Privacy Policy

grplife, Inc. ("grplife," "church.software," "we," "us") respects the sanctity and confidentiality of ministry data. This Privacy Policy explains what information we collect across our website, web application, and mobile app (collectively, the "Service"), how it is used, who it is shared with, and the choices available to you. We do not sell, rent, or monetize your congregation's personal information to data brokers or advertisers.

1. Our Role: Processor and Controller

Most personal data in the Service — member and household records, attendance, prayer requests, pastoral notes, giving history, volunteer assignments, and child check-in information — is submitted by a church or organization ("Church Customer") about its own members, congregants, and visitors ("End Users"). For that data, the Church Customer is the data controller and grplife acts as a data processor (or "service provider" under state privacy law), processing it only as instructed by the Church Customer and as necessary to provide the Service. For account and billing information about the Church Customer itself, and for information about visitors to our public marketing site, grplife acts as the data controller.

2. Information We Collect

We collect the following categories of information:

• Account & billing information: name, email, phone number, organization name, and payment details processed through Stripe (we do not store full card numbers).
• Congregant and member data entered by a Church Customer: names, contact details, household relationships, attendance, prayer requests, pastoral care and follow-up notes, giving and contribution records, volunteer and serving assignments, and child check-in and guardian-matching information.
• Communications content and metadata: emails, SMS messages, and voice campaigns sent through the Service, opt-in/consent records, and softphone call recordings or AI-generated call summaries.
• AI interaction data: inputs to and outputs from AI-assisted features, processed in accordance with our AI Principles.
• Usage and device data: log files, IP address, browser and device type, pages visited, and mobile app diagnostic data.
• Cookies and similar technologies: as described in Section 10.

3. Children's Information

The Child Check-In feature necessarily involves information about minors — such as a child's name, age, allergy notes, and a guardian-matching security code — entered by the Church Customer or a parent/guardian at check-in. The Church Customer is responsible for ensuring it has appropriate parental or guardian consent before submitting such information. We process children's information solely as directed by the Church Customer, never use it for marketing or profiling, and restrict access to authorized check-in and children's ministry staff, with the data encrypted in transit and at rest.

4. How We Use Information

We use the information described above to: operate, maintain, and improve the Service; process subscription payments; deliver the email, SMS, and voice communications a Church Customer configures, in a manner consistent with 10DLC and TCPA requirements; power AI-assisted features, subject to the guardrails described in our AI Principles; provide customer support; secure the Service and prevent fraud or abuse; and comply with our legal obligations.

5. Legal Bases for Processing (EEA and UK Users)

Where the GDPR or UK GDPR applies, we process personal data on the following legal bases: performance of our contract with the Church Customer; our legitimate interests in securing, supporting, and improving the Service; your consent, where required — for example, for certain cookies or direct marketing; and compliance with our legal obligations.

6. AI and Automated Processing

Our AI-assisted features are built with de-identification safeguards that remove personal identifiers from a request before it reaches an AI model wherever technically feasible, and with output screening before a result is shown to you. We do not use AI to make decisions that produce legal or similarly significant effects about an individual without a human in the loop. Full detail on these safeguards is published on our AI Principles page, which forms part of this Policy by reference.

7. How We Share Information

We share personal data only as follows: with sub-processors who help us deliver the Service, including cloud hosting (Amazon Web Services), network and edge security (Cloudflare), messaging and voice (Twilio), email delivery (Sinch/Mailgun), payments (Stripe), and the AI model provider(s) selected for your account; when required to comply with law, protect the rights or safety of any person, or investigate fraud, security incidents, or abuse — including reports submitted through our AI Principles reporting channel; and in connection with a merger, acquisition, or sale of assets, with notice to affected Church Customers. We do not sell personal information to data brokers, and we do not share it for cross-context behavioral advertising.

8. International Data Transfers and EU Hosting

For Church Customers that request EU data residency, data can be hosted in European data centers under appropriate safeguards, including a Data Processing Addendum incorporating Standard Contractual Clauses where data is accessed from outside the EEA (for example, for support purposes). Data residency and data jurisdiction are not the same thing, and we document the applicable jurisdiction for each hosting option in our Data Processing Addendum, available on request at privacy@grplife.com.

9. Data Security and Isolation

Every church organization operates in strict multi-tenant isolation. Sensitive records — including pastoral notes, AI call summaries, financial contributions, and child check-in logs — are encrypted in transit and at rest, protected by role-based access control, and secured under zero-trust and NIST-aligned system hardening practices across our AWS and Cloudflare infrastructure. In the event of a data breach affecting your data, we will notify affected Church Customers without undue delay and in accordance with applicable law and our contractual commitments.

10. Cookies and Similar Technologies

We use essential cookies to maintain secure, authenticated sessions, functional cookies to remember your preferences, and, on our public marketing site, analytics cookies to understand aggregate traffic. You can control cookies through your browser settings; disabling essential cookies may prevent you from logging in.

11. SMS, Email, and Voice Messaging Choices

Our messaging systems are carrier-vetted and registered under The Campaign Registry (TCR) 10DLC framework and comply with the Telephone Consumer Protection Act (TCPA). Phone numbers and email addresses collected for church communication are used only for the purposes the Church Customer configures. Recipients may opt out of SMS at any time by replying STOP, or request help by replying HELP, and may unsubscribe from email campaigns using the link included in every message.

12. Data Retention

Church Customers control retention settings for most congregant data directly within the Service. We retain billing and legal-compliance records for as long as required by law. When an account is closed, Customer Data remains available for export for 30 days before deletion from active systems, consistent with our Terms of Service; residual copies may persist briefly in encrypted backups, which are purged on a rolling schedule.

13. Your Rights and Choices

If you are a member or congregant whose information was entered by a church, that church controls your data — please contact your church directly to access, correct, or request deletion of your information, and we will support your church in fulfilling that request. You can delete your own user account directly within the mobile app or via our account deletion page at any time.

14. Additional Rights for EEA, UK, and California Residents

If the GDPR or UK GDPR applies to you, you have the right to request access, rectification, erasure, or restriction of your personal data, to object to certain processing, to receive your data in a portable format, and to lodge a complaint with your local supervisory authority. If you are a California resident, you have the right to know what personal information we hold about you, to request its deletion or correction, and to opt out of the sale or sharing of personal information — a right that is already satisfied here, as we do not sell or share personal information for cross-context behavioral advertising. Requests under this section can be directed to privacy@grplife.com.

15. Self-Hosted Deployments

For Kingdom-plan customers operating a self-hosted instance in their own cloud environment, congregant data generally never reaches grplife's infrastructure. This Policy applies only to the limited license-validation, update-delivery, and support data we receive in connection with such deployments.

16. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or in-app notice, and will post the updated Policy with a new "Last Updated" date. Continued use of the Service after a change's effective date constitutes acceptance of the updated Policy.

17. Contact Us

If you have questions regarding our privacy practices, data governance, or wish to exercise any rights described above, please reach out to our team at privacy@grplife.com.