Privacy policy

Who we are

Propag8it is operated by Atmosphere Of Testimonies Inc., a nonprofit corporation registered in the State of Texas (EIN 82-4487140) and recognised by the IRS as a 501(c)(3) charitable organisation, at 307 Oak Lane, Suite 211, Grand Prairie, Texas 75051. We’re the data controller for everything described here.

For anything in this policy — a question, a request, a complaint — write to privacy@propag8it.com.

What we collect about you

When you create an account and use the app, we hold:

• Your email address and password. The password is stored by our authentication provider as a hash — we never see it.
• Your display name and bio.
• Your profile photo, once photos are something you can add.
• Your location and church, if you tell us — either a church from our list or a name you type in. If you join a church in the app, we also keep that you joined and when, which of its groups you’re in and whether you lead one, who added you, whether you were at each group meeting its leaders record, and which meetings you recorded, and the records of anyone at your church being asked to reach out to you: when, why, and the outcome they recorded.
• The interests you pick during onboarding.
• Your notification preferences.
• The dates your account was created and last changed.

That’s the whole list. There is no hidden collection.

What you create in the app

The app exists to hold your work, so it holds a lot of it:

• Souls — the people you’re reaching: their name, how you know them, your notes, the step they’re on, when they reached each step, and the date they made a decision.
• Tasks — your follow-ups, when they’re due, and whether you’ve done them.
• Cycles — your 1-2-4 journeys and how far along they are.
• Friends Sunday events you create, and the guests you invite.
• Resources you bookmark.
• Testimonies you write for the public wall.
• Invite links you generate, and who claims them.
• Reports you make about someone else’s testimony — what you reported and why.

People you record who are not users

This is the part most privacy policies would bury, so we’ll say it plainly.

When you add a soul, you’re recording information about a real person who hasn’t signed up for Propag8it, hasn’t read this policy, and hasn’t agreed to anything. You record their name, how you know them, and where they are on a journey toward faith — and you may write notes about them.

Information about someone’s religious beliefs is sensitive wherever they live. UK and EU law calls it special-category data and protects it above ordinary personal information; a number of US state laws treat it the same way. We hold it to that standard for everyone, and it is sensitive whether it sits in an app, a notebook, or a church’s paper records.

What that means in practice:

• You decide what to write. Keep it to what you genuinely need in order to walk with that person, and don’t record something they told you in confidence.
• We show you a one-time notice before you add your first soul, so none of this is a surprise.
• Your notes are yours. Your church leaders can’t see them — see below.
• If that person asks you to remove their record, you can delete it yourself — their name, your notes, and their follow-ups all go, and it can’t be undone. The people they won stay in your tree.
• If that person contacts us directly at privacy@propag8it.com, we’ll act on their request where the law requires it.

Who else touches it

Three companies process data on our behalf, and no one else:

• Supabase — our database and authentication. Everything described above is stored there.
• Vercel — hosting for the web app. It handles the requests your browser makes.
• Resend — your account emails, and only those: confirming your address, signing you in, and resetting your password. Nothing else is ever sent through it.

No one else. We don’t share your data outside those three, except where the law requires us to, and except for what a church you choose to join can see, described under “What church leaders can see”.

One exception inside our own team: testimonies are reviewed before they reach the public wall, so a moderator reads them — including ones that are never published — and can see who reported a testimony and why. Nothing else you write is ever read by us as a matter of course.

What we don’t do

Four things we want to be unambiguous about:

• No analytics. We don’t measure how you use the app, and there’s no analytics SDK in either the web app or the mobile app.
• No advertising, and no advertising identifiers.
• No third-party tracking of any kind — no pixels, no fingerprinting, no session recording.
• We never sell your personal data, and we never share it for anyone else’s marketing.

All four are true today and you don’t have to take our word for it: they’re verifiable from the list of software the apps are built from.

What church leaders can see

You can join a church in the app, using a link or a code your church gives you. It’s a choice, and the screen where you make it says what follows here. Until you join, your church sees nothing about you personally. If you named a church on your profile, you are included in one number its admins can see: how many people have named the church but not joined. No name, and no details.

Once you join, your church’s admins — the pastor, and the people they make admins — see your name, the month you joined, which of the church’s groups you’re in, and, for each group meeting a leader records, whether you were there. The leaders of a group you’re in see the same for that group. Any group leader in your church can also see your name, the month you joined and how many groups you’re in, so they can add people to their group. Group leaders who aren’t admins don’t see the totals below about souls, steps and activity.

Your church’s admins also see totals across everyone who has joined: how many members have joined and how many were active; how many souls members have reached and won, and how many are at each step; the share who made a decision and the share being discipled; how many are reproducing; how long steps typically take; how many have stopped moving; how many follow-ups were done on time; and how these change week by week. They see these as numbers and charts. Until at least five members who have each recorded someone have joined, admins see only how many people have joined and how many of them have recorded someone, and no totals.

The group pages are different: because admins already see members there by name, they show each group’s members, its meetings and the share of members in a group whatever the church’s size.

If you miss several meetings of a group in a row (three, unless your church’s admins choose a number from two to six), that group’s leaders are asked to reach out to you; if you’re in no group, your church’s admins are. They record that they reached out and how it went — reached out, couldn’t reach you, or not needed — never what was said. Admins see these records and who made them; a group’s leaders see the ones for their group that are still open or were closed in the last 30 days, and who made them. Admins also see, across the church, how many members in groups are missing meetings, how many came back, and how long reaching out takes.

No one at your church ever sees your notes, your individual soul records, who those people are, or anything you’ve written about them. This isn’t a setting we might change — it’s built into how the data is queried, and it’s the reason the app is safe to use honestly.

One thing to know plainly: the totals are not a disguise. An admin who compares the numbers before and after you join or leave can work out your own counts — how many people you’ve recorded, which steps they’re at, and how that changed week by week — though never their names or anything you wrote. The same is true in a week when you are the only member who was active. If you’d rather your church could not work that out, don’t join.

You can leave your church at any time in Settings, and a group in Settings on the website. When you leave your church, your group memberships and your group attendance there are deleted, your numbers leave with you, you stop being one of its admins unless you are its last admin, you are no longer counted among the people who named the church, and the records of anyone being asked to reach out to you there are deleted.

Children

Accounts are for adults — 18 and over, as the terms say. We don’t knowingly hold information about a child, and if we learn that an account belongs to one, we delete the account and everything in it. If you believe a child has signed up, write to privacy@propag8it.com.

How long we keep it

Until you delete your account.

We don’t auto-delete dormant accounts. When you do delete — from Settings on the web or in the app — everything above goes immediately and permanently: your profile, your souls, your notes, your tasks, your cycles, your events, your bookmarks and your testimonies. It isn’t recoverable, and there’s no grace period.

Your rights

Whoever you are and wherever you live, you can:

• Ask for a copy of what we hold about you. You don’t have to ask — go to Settings on the web and choose “Download your data”.
• Ask us to correct anything inaccurate. Most of it you can edit yourself in Settings.
• Ask us to delete everything. Again, you can do it yourself: Settings → Delete your account, on the web or on your phone.
• Object to how we’re using it, or ask us to restrict it. Write to privacy@propag8it.com.

We’ll respond within one month. If you’re in the UK or the EU, these are rights the law gives you rather than a courtesy we offer, and they include asking us for your data in a portable form. We give everyone the same four options regardless of where they live.

Where your data is held

Our database and file storage are hosted by Supabase in Canada — so your souls, your notes and your account live on Canadian servers, which both the UK and the EU recognise as offering an adequate level of protection. We’re a US organisation, and Vercel and Resend may process data in the United States or elsewhere. For data covered by UK or EU law, those transfers rely on the standard contractual clauses approved for international transfers.

Complaints

If you think we’ve handled your information badly, tell us first at privacy@propag8it.com — we’d rather fix it.

If you’re in the UK, you can also complain to the Information Commissioner’s Office: ico.org.uk, or Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, 0303 123 1113. In the EU, complain to your country’s data protection authority. In the United States, you can raise a complaint with your state attorney general’s office.