MissionaryConnect privacy notice
MissionaryConnect provides private missions workspaces for churches. For service and privacy questions, contact missionaryconnect@montecito.ws. Your church administers its ministry records; contact your church administrator about what your church publishes.
Information used
We store account email addresses, password hashes, church memberships and roles. Churches and missionaries can enter names, family information, serving countries and regions, ministry stories, contact emails, birthdays, anniversaries, presentation links, photos, PDF letters, prayer requests and conferences. We also store personal hidden-ministry preferences and content reports, including the reporter’s account identifier, reason and review status. Reports are available to your church administrators. Prayer content may contain religious or other sensitive information. Only submit information you have permission to share; avoid private health details, children’s details and precise locations in sensitive ministries.
Who can see it
Records are separated by church membership. Ministry names, serving places, stories, presentation links, letters and prayer requests are shared with authenticated members of that church. Contact, family, occasion and photo visibility defaults to administrators and the assigned missionary; choosing Church members shares those fields with your church. Administrators can manage records and access. These controls cannot prevent an authorized reader from copying information.
Service providers and external links
The service uses the hosting server at montecitobc.org. Hosting/security logs may contain IP addresses and request metadata. Serving-place text may be sent to Apple’s geocoding service to place map pins, and Apple Maps provides the map. We do not request your device’s GPS location. External photos are requested from their hosting sites. Presentation links open their original providers, such as YouTube or Vimeo, whose own privacy practices apply. Videos are not hosted or embedded by MissionaryConnect.
Device storage and notifications
The iPhone app keeps sign-in sessions and church records in memory and clears them on sign-out. Only the language preference is saved by the app. Selected photos are resized and re-encoded before private upload; PDF letters are stored privately on the server. Optional prayer reminders use local iPhone notifications with generic text. No advertising, tracking SDKs, or cross-app tracking are included.
Retention, deletion and your choices
Account information remains while your account exists. In Settings → Delete my account, confirm with your password to permanently remove your account, memberships and personal prayer progress across churches. You must arrange another administrator first if other members rely on you as their only administrator. Shared ministry records remain under the church’s control; ask your church administrator or the support address to remove personal information from those records. You may also request correction, access or deletion through support. We verify requests before acting and never ask you to email your password.
Hosting logs and server backups, if maintained, follow the server operator’s retention and recovery process; deletion from the active service does not immediately erase historical backups. Contact support for applicable retention details. The service uses HTTPS, role checks and church-scoped storage. No system can guarantee absolute security.
Aviso de privacidad
MissionaryConnect ofrece espacios privados de misiones para cualquier iglesia. Contacto: missionaryconnect@montecito.ws. Su iglesia administra los registros que publica.
Guardamos correo de cuenta, contraseñas cifradas mediante hash, membresías y roles; también los perfiles, lugares de servicio, contactos, familia, fechas, fotos, cartas PDF, enlaces, peticiones y conferencias que se agregan. También guardamos sus preferencias de ministerios ocultos y los reportes de contenido (cuenta, motivo y estado), visibles a los administradores de su iglesia. El contenido puede revelar creencias u otros datos sensibles. No publique datos sin autorización ni ubicaciones precisas de ministerios sensibles.
Los registros se separan por iglesia. Miembros autenticados ven información del ministerio, lugares, historias, cartas, presentaciones y peticiones. Por defecto, contacto, familia, fechas y fotos se restringen a administradores y al misionero asignado. La opción Miembros de iglesia comparte esos campos con su iglesia.
El servicio está alojado en montecitobc.org. Los registros del servidor pueden incluir IP y metadatos. Apple recibe el texto del lugar de servicio para ubicar el mapa; no pedimos GPS del dispositivo. Fotos y enlaces externos usan sus propios proveedores. No alojamos videos ni incluimos publicidad o seguimiento entre aplicaciones.
La aplicación guarda sesiones y registros en memoria; solo conserva la preferencia de idioma. Las fotos se procesan antes de guardarse de forma privada. Los recordatorios son notificaciones locales con texto genérico.
En Ajustes → Eliminar mi cuenta puede eliminar permanentemente cuenta, membresías y progreso personal de oración con su contraseña. Si otros miembros dependen de usted como único administrador, invite primero a otro administrador. Los registros compartidos pertenecen a la iglesia: solicite al administrador o a soporte que retire sus datos personales. Nunca envíe contraseñas por correo. Copias de seguridad y registros del servidor pueden conservar datos según el proceso del operador; contacte a soporte para detalles, correcciones o eliminación.
Shared missionary directory / Directorio compartido
Missionary names, serving countries and ministries are available in a common directory and on view-only public pages without signing in. Maintaining church administrators or assigned missionaries can hide a profile or choose additional public information. Contact details, family details, occasions and church records are not automatically published. Photos, detailed serving regions, presentations, biographies and full prayer letters/PDFs appear publicly only when selected for public display. Public information can be read and copied by visitors; removing it cannot recall copies already made.
Los nombres, países y ministerios de los misioneros aparecen en un directorio común y en páginas públicas de solo lectura, sin iniciar sesión. La iglesia responsable o el misionero asignado puede ocultar un perfil y seleccionar información pública adicional. El contacto, los detalles familiares, las fechas y los registros de iglesia no se publican automáticamente. Las fotos, regiones detalladas, presentaciones, biografías y cartas/PDF completos requieren selección pública. Los visitantes pueden copiar la información pública; quitarla no elimina copias anteriores.