Privacy Policy

Dreambuilders Church Mobile Application

Effective Date: 08/10/2026 | Version: 1.1.0

About This Policy

Dreambuilders Church (“we”, “our”, “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the Dreambuilders mobile application (the “App”).

This policy complies with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

Information We Collect

Personal Information You Provide

When you create an account or use our App, we may collect:

  • Account Information: Your email address and password (the password is handled by our authentication provider and is never visible to us)
  • Profile Information: Your first and last name, if you add them to your profile
  • Location Selection: The church campus you choose, so the App shows that campus’s services, events, and livestream. This is a setting you pick, not your device’s location
  • Notes and Settings: Your sermon notes and App settings, synced so they follow you to your other devices (see “End-to-End Encrypted Notes” below)
  • Bug Reports: When you choose to send a bug report, we collect what you write, any screenshots you attach, and the details listed under “Bug Reports” below

End-to-End Encrypted Notes

Your notes and synced settings are encrypted on your device before they are uploaded. The encryption key stays with you, so we store only encrypted data and cannot read your notes.

Notes sync can use your camera to scan a code shown by your other device. The image is read on the device and never sent anywhere.

Guest Users

You can use many App features without creating an account. Guest users:

  • Can access public content (sermons, Bible, livestreams, announcements)
  • Are given an anonymous account identifier so the App can work
  • Cannot use integration features (Elvanto)
  • Can upgrade to a full account anytime without losing data

Integration Data

When you connect Elvanto (our church management system):

  • Elvanto Integration: A secure access token for your Elvanto account (to display your roster and service assignments). We do not receive your Elvanto password

Bug Reports

Bug reports are optional and only sent when you tap Submit. A report contains:

  • Your description of the problem and any screenshots you attach
  • Your account ID, your name (if set in your profile), your role in the App, and your selected campus
  • Device details: device model, operating system and App version, available storage, memory, battery level, network type, language, and time zone

Bug reports do not include your email address. Reports are stored by us and copied into our private issue tracker (GitHub) so the App’s developers can fix the problem. We also record the network (IP) address a report came from, only to prevent spam.

Bible Reading

When the App downloads Bible text, it records which translation, book, and chapter was requested, linked to your account. We use this to enforce fair-use limits with our Bible content provider and to see, in aggregate, which parts of the Bible are being read in the App.

Crash Reports

If the App crashes or hits an error, it may send a crash report to our crash-reporting service (Sentry). Crash reports contain technical details (the error, the App version, device model and operating system) and your account ID, so we can see whether a problem affects you repeatedly. They do not include your email address, your name, your notes, or screenshots.

External Services

The App provides direct links to:

  • Tithely: For online giving and donations. When you tap the giving button, you are redirected to Tithely’s secure website. The App does not collect, store, or process any financial information or donation data. All transactions occur directly on Tithely’s platform.
  • YouTube: Sermons and livestreams play in an embedded YouTube player. YouTube (Google) may collect information under its own privacy policy when you play a video. We do not send YouTube your name, email, or account ID.

Information We Don’t Collect

We do not collect:

  • Passwords for third-party services (such as Elvanto)
  • Your device’s location, GPS data, or location tracking
  • Contacts from your device
  • Your photo library. When you attach a screenshot to a bug report or choose an image, you pick it with the system photo picker and only that image is used
  • Camera or microphone recordings
  • Advertising identifiers, or any data for advertising
  • Financial or payment information
  • Sensitive personal information (health, political views, etc.)

Data Collection Summary (Apple App Store)

For transparency, here’s how our data collection maps to Apple’s privacy categories. None of this data is used to track you.

Data Linked to You:

  • Contact Info: Email address, name (App functionality)
  • Identifiers: User ID (App functionality)
  • User Content: Photos (bug-report screenshots), customer support (bug reports), other user content (encrypted notes and settings) (App functionality)
  • Usage Data: Product interaction (Bible chapters downloaded) (App functionality, analytics)
  • Diagnostics: Crash data, performance data, other diagnostic data (App functionality)

Data Not Collected:

  • Financial Info
  • Location
  • Health & Fitness
  • Contacts
  • Browsing History
  • Search History
  • Sensitive Info

How We Use Your Information

We use your personal information to:

  • Provide App Services: Create and maintain your account, display personalized content
  • Church Integration: Show your roster assignments and service times when connected to Elvanto
  • Note Synchronization: Sync your encrypted notes and settings across your devices
  • Fix Problems: Investigate bug reports and crash reports
  • Communication: Send important updates about the App or church services (you can opt out)
  • Support: Respond to your questions and provide technical assistance

Data Minimization

We follow the principle of data minimization - we only collect information necessary to provide App services. We regularly review our data collection practices to ensure we’re not collecting more than needed.

App Tracking and Analytics

We do not track users across apps or websites owned by other companies. The App does not use any advertising identifiers, does not ask to track you, and does not engage in targeted advertising.

The App does not contain third-party analytics or advertising tools. The only usage information we look at is the Bible reading record described above, which church administrators see as totals (for example, the number of readers and the books opened).

Device Permissions

The App may request the following permissions:

  • Notifications: Optional reminders for livestreams, events, roster assignments, and announcements. They are scheduled on your device; we do not collect a push-notification token (you can disable them in settings)
  • Calendar: Optional, only when you tap “Add to Calendar” on an event
  • Local Network: Optional, for Live Connect, which shares songs between devices on the same Wi-Fi. This data stays on your local network
  • Storage: For caching Bible content and notes offline

We will always ask for your permission before accessing any device features and explain why we need them.

Cookies and Local Storage

The App uses local storage to:

  • Remember your preferences
  • Cache content for offline access
  • Maintain your login session (stored in the device Keychain)

This data is stored securely on your device and is not accessible to other apps.

Data Storage and Security

Where Your Data is Stored

Your data is securely stored using Supabase (a secure cloud database service) with servers located primarily in Australia. When necessary for service provision, data may be processed in other countries with adequate privacy protections equivalent to Australian standards.

Security Measures

We implement industry-standard security measures including:

  • Encryption: All data is encrypted in transit and at rest, and your notes are end-to-end encrypted
  • Access Controls: Strict access controls ensure only authorized systems can access your data
  • OAuth Security: Third-party integrations use secure OAuth tokens (not passwords) that can be revoked at any time
  • User Isolation: Your data is completely separate from other users - no one else can see your integration tokens, notes, or personal information
  • Regular Security Updates: We regularly update our security measures and monitor for threats

Data Access

  • Your Data is Private: Other app users cannot access your personal information, integration tokens, or notes
  • Limited Staff Access: Our technical staff may access data only for support purposes or system maintenance
  • Third-Party Integrations: Elvanto data is only accessed when you specifically connect it

Third-Party Integrations

How Integration Authentication Works

The Elvanto integration uses OAuth 2.0 authentication, which means:

  • You log in directly on Elvanto’s official website (not in our App)
  • We never see or store your Elvanto password
  • We only receive a secure access token that allows the App to access your data
  • You can revoke this access at any time through our App settings

Elvanto Church Management System

When you connect to Elvanto:

  • We store a secure access token for your Elvanto account (not your password)
  • This allows the App to retrieve your roster information and service assignments
  • You authenticate directly with Elvanto’s secure login system
  • You can disconnect this integration at any time in the App settings

Integration Privacy

  • Integration tokens are linked only to your account and are not visible to other users
  • We do not share your integration data with other third parties
  • You maintain full control over these connections

Tithely Giving Platform

Tithely is accessed through a direct link in the App:

  • The App does not collect or store any financial information
  • The App does not process any payment or donation data
  • All giving transactions happen directly on Tithely’s secure platform
  • Your financial information is handled entirely by Tithely under their privacy policy
  • While Dreambuilders Church receives donation information through our Tithely account, this data is not accessed by or stored in the mobile app

Data Sharing and Disclosure

We do not sell, trade, or share your personal information with third parties except:

  • With Your Consent: When you explicitly authorize us to share specific information
  • Service Providers: With trusted service providers who help us operate the App: Supabase (data storage and accounts), Sentry (crash reports), and GitHub (our private issue tracker, for bug reports you send)
  • Legal Requirements: When required by Australian law or court order
  • Safety: To protect the safety and security of our users or prevent illegal activity

Your Rights

Under Australian privacy law, you have the right to:

  • Access: Request access to your personal information
  • Correction: Request correction of inaccurate or incomplete information
  • Deletion: Request deletion of your personal information (subject to legal requirements)
  • Portability: Request a copy of your data in a portable format
  • Complaints: Lodge a complaint about our privacy practices

How to Exercise Your Rights

To exercise these rights, contact us at perth@dreambuilders.church or through the contact methods below.

Data Retention

We retain your personal information for as long as:

  • Your account remains active
  • Necessary to provide App services
  • Required by law

When you delete your account (Profile > Delete Account):

  • Your account, profile, encrypted notes and settings, Bible reading records, and integration connections are deleted
  • Bug reports you sent are kept so the problem can still be fixed, but they are no longer linked to your account ID. Contact us if you want a bug report removed
  • Some data may be retained for legal or security purposes as required by law

Children’s Privacy

The App is designed for general church members and is not specifically directed at children under 13. If you believe we have collected information from a child under 13, please contact us immediately so we can delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do:

  • We’ll update the “Last Updated” date at the top
  • For significant changes, we’ll notify you through the App or by email
  • Continued use of the App constitutes acceptance of the updated policy

Contact Us

If you have questions, concerns, or complaints about this Privacy Policy or our privacy practices:

Privacy Officer

For formal privacy complaints or inquiries, you can contact our Privacy Officer at the above details.

External Complaints

If you’re not satisfied with our response to your privacy concern, you can lodge a complaint with:

Office of the Australian Information Commissioner (OAIC)

International Users

If you’re accessing the App from the European Union, you have additional rights under GDPR including the right to object to processing and the right to lodge a complaint with your local supervisory authority.

Australian Privacy Principles Compliance

This Privacy Policy is designed to comply with all 13 Australian Privacy Principles under the Privacy Act 1988. We are committed to:

  • Open and transparent management of personal information
  • Anonymity and pseudonymity where practicable
  • Collection of solicited personal information
  • Dealing with unsolicited personal information
  • Notification of the collection of personal information
  • Use or disclosure of personal information
  • Direct marketing
  • Cross-border disclosure of personal information
  • Adoption, use or disclosure of government related identifiers
  • Quality of personal information
  • Security of personal information
  • Access to personal information
  • Correction of personal information

Version History

  • Version 1.1.0 (08/10/2026): Updated to match App 1.1.11: end-to-end encrypted notes, bug reports (no email), crash reports, Bible reading records, YouTube player, permissions; removed the discontinued OneNote integration and the outdated anonymized-analytics statement
  • Version 1.0.0 (01/08/2025): Initial privacy policy with comprehensive Apple App Store compliance

This Privacy Policy was last updated on 08/10/2026. We recommend reviewing this policy periodically to stay informed about how we protect your information.