Privacy Policy

ChurchFlex is a church operations platform for volunteer scheduling, team communication and media approvals. It is provided through the ChurchFlex iOS and Android apps (bundle/package identifier com.churchflex.app), the web application at login.churchflex.app, and the marketing site at churchflex.app. This policy explains what information we handle when a church uses ChurchFlex and when you visit churchflex.app.

Church account data: church name, campuses, departments, billing contact and payment status.

People data: names, email addresses, mobile phone numbers, roles, department and class assignments, serving history, blackout dates and background-check status recorded by your church.

Media content: files, captions and approval comments submitted to your church's media queue.

Usage data: log records such as IP address, browser type and pages viewed, used to keep the service secure and reliable.

Marketing attribution: if you accept cookies, we store the campaign parameters in the link you arrived from.

Push notifications: if you allow alerts on a phone, we store a device push-notification token so we can deliver in-app alerts. We do not use it for advertising.

To provide the service: build schedules, deliver reminders, run the media approval workflow and show each person only the parts of their church that apply to them.

To bill and support your church, including trial and subscription management.

To secure the platform, prevent abuse and diagnose problems.

We do not sell personal information, and we do not use volunteer contact details for advertising.

ChurchFlex sends text alerts such as serving reminders, schedule changes, coverage requests, swap decisions and church announcements.

Your church is responsible for obtaining consent from the people it adds. A person can stop messages at any time by replying STOP, or by turning off text alerts in their profile. Replying HELP returns support information.

Message frequency varies with how often you serve. Message and data rates may apply. Mobile numbers are used to deliver ChurchFlex messages and are shared only with the messaging provider that delivers them.

The marketing site uses a single first-party cookie to remember the campaign or referral link you arrived from, so a later signup is credited correctly. It is written only after you accept it in the cookie banner and expires after 30 days.

The application at login.churchflex.app also uses cookies that are strictly necessary to keep you signed in.

You can decline the attribution cookie and continue using the site normally, or clear cookies in your browser at any time.

We share information with service providers who help us operate ChurchFlex: Supabase (cloud database, authentication and storage), Stripe (church billing on the web only — the iOS and Android apps do not sell subscriptions or in-app purchases), Twilio (text message delivery when a church enables texts), and Expo, Apple and Google (push notification delivery). They may process data only on our instructions.

We may disclose information if required by law, or to protect the rights and safety of our users and the platform.

If ChurchFlex is involved in a merger or acquisition, account data may transfer as part of that transaction.

Each church is a separate tenant. Records are scoped to the church that created them, and access inside a church is limited by role — owner, admin, department lead, media team or volunteer.

We keep church data for as long as the account is active. After cancellation, data is retained for a limited wind-down period so the church can export or restore it, then deleted or anonymized. Records we must keep for legal or accounting reasons are retained for the required period.

You can view and correct your profile in the app, opt out of text alerts, and ask your church admin to remove you from the roster.

You can also delete your own account at any time from the mobile app (Account → Delete account) or on the web; this removes your user record and personal contact information. Schedules or records your church created may keep a name placeholder for historical reporting.

You can also contact us to request access to, correction of, or deletion of your personal information. If your church controls the record, we will pass the request to them.

ChurchFlex is intended for church staff and volunteers, not directed at children under 13, and we do not knowingly collect personal information from children under 13. Where a church records minors as class participants, that information is entered and controlled by the church.

We use encryption in transit, role-based access controls and per-church data scoping. No system can be guaranteed perfectly secure, and we do not claim any specific certification or regulatory compliance on this page.

We may update this policy. Material changes will be announced in the app or by email to church admins, and the effective date below will change.

Questions about this policy: hello@churchflex.app.