SUMMARY OF KEY POINTS

This summary highlights key points from our Privacy Notice. You can read more detail in each section below.

What personal information do we process? When you use ENConnect, we process information you provide to sign in and use the Services (such as your email address and account credentials), information associated with your Every Nation account, and ministry-related information you enter or manage through the app (for example, small group, calendar, and connection-related data as those features are available). We also process limited technical information needed to operate and secure the Services.

Do we process sensitive personal information? We do not ask you to provide sensitive categories of personal information (such as health, biometric, or government ID data) unless a specific feature clearly requires it and you choose to provide it.

Do we collect information from third parties? We may receive basic account and authentication information from our backend provider (InsForge) when you sign in with your Every Nation account. We do not sell your personal information.

How do we process your information? We use your information to authenticate you, provide and improve ENConnect, support small group leaders and campus ministry workflows, maintain security, and comply with law. See Section 2 for more detail.

When do we share personal information? We share information only with service providers that help us run the Services (such as hosting and authentication infrastructure), when required by law, or with your direction. We do not sell personal information.

How do we keep your information safe? We use administrative, technical, and organizational measures appropriate to the nature of the data we process, including secure session cookies and access controls on protected areas of the app.

What are your rights? Depending on where you live, you may have rights to access, correct, delete, or restrict certain processing of your personal information. See Section 9.

How can you contact us? Email everynationcoders@gmail.com.

1. WHAT INFORMATION DO WE COLLECT?

1.1. Personal information you provide to us

In Short: We collect information you provide when you sign in and when you use ENConnect features.

ENConnect is a progressive web application for Every Nation small group leaders, campus missionaries, and authorized administrators. When you use our Services, we may collect:

• Account and sign-in information, such as your email address and password (passwords are handled through our authentication provider; we do not store your password in plain text in application code).
• Profile and ministry-related information you choose to enter or update in the app, such as name, role, group or campus details, calendar entries, and connection or discipleship-related notes, as those features are made available.
• Communications you send to us (for example, support requests or feedback).

If you do not provide required account information, you may not be able to access protected parts of the Services.

Payment Data. ENConnect does not currently process payments through the Services. If we add payment features in the future, we will update this notice.

Social Media Login Data. ENConnect uses email and password sign-in with your Every Nation account. We do not offer separate social network login buttons that import your social profile.

1.2. Information collected automatically

In Short: We collect certain technical information when you use the Services.

When you visit or use ENConnect, we and our hosting and infrastructure providers may automatically collect information that does not always identify you by name, such as:

• Internet Protocol (IP) address
• Browser type and version
• Device type, operating system, and language preferences
• Referring URLs, date and time of access, and pages or screens viewed
• App install and session events relevant to operating a progressive web app (PWA)

We use this information to operate, secure, and troubleshoot the Services, understand usage at an aggregate level, and prevent abuse.

Cookies and Similar Technologies. We use cookies and similar technologies to keep you signed in, refresh your session, and protect access to protected routes. These include httpOnly authentication cookies (access and refresh tokens) managed in connection with our authentication provider. You can control some cookies through your browser settings; disabling authentication cookies will prevent you from staying signed in.

1.3. Information from third parties

We use InsForge and related infrastructure to provide authentication, database, and backend services for ENConnect. When you sign in, InsForge processes your credentials and returns session tokens that we store in secure cookies so you can use the app. InsForge’s handling of data is governed by their terms and documentation in addition to this notice.

We do not use Google APIs to access your personal account data. We may load fonts or other static assets from common CDNs as part of normal website delivery.

2. HOW DO WE PROCESS YOUR INFORMATION?

In Short: We process information to run ENConnect, authenticate users, and support ministry leadership workflows.

We process personal information to:

• Create and manage your account and session
• Provide features such as home, calendar, groups, connect, profile, and related tools
• Communicate with you about the Services, security, or support
• Monitor and improve performance, reliability, and security
• Comply with applicable law and enforce our Terms of Service
• Develop new features consistent with the purpose of ENConnect

We process information only where we have a lawful basis to do so, including your consent where required, performance of our contract with you, legitimate interests in operating a secure ministry tool, or legal obligations.

3. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

In Short: We share information with service providers who help us operate ENConnect, and when the law requires it.

We may share personal information with:

• Infrastructure and authentication providers (including InsForge and our hosting/deployment providers) that process data on our behalf under contractual obligations
• Professional advisers (such as lawyers or auditors) where necessary
• Authorities when required by law, court order, or to protect rights, safety, and security

We do not sell your personal information. We do not share your information with third parties for their own independent marketing without your consent.

4. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

In Short: Yes, primarily for authentication and essential app functionality.

We use cookies and similar technologies for:

• Sign-in sessions and token refresh
• Security and route protection
• Basic operation of the PWA

We do not use advertising tracking cookies on ENConnect. We do not permit third parties to use tracking technologies on the Services for cross-site advertising.

5. HOW DO WE HANDLE SOCIAL LOGINS?

In Short: ENConnect does not use social network login; you sign in with your Every Nation email and password.

We do not collect social media profile data through OAuth-style social buttons. Your sign-in is handled through our authentication provider using email and password credentials associated with your Every Nation account.

6. HOW LONG DO WE KEEP YOUR INFORMATION?

In Short: We keep information for as long as needed to provide the Services and meet legal requirements.

We retain personal information for as long as your account is active or as needed to provide the Services, resolve disputes, enforce agreements, and comply with legal obligations. When you request account deletion or when retention is no longer necessary, we will delete or anonymize information within a reasonable period, subject to backup cycles and legal holds.

7. HOW DO WE KEEP YOUR INFORMATION SAFE?

In Short: We apply reasonable safeguards; no method of transmission or storage is 100% secure.

We implement measures designed to protect personal information, including:

• HttpOnly, secure (in production) session cookies for authentication
• Protected routes that require a valid session
• Reliance on established backend and hosting security practices from our providers

You are responsible for keeping your password confidential and for signing out on shared devices. Please contact us if you believe your account has been compromised.

8. DO WE COLLECT INFORMATION FROM MINORS?

In Short: The Services are not directed to children under 13, and we do not knowingly collect their information.

ENConnect is intended for authorized ministry leaders and staff. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, contact us and we will take steps to delete it.

Users under 18 should use the Services only with appropriate parental or organizational consent, consistent with our Terms of Service.

9. WHAT ARE YOUR PRIVACY RIGHTS?

In Short: You may have rights to access, correct, or delete your information depending on your location.

Depending on applicable law, you may have the right to:

• Request access to personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information, subject to legal exceptions
• Object to or restrict certain processing
• Withdraw consent where processing is based on consent
• Lodge a complaint with a supervisory authority

To exercise these rights, contact us at everynationcoders@gmail.com. We may need to verify your identity before responding.

10. CONTROLS FOR DO-NOT-TRACK FEATURES

Most browsers offer a Do-Not-Track (DNT) setting. There is no uniform standard for how websites must respond to DNT signals. We do not currently respond to DNT signals in a special way beyond our general privacy practices described in this notice.

11. DO WE MAKE UPDATES TO THIS NOTICE?

In Short: Yes. We will update this notice when our practices change.

We may update this Privacy Notice from time to time. The updated version will be indicated by a revised date when we post it. Material changes may be communicated through the Services or by other reasonable means. Please review this notice periodically.

12. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions or comments about this notice, contact:

Every Nation Coders

Philippines

Email: everynationcoders@gmail.com

13. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

In Short: Contact us or use in-app account features when available.

You may update certain information through your profile or account settings as those features become available. To request access, correction, or deletion of your account or personal information, email everynationcoders@gmail.com. We will respond within a reasonable time and as required by applicable law.