Privacy Policy

Last Updated: November 7, 2025

GroupStage ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our mobile application.

1. Information We Collect

1.1 Personal Information

When you create an account, we collect:

• Name: To identify you within your groups
• Email Address: For account authentication and communication
• Password: Securely encrypted for account security
• Profile Picture (optional): If you choose to upload one

1.2 Group and Activity Data

When you use the app, we collect:

• Groups you create or join
• Announcements and posts you create
• Events you create or participate in
• Resources and documents you share
• Calendar entries and reminders
• Prayer requests you submit

1.3 Device and Usage Information

• Device Tokens: For push notifications
• Usage Analytics: How you interact with the app (optional)
• Error Logs: To improve app performance and fix bugs

2. How We Use Your Information

We use your information to:

• Provide and maintain the GroupStage service
• Enable communication within your small groups
• Send push notifications for announcements, events, and prayer requests
• Allow you to create and manage groups, events, and resources
• Improve app functionality and user experience
• Respond to your support requests
• Ensure security and prevent fraud

3. Information Sharing

We do not sell, trade, or rent your personal information to third parties.

3.1 Within Your Groups

Information you share in groups (name, profile picture, posts, events, resources) is visible to other members of those groups.

3.2 Service Providers

We use trusted third-party services:

• Supabase: Database and authentication hosting
• Apple Push Notification Service (APNs): For sending push notifications

3.3 Legal Requirements

We may disclose your information if required by law or to protect our rights and safety.

4. Data Security

We implement industry-standard security measures to protect your data:

• Passwords are encrypted using bcrypt
• Data transmission is secured with HTTPS/SSL
• Row-level security policies protect your database records
• Regular security updates and monitoring

5. Your Rights and Choices

You have the right to:

• Access: View your personal information
• Update: Edit your profile and account details
• Delete: Request account deletion (by going to the profile section or contact us at francis@assistuni.org)
• Opt-Out: Disable push notifications in your device settings
• Leave Groups: Exit any group at any time

6. Data Retention

• Account data is retained while your account is active
• If you delete your account, your personal data is permanently removed
• Group content you created may remain visible to group members unless deleted
• Backups are retained for 30 days for disaster recovery

7. Children's Privacy

GroupStage is intended for users aged 13 and older. We do not knowingly collect information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us immediately.

8. Push Notifications

We send push notifications for:

• New announcements in your groups
• Upcoming events and reminders
• Prayer request updates
• Group invitations

You can disable push notifications at any time in your device settings.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Posting the new policy on this page
• Updating the "Last Updated" date
• Sending an in-app notification (for major changes)

10. International Users

GroupStage is hosted on servers that may be located in different countries. By using the app, you consent to the transfer of your information to these locations.

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights:

• Right to know what personal information is collected
• Right to delete your personal information
• Right to opt-out of data sales (we don't sell data)
• Right to non-discrimination for exercising your rights

12. GDPR Compliance (EU Users)

If you are in the European Union, you have rights under GDPR:

• Right to access your data
• Right to rectification
• Right to erasure ("right to be forgotten")
• Right to data portability
• Right to object to processing

© 2025 GroupStage. All rights reserved.