Legal
Privacy Policy
Church data is pastoral data. This page explains what we collect, why we collect it, how it is protected, and what you can ask us to do with it.
Last updated August 2026
1. Scope
This policy covers the Disciplytics website, the analytics platform, and our professional services work. It applies to information about you as a customer and to congregational data your church chooses to connect or upload.
2. Information we collect
Account information: name, email address, role, church name, location, and church size, provided when you sign up or contact us.
Congregational data: records synced at your direction from systems such as Planning Center — for example attendance, group and serving participation, giving records, and contact fields — plus any survey responses collected through the platform.
Billing information: subscription amount and payment status. Card details are handled by our payment processor; we never store full card numbers.
Usage data: log data such as pages viewed, features used, device and browser type, and timestamps, used to keep the service working and improve it.
3. How we use information
To provide dashboards and analysis, sync your connected systems, deliver professional services you have engaged us for, support your account, process payments, send service and security notices, and improve the product. We use aggregated, de-identified statistics to improve models and benchmarks. We do not use congregational data for advertising, and we do not sell it.
4. Legal bases
Where required, we process personal data to perform our contract with you, to meet legal obligations, with consent (for example marketing email), or on the basis of legitimate interests in operating and securing the service.
5. Connected systems
When you authorize a connection such as Planning Center, we request only the scopes needed to produce your dashboards. Tokens are stored encrypted. You can revoke the connection at any time from your account or from the provider, which stops future syncing.
6. Sharing
We share data only with service providers who help us run the platform — hosting, database, email delivery, and payment processing — under contracts that limit their use to providing those services. We may disclose information if required by law or to protect rights and safety. If our business is ever transferred, we will notify you before your data becomes subject to a different policy. We never share one church’s identifiable data with another.
7. Security
Data is encrypted in transit and at rest. Access is restricted by row-level security so that each church’s records are isolated, and internal access is limited to staff who need it for support. No system is perfectly secure, but we treat congregational records as sensitive by default.
8. Retention
We keep account and congregational data while your subscription is active. If you cancel, you can request an export within 30 days; after that we delete or de-identify your congregational data on our normal deletion schedule. Limited billing and legal records are kept as long as the law requires.
9. Your choices and rights
You can access, correct, export, or delete your data by asking us. Depending on where you live, you may also have rights to object to or restrict processing and to lodge a complaint with a regulator. Because your church is the controller of its congregational data, we act on the church administrator’s instructions for those records.
10. Congregant information
Your church is responsible for having an appropriate basis to collect and share congregant information with us, and for telling congregants how their information is used. Surveys can be run anonymously; where they are, we do not attach responses to identified individuals.
11. Children
The platform is intended for church staff and leaders, not children. Where a church syncs records that include minors (for example children’s ministry check-ins), we process them only to provide the service and apply the same protections described here.
12. Cookies
We use cookies and similar technology that are necessary to keep you signed in and to understand basic, aggregate usage of the site. We do not run third-party advertising trackers.
13. International transfers
Our infrastructure is operated in the United States. If you access the service from elsewhere, your information is transferred and processed there, with appropriate safeguards where required by law.
14. Changes
We will update this page as the product changes and will note the effective date above. Material changes will be communicated by email or in-app notice.
15. Contact
For privacy questions, data requests, or deletion, reach us through the contact page. See also our terms and conditions.