Privacy Policy
Last Updated: December 19, 2024
1. Introduction
LCR Ops ("we," "our," or "us") is committed to protecting your privacy and handling your data in accordance with the highest standards of care and Church privacy guidelines. This Privacy Policy explains how we collect, use, and protect your information.
2. Information We Collect
2.1 Account Information
When you create an account, we collect:
- Email address
- Name
- Ward/Stake assignment
- Calling/role information
2.2 Member Data
When you import ward directory data, we collect only the information you choose to provide:
- Names and contact information
- Birthdates and ages
- Household relationships
- Ordinance status (boolean flags only - NOT specific dates)
- Priesthood offices
- Calling assignments
2.3 Usage Information
We automatically collect certain information about how you use the Service, including:
- Log data (access times, pages viewed)
- Device information
- Browser type and version
3. Privacy-Safe Data Handling
We implement automatic privacy protections on all imported data:
- Ordinance Dates: Automatically converted to boolean flags (Yes/No) - specific dates are NEVER stored
- Temple Recommend Information: Completely ignored and NEVER stored
- Sensitive Data: Minimized to only what's necessary for ward operations
- Encryption: All data encrypted in transit and at rest
4. How We Use Your Information
We use the information we collect to:
- Provide and maintain the Service
- Enable ward operations management features
- Track callings, meetings, and administrative tasks
- Generate reports and analytics for authorized leaders
- Improve and optimize the Service
- Communicate with you about the Service
5. Data Sharing and Disclosure
We do NOT sell, trade, or rent your personal information to third parties. We may share information only in the following circumstances:
- Within Your Ward/Stake: With other authorized leaders who have access to your ward
- Service Providers: With trusted third-party services (e.g., hosting, database) under strict confidentiality agreements
- Legal Requirements: If required by law or to protect rights and safety
- With Your Consent: When you explicitly authorize sharing
6. Third-Party Services
We use the following third-party services:
- Supabase: Database and authentication (see their Privacy Policy)
- OpenAI: AI-powered PDF conversion (see their Privacy Policy)
- Vercel: Hosting and deployment (see their Privacy Policy)
Note: When using AI-powered import, PDF content is sent to OpenAI for processing, then immediately deleted. OpenAI does not train on your data.
7. Data Security
We implement industry-standard security measures to protect your data:
- Encryption in transit (HTTPS/TLS)
- Encryption at rest
- Secure authentication
- Regular security audits
- Access controls and role-based permissions
8. Data Retention
We retain your information for as long as your account is active or as needed to provide the Service. You may request deletion of your data at any time by contacting us.
9. Your Rights
You have the right to:
- Access your personal information
- Correct inaccurate data
- Request deletion of your data
- Export your data
- Opt-out of certain data uses
10. Children's Privacy
The Service is intended for use by authorized Church leaders (adults). We do not knowingly collect personal information from children under 13, except as part of ward directory data managed by authorized leaders.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date.
12. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us through the application.
Church Privacy Guidelines
LCR Ops is designed to comply with Church privacy guidelines for handling member information. All users are expected to follow Church policies regarding confidentiality and appropriate use of member data.