Privacy Policy

Predestined Movement ("we", "us", or "our") is committed to protecting the privacy and personal information of everyone who interacts with our church community, mobile application, and online platform.

This Privacy Policy explains how we collect, use, store, and protect your personal information in compliance with the Protection of Personal Information Act, 2013 (POPIA) of the Republic of South Africa and other applicable data-protection legislation.

By using our app, website, or services you acknowledge that you have read and understood this policy.

The responsible party for the purposes of POPIA is:

• Organisation: Predestined Movement
• Email: privacy@predestinedmovement.co.za
• Website: predestinedmovement.co.za

We may collect and process the following categories of personal information:

3.1 Information you provide

• Name, surname, and contact details (email, phone number)
• Login credentials (email and password — passwords are hashed and never stored in plain text)
• Profile information (profile photo, date of birth, gender)
• Prayer requests and testimonies you choose to share
• Event RSVPs and check-in data
• Form submissions (e.g. connect cards, volunteer sign-ups)
• Giving and donation records (where applicable)

3.2 Information collected automatically

• Device information (device type, operating system, app version)
• Push notification tokens (for delivering notifications)
• Usage analytics (screens visited, feature usage — anonymised where possible)

We process your personal information for the following lawful purposes:

• To create and manage your account on our platform
• To facilitate church community engagement (events, prayer, groups)
• To send you relevant notifications, announcements, and updates
• To track your discipleship journey and engagement pathways
• To process giving and donations securely
• To improve our services, features, and user experience
• To comply with legal obligations

We will not use your personal information for purposes incompatible with those listed above without your consent.

Under POPIA, we process your personal information based on one or more of the following conditions:

• Consent: You have given us voluntary, specific consent (e.g. by signing up for the app or submitting a form).
• Contract: Processing is necessary to fulfil our commitment to you as a member of the community.
• Legitimate interest: Processing is necessary for the legitimate activities of a not-for-profit religious organisation, as permitted under POPIA Section 6.
• Legal obligation: Processing is required by law (e.g. financial record-keeping).

We do not sell, rent, or trade your personal information. We may share your information in the following limited circumstances:

• Service providers: Trusted third-party services that help us operate the platform (e.g. Firebase for authentication, cloud hosting providers). These providers are contractually bound to protect your data.
• Church leadership: Pastoral staff may access relevant information to provide spiritual care and support, subject to confidentiality obligations.
• Legal requirements: Where required by law, court order, or lawful government request.

We implement appropriate technical and organisational measures to protect your personal information, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure authentication via Firebase Authentication
• Role-based access controls limiting who can view sensitive data
• Regular security reviews of our infrastructure

While we take every reasonable precaution, no system is 100% secure. We encourage you to use a strong, unique password for your account.

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this policy, or as required by law. When your data is no longer needed, it will be securely deleted or anonymised.

If you delete your account, we will remove your personal data within 30 days, except where retention is required for legal or legitimate business purposes.

As a data subject, you have the right to:

• Access: Request confirmation of what personal information we hold about you.
• Correction: Request that inaccurate or incomplete information be corrected.
• Deletion: Request that your personal information be deleted, subject to legal retention requirements.
• Objection: Object to the processing of your personal information on reasonable grounds.
• Withdrawal of consent: Withdraw previously given consent at any time (this does not affect the lawfulness of processing before withdrawal).
• Complaint: Lodge a complaint with the Information Regulator of South Africa if you believe your rights have been infringed.

To exercise any of these rights, please contact us at privacy@predestinedmovement.co.za.

Our services are not directed at children under the age of 18. We do not knowingly collect personal information from children without parental consent. If you believe a child has provided us with personal information, please contact us and we will promptly delete it.

Our web platform may use essential cookies for authentication and session management. We may also use anonymised analytics to understand how our platform is used and improve the experience. We do not use tracking cookies for advertising purposes.

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal information, please contact us:

• Email: privacy@predestinedmovement.co.za
• Website: predestinedmovement.co.za

If you are unsatisfied with our response to a privacy concern, you have the right to lodge a complaint with:

• The Information Regulator (South Africa)
• Email: complaints.IR@justice.gov.za
• Website: inforegulator.org.za