questions, data requests, or deletion, reach us through the contact page. See also our terms and conditions.