📄 Privacy Policy – ParishNavigator
Last Updated: 27th November 2025
1. Introduction
ParishNavigator is provided by Alfie Anil (“we”, “us”, “our”).
We are committed to protecting your privacy and handling your information securely and responsibly. This policy explains what information we collect, why we collect it, and how it is used.
2. Information We Collect
2.1 Account Information
We collect the information needed to create and maintain your account, including:
- Email address
- Authentication details (passwords are securely hashed)
- Parish membership or admin role
2.2 Parish Data
Parish administrators may enter information such as:
- Parish details
- Mass times
- Posts and announcements
- Custom forms
- To-do lists or records created for parish use
2.3 SumUp Integration Data
Parishes may choose to connect their SumUp account. We store:
- SumUp access token
- SumUp refresh token
These tokens are used only to access the parish’s own donation information from their SumUp account (e.g., viewing transaction histories). We do not send any user or parish member data to SumUp, and we do not store or process card payment data.
3. How We Use Your Information
We use your information to:
- Provide and maintain the ParishNavigator service
- Allow parishes to manage their data and members
- Enable optional SumUp integration for parish donation insights
- Improve app features and performance
- Ensure security and prevent misuse
We do not sell your data.
4. Legal Basis
We process your data under:
- Contractual necessity – to provide you with the service
- Legitimate interests – to improve the app and ensure security
- Consent – where required (e.g., optional notifications)
5. How We Store and Protect Your Data
Your data is stored securely using:
- Supabase (database, authentication)
We use encryption, secure access controls, and strictly limit what personal information is collected.
6. Sharing Your Information
We do not share personal data with third parties for marketing or advertising. We do not send your data to SumUp.
The only services involved in storing or processing app-related data are:
- Supabase – for authentication and database storage
These services act strictly as processors and are covered by signed Data Processing Agreements (DPAs).
7. Your Rights
Under GDPR/UK GDPR, you have the right to:
- Access your data
- Correct inaccurate data
- Request deletion of your account
- Withdraw consent where applicable
- Object to certain types of processing
To exercise any rights, contact:
📧 a.anil@rcaol.org.uk
8. Contact Us
If you have questions about this policy or your data, please contact:
Alfie Anil
📧 a.anil@rcaol.org.uk