Privacy Policy — MinistryAlign

MinistryAlign — including the personal My Walk experience — is operated by Otech Labs LLC ("we", "us"), 33 W Palmer St, Danielson, CT 06239, United States. Questions about this policy: hello@ministryalign.app.

The service is offered from the United States and is intended for users in the United States. It is not directed at residents of the European Economic Area or the United Kingdom.

1. What we collect

Account information: name, email address, and either a securely hashed password or a sign-in identifier from Apple or Google
Profile information you choose to provide: church affiliation, ministry interests and passions, skills, availability
Assessment responses: your answers and results from spiritual gifts, DISC, passion, and skills assessments
Journal, reflection, and private moment notes you create in the app
Usage data: device type, app version, interactions, notification delivery events, and diagnostic logs
Payment information: processed by Stripe. We receive a customer reference, plan, and status — never full card numbers.
Optional integrations: if your church connects Planning Center or Subsplash, we exchange the roster and scheduling data that integration requires

2. Religious-belief data (sensitive information)

MinistryAlign helps people find their place in church ministry, so some of what you choose to share reveals your religious beliefs. We treat the following as sensitive personal information:

Your spiritual gifts assessment answers and results
Your ministry passions, faith profile, and church affiliation
Private journal, reflection, and prayer entries you write in the app

None of it is required to create an account. We use it only to operate the features you asked for: generating your results, matching you to ministry roles, and powering your personal My Walk. We do not sell it, share it with advertisers, or disclose it to any third party for their own purposes.

3. How we use information

To provide the service: assessment results, your serving profile, team matching, scheduling, and church communication features
To connect you with a church, only when you choose to join that church's workspace
To secure the service, prevent fraud and abuse, and support you
To improve the product using aggregated, de-identified usage data
To send service messages about your account, security, and billing. Marketing email only with your consent, with unsubscribe in every message. Push notifications only if you opt in.
To meet legal, tax, and accounting obligations

4. Who can see your information

Your church. If you join a church's workspace, that church's admins and the leaders of the teams you serve on can see your ministry profile — name, contact details, gifts, passions, style, skills, and how you fit each team. That visibility is the core of the product, and joining is your choice. Other members of your church do not see your profile.
Your journal stays yours. Journal entries, reflections, and private moment notes are never visible to your church, its leaders, or other members, and are never used to produce any score, status, or coaching label your leaders can see. We do not use them to train or fine-tune AI models, and no automated job analyzes their text. How your journal is protected
We never sell personal information and never share it with advertisers or for cross-context behavioral advertising.
Service providers. Vendors who help us run MinistryAlign — cloud hosting and database, Stripe for payments, email and push delivery — process data under contracts that limit them to our instructions.
Legal and safety. We may disclose information if required by law or valid legal process, or to protect the rights, safety, or property of our users or the public. If a business transfer occurs, information may pass to the successor under this policy.

5. Roles: your church and us

For information inside a church workspace, the church decides what is collected and who may see it, and we process that information on the church's behalf and on your instructions as a user. Requests about workspace records — corrections, roster changes, role changes — are best directed to your church admin; we will help where we can. For your personal account and My Walk data, we act on our own behalf and you deal directly with us.

6. How we protect information

Data is stored on managed cloud infrastructure, encrypted in transit and at rest. Access is limited to a small number of authorized personnel who need it to operate the service, protected by strong authentication and row-level authorization rules that scope every request to the person making it. We log administrative access and review it.

For your journal you can go further. Turn on the journal lock in account settings and your journal entries and private moment notes are encrypted on your own device with a key derived from a passphrase we never receive; we store only unreadable data. From that point, reading them is not technically possible for us or for anyone with database access. Entries written before you turned it on are re-encrypted at the same time.

Two things to know: if you lose both your passphrase and your one-time recovery code, those entries cannot be recovered by anyone, including us; and routine backups may retain pre-lock copies until they age out of our retention window.

No system is perfectly secure. If a breach affects your personal information we will notify you and any regulator as required by applicable law, without undue delay.

7. How long we keep information

Account and profile data: while your account is active
Church workspace records: while the church's workspace is active, then removed or anonymized after a reasonable export window
Billing and tax records: as long as tax and accounting law requires, typically seven years
Diagnostic and delivery logs: a rolling window, typically up to 12 months
After an account-deletion request: personal data is removed within 30 days, except where law requires retention, and until routine backups age out

8. Your choices and rights

Access, correct, or export your data from your account settings
Delete your account at any time from settings, via our account deletion request page, or by emailing hello@ministryalign.app
Leave a church workspace at any time, which ends leader visibility
Turn the journal lock on, and control email and push preferences, in settings

US state privacy rights. Depending on your state — including California, Colorado, Connecticut, Virginia, Texas, and others — you may have rights to know, access, correct, delete, obtain a portable copy, limit the use of sensitive personal information, and appeal a decision we make about your request. We do not sell personal information, do not share it for cross-context behavioral advertising, and do not use it for profiling that produces legal or similarly significant effects. Email hello@ministryalign.app to exercise a right; we verify requests through your account email and respond within the time the applicable law allows. We will not discriminate against you for exercising a right. You may use an authorized agent where the law permits.

9. Children

MinistryAlign is not directed at children under 13 and we do not knowingly collect their personal information. Use by minors aged 13–17 happens through a church workspace with the involvement of the church and parent or guardian consent where applicable. If you believe a child under 13 has given us information, email us and we will delete it.

10. Changes to this policy

We will post changes here and update the effective date and version above. Material changes are announced in the app or by email before they take effect.

11. Contact

Otech Labs LLC — MinistryAlign — 33 W Palmer St, Danielson, CT 06239, United States — hello@ministryalign.app. See also our Terms of Service and Refund Policy.