Privacy policy

CMFI Connect is published by Communauté Missionnaire Chrétienne Internationale, BP 6090, Cameroun, the controller of your data.

For any question about your data or to exercise your rights, write to us at [email protected].

We only process the data the app needs to work:

• Your account: first name, last name, phone number (you sign in with it), e-mail address (optional), username and password. The password is stored hashed (bcrypt): nobody can read it back, not even us.
• Your profile: country, city, church and assembly.
• Your profile photo, if you add one (it is optional): you take it with the camera or choose it from your gallery, then crop it in the app. It is stored on the CMFI Connect server, stripped of its metadata (such as where it was taken). You can change or remove it at any time in the app; it is deleted with your account.
• Your daily report: the items you track (Bible reading, prayer time, fasting…), including the ones you create, their quantities and durations, your notes and, if you have set daily goals, the percentage reached each day.
• Your prayer life: the retreats you do (the day and the time of day), the points of community topics you prayed for, your prayer lists (the names and notes you write in them, and answered prayers) and your importunity topics (title, description, goal, number of proclamations, people invited).
• Your spiritual authorities: the name, number and e-mail of the people you enter by hand. If you add a member by their username, the link between your two accounts, their answer and whether you share your reports with them.
• Your event registrations: the number of people, the need for accommodation and the departure city.
• Your notifications: your phone's notification token, its system (Android or iOS) and the app language; the announcements you received and whether you read them.
• Your Premium subscription, if you take one: its status and your purchase history, kept by RevenueCat with your account number. We never see your bank details.
• Crash reports: when the app crashes, technical information about the error and your phone (see “The services that help us”).
• For administrators: the events, posters, news, photos, prayer topics and announcements they publish for the community.
• Technical data: a sign-in token kept securely on your phone, and the server logs (IP address, date, request) used for security.

Your report, your prayer life, your spiritual authorities, your event registrations, your church and your assembly reveal your faith. The law treats them as sensitive data (Article 9 of the GDPR). We process them:

• with your explicit consent: you choose to enter them, and you choose the authorities who see your reports; you can erase them, or stop this sharing, at any time;
• as part of the legitimate activities of Communauté Missionnaire Chrétienne Internationale, a religious organization, for its members and the people in regular contact with it (Article 9(2)(d) of the GDPR), never disclosing them outside without your consent.

They are never sold or used for advertising. Your report is a personal tool for your walk with God: apart from you, only the authorities you share it with see it (see “Who can see your data”).

• Your phone's location (GPS), your contacts or address book, your calendar.
• No advertising, no advertising trackers, no advertising identifier.
• No analytics or audience measurement tools: only app crashes are reported, so they can be fixed.
• Your bank card: payments go through the App Store or Google Play.

• To run the app you chose to use: your account, your report, the hymns, prayer, the events and your authorities. Basis: performing our terms of use and, for spiritual data, what is said above.
• To show your reports to the authorities you share them with, so they can walk alongside you. Basis: your explicit consent, given when you choose these authorities; you can withdraw it at any time, for each one, on their card.
• To organize the community events you register for. Basis: performing the terms of use.
• To send you the leaders' announcements as notifications. Basis: your consent, given when you allow notifications; you can withdraw it in your phone's settings.
• To manage your Premium subscription, and to reset your password when you ask us to. Basis: performing the terms of use.
• To fix crashes, and to protect the app and its users against abuse and fraudulent access. Basis: our legitimate interest in offering a reliable and safe app.
• To answer your questions and requests, and to meet our legal obligations.

• You: everything about your account.
• Your report: you, and the authorities you share it with (see the next point). The administrators cannot access it. If you send it to your authorities yourself, they receive what you send them (see below).
• Your authorities who are members of the app: when you choose a member, found by their username, as your disciple maker or as another authority, and they accept, they see your reports: the items filled in each day and their values (quantities, durations), your regularity (days filled in, streak), the percentage of your daily goals you reached and the percentage of items filled in. Never your note of the day. This sharing is automatic when you choose that authority; you can stop it at any time, for each authority, on their card in the app (“Share my reports”), or by removing them. An authority entered by hand receives nothing through the app.
• Your prayer lists: only you. A first name and an initial are enough to pray for someone.
• An importunity topic: the people you invite to it see its title, its description, its total and the names of those who pray, never your own number of proclamations. For community topics, only the number of people praying is shown, never their names.
• Other members: from your username, only your card (name, profile photo, church, assembly). Never your number or e-mail.
• Your profile photo, if you have one: other members see it wherever your name appears (importunity topics, invitations, authorities…), and so do the administrators. An administrator can remove an inappropriate photo.
• A person you ask to walk with you sees your request (name, username, church, assembly). If they accept, their number and e-mail become visible to you, and they see your reports as long as you keep sharing with them (see above).
• The administrators of an event you register for: your name, username, number, church, assembly and answers, to organize it.
• The app's administrators: they manage roles, events, prayer topics and announcements. To target an announcement, they only see how many members match a country, a city, a church or an assembly, never your report, your lists or your authorities.
• Our technical providers, who process data on our behalf only (see the next section).

We never sell, rent or trade your data.

A few outside services make the app work. Each one acts on our behalf, under a contract, and only for what is described here:

• Hosting: Cloudflare, US runs our servers and our database.
• Notifications: Firebase Cloud Messaging (Google). If you allow notifications, our server keeps your phone's token, its system and the app language. When an administrator sends an announcement, to everyone or to the members of a country, city, church or assembly (based on profiles), Google carries its title, text and image to your phone. The token is removed when you sign out.
• Crash reports: Firebase Crashlytics (Google). When the app crashes, it sends the technical details of the error, the app version, the phone's model and system, a random installation identifier and, if you are signed in, your account number: never your name, your phone number or your report. Development versions send nothing. Google keeps these reports for 90 days.
• Premium subscription: you buy with your App Store (Apple) or Google Play (Google) account. RevenueCat checks the purchase and keeps the status of your subscription, with your account number so it can be restored on another phone. Neither we nor RevenueCat see your bank details.

These services have their own privacy policies: Google (policies.google.com/privacy), RevenueCat (revenuecat.com/privacy), Apple (apple.com/legal/privacy).

Google and RevenueCat are American companies: some of your data may be processed in the United States or in other countries. These transfers are covered by the safeguards provided by law, such as the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.

Our servers are with Cloudflare, US.

With “Send to my authorities” (in “Settings”), the app prepares your report for the period on your phone, as a message or a PDF, at the rhythm you choose. This is separate from the sharing in the app described in “Who can see your data”.

• Here, nothing is sent by itself: you send it, by WhatsApp, by e-mail or with your phone's share sheet, to the authorities you choose. The message then follows the rules of the service you use.
• This setting and the history of your last 12 sendings stay on your phone: they do not go through our servers.
• Exports (PDF, spreadsheet or message) work the same way: the file is created on your phone, and you decide whom to give it to.

Your data is hosted by Cloudflare, US.

We keep it as long as your account exists. When you delete it, it is erased from our database right away, then from backups within 30 days. Registration lists that an organizer exported before the deletion remain under their responsibility.

With our providers: crash reports are erased after 90 days; your purchase history stays with Apple or Google under their rules, and with RevenueCat under your account number, without your name.

• A copy of your latest reports, your prayer lists and the events you opened is kept on your phone so the app works offline. It is erased when you sign out. The hymn books and event images also stay there: they contain nothing personal.
• Some things never leave your phone: your daily goals (only the percentage reached each day goes with your report), your favorite and recent hymns, your settings (language, appearance, reading, reminders) and those for sending to your authorities.
• The sign-in token is kept in the phone's secure storage (Keychain on iPhone, Keystore on Android).
• Reminders (in the evening, before an event, at retreat times, for sending to your authorities) are scheduled by your phone itself. Only the leaders' announcements go through Firebase Cloud Messaging.
• The home-screen widget (Premium) shows the status of your day and your goals. It is computed on your phone and emptied when you sign out; anyone who sees your screen can see it.
• “Add to calendar” opens your phone's calendar app: we do not read your calendar.
• The camera and photo access are only used to choose your profile photo and, for administrators, the images they publish. The app only sees the photos you take or choose.

Communication with our servers is encrypted (HTTPS), passwords are hashed, the sign-in token is kept in the phone's secure storage, and access to administration features is limited by roles.

At any time, you can:

• view and correct your information in the app (profile, photo, username, authorities, reports);
• export your report (PDF, spreadsheet or text);
• delete your account and all its data, from the app or from the “Delete my account” page;
• withdraw your consent: turn off notifications in your phone's settings, stop sharing your reports with an authority (on their card), erase an item, a person from a list or an authority, or delete your account. Withdrawing does not affect what was done before;
• ask us for a copy of your data in a common format (portability), for its correction, erasure or restriction, or object to a processing based on our legitimate interest, by writing to [email protected].

We answer within 30 days. You can also file a complaint with the data protection authority of your country.

The app is intended for people aged 13 and over. A younger child may only use it with the consent and under the responsibility of a parent. If the law of your country sets a higher age to consent on your own (up to 16 in some countries), that age applies.

A parent can write to us at [email protected] to exercise their child's rights or have their account deleted.

If this policy changes in an important way, we will let you know in the app or on this page. The date of the last update is shown at the top.