Privacy Policy

Who is responsible for your data

Controller: Maranata Baptist Church, Arad, Romania. For any question or request about your data, write to app@maranataarad.ro.

What we collect

Account: your name and email address. Your password is stored encrypted only — we never see it.

Enrollment forms (Maranata Activ): the name, phone, email and answers you fill in. Depending on the form, these can include a child's name and age, marital status, or details about your personal situation.

Prayer requests: the text you write, with your name or anonymously, as you choose.

Serving and Bible reading: the serving schedule you appear in, the days you said you cannot serve, and your progress in reading plans.

Location: only with your permission and only when you ask for it on a map (the "Show where I am" button), the app uses your phone's location to show you where you are, for example relative to an event. Your location is not tracked in the background and is not used for anything else.

Notifications: a device identifier, only if you turn notifications on.

Technical: access logs (date, time, type of request), kept for security.

Our legal basis

Data in enrollment forms and prayer requests can reveal religious beliefs or health information — special categories under Article 9 GDPR. We process it solely on your explicit consent, given by ticking the box on the form, and only so we can contact you and organize that activity.

Account data is used to give you access to the app.

You can withdraw your consent at any time, with no consequences, by writing to the contact address.

Who has access

Inside the church: the app administrators and the people organizing the activity you signed up for.

Outside the church, we use providers that host or transmit the data without using it for their own purposes: Amazon Web Services (servers and storage, Frankfurt region, European Union), Google reCAPTCHA (protection against automated submissions), Apple or Google (delivering notifications, if you enabled them, and displaying maps).

We do not sell your data to anyone and we do not use it for advertising.

How long we keep it

Enrollment requests: at most 24 months from submission.

Account data: as long as the account exists; deleting the account deletes it.

Prayer requests: until an administrator deletes them. If you delete your account, your requests stay on the Prayer Wall, but without your name.

Sign-in sessions: 30 days.

If you withdraw your consent sooner, we delete the data on request.

Your rights

You can ask at any time to see what data we hold about you, to correct it, to delete it, to restrict its use, or for a copy in a format you can take with you.

You can delete your account yourself in the app: More → Settings → Delete account. Details at https://api.maranataarad.ro/stergere-cont.

For any other request, write to app@maranataarad.ro; we answer within 30 days. If you are not satisfied with the answer, you can contact the Romanian data protection authority (ANSPDCP), www.dataprotection.ro.

Children and minors

Forms about a child — the Children's Choir, for example — are filled in by a parent or guardian, who consents on the child's behalf. We do not collect data directly from children through the app.

Changes

If we change this policy we update the date above. For significant changes we ask for your consent again before your next enrollment.