SoulWinnerPrivacy policy
Updated November 2, 2026
What SoulWinner does
SoulWinner is a free church evangelism and visitation app. Each church has a separate workspace. English and Spanish are supported.
Information stored
We store account names, email addresses, password hashes, church membership and roles; territory names and manually drawn boundaries, street segments, property address pins, door outcomes (not knocked, answered, no answer, do not knock), address event history, street check-in/check-out times, inventory review sources, coverage status and update dates; visit outcomes; professions of faith; follow-up tasks; and pickup schedules, addresses, phone numbers, and channel-specific contact permissions. Names, phone numbers or other contact details, and notes may be entered only with appropriate permission. Anonymous outreach records are supported. Religious information can be sensitive.
How information is used and shared
Information is used to operate church outreach, enforce permissions, send verification and invitation emails, and protect the service. Pastors and outreach leaders can access their church’s records; workers can access their assigned workflow and own records. Churches must obtain permission before recording personal details. We do not sell information, use advertising trackers, or share it for cross-app advertising. Hosting and security providers process requests to deliver the service. Microsoft processes verification and invitation email. Apple Maps processes map searches and map requests under Apple’s privacy policy. Pickup communication is optional. Tapping Text message opens a private message for review in your phone’s messaging app; tapping WhatsApp shares the selected phone number and draft message with WhatsApp (Meta) to open a chat. Calls use your phone provider. These services operate under their own terms and privacy policies; carrier charges may apply. No automatic or group messages are sent. Street check-ins record the selected street and time, not the device’s live location. Property address inventories and do-not-knock restrictions are shared church operational records; they remain for continuing churches when a worker deletes their account, with that worker’s attribution removed. Do not put residents’ names or sensitive personal details in property address fields. Apple Maps processes user-initiated address searches. The app does not request GPS access or track your current location.
Retention, recovery, and deletion
Records remain in the church workspace until removed. Delete record removes a record from lists and totals but keeps it recoverable under Deleted records; this is not permanent erasure. Withdraw consent clears personal details on that record. Withdrawing consent on a visit or salvation record also clears linked pickup identities, addresses, phone numbers, and contact permissions, including recoverable deleted pickup entries. Delete my account permanently removes your account and your associated visits, salvation records, tasks, and pickup records from the active database, including recoverable deleted records. If you are the only member, your church workspace is also removed. Shared territories remain for continuing church members and are reassigned. An administrator leaving a continuing church must first ensure another administrator has joined. Restricted backups may retain earlier copies until backup rotation or administrator removal; contact [email protected] about backup retention or permanent personal-data removal. Verification codes expire after 30 minutes, but security records may remain for abuse prevention.
Your choices
You may record anonymously, decline optional personal details, withdraw consent, delete or restore outreach records, and delete your account from Church → Delete my account. People whose information was recorded by a church may contact that church or [email protected] to request access, correction, consent withdrawal, or deletion. Do not enter personal details about children without appropriate authority and permission.
Security and contact
Traffic to the hosted service uses HTTPS. Access requires authentication and church-scoped permissions. Passwords are hashed, and the iPhone app does not persist passwords or outreach records for offline use. No system can guarantee absolute security. Support and privacy contact: [email protected]. This policy describes the default service at montecitobc.org/soulwinner; independently hosted servers are operated by their respective hosts.