1. About This Policy
This Privacy Policy explains how goZurch, operated by ZPTEM ("goZurch", "we", "us", or "our"), collects, uses, stores, discloses, and protects personal data when you use the goZurch mobile application, websites, APIs, and related services (together, the "Services"). goZurch helps people discover churches and events, join church communities, communicate with members, create and manage church profiles, publish content, connect supported Google services, make offerings, and purchase promotional services. For applicable Indian data-protection law, the operator of goZurch is the Data Fiduciary for personal data processed for the purposes described here. A church may independently be responsible for information it collects or uses outside goZurch.
2. Personal Data We Collect
Depending on the features you use, we may collect: • Account and identity data: name, username, email address, phone number, password hash, one-time-password and verification records, profile photograph, gender, date of birth, and account status. • Profile and community data: country, state, city, address, preferred distance unit, baptism status, church memberships, roles, permissions, join requests, invitations, bookmarks, reactions, and participation history. This information may reveal religious beliefs or affiliations. • Location data: a saved address and, only when you enable device location and grant permission, precise or approximate latitude and longitude and the time the location was updated. • Church information: church name, description, denomination, languages, service times, contact information, location, media, social links, audience and worship styles, registration information, and authorized church contact details. • Verification and payout data: church registration documents, PAN or other identity-proof images, bank-account and branch information, account-holder details, verification status, and payment-gateway identifiers. • Content and communications: announcements, online-meeting information, testimonies, prayer requests, reports, group-chat messages, mentions, reactions, attachments, and other content you submit. Please do not include unnecessary sensitive personal data in free-text content. • Transaction data: offering or donation category, amount, currency, fee components, status, donor note, anonymity choice, refund or transfer status, and identifiers supplied by Razorpay, or another supported payment provider. We do not receive or store complete payment-card credentials entered directly with a payment provider. • Connected-service data: Google account and Calendar identifiers, email address, granted permissions, encrypted refresh token, calendar synchronization settings and errors, and public YouTube channel and video information selected for a church. • Device and operational data: device identifier, device name, platform, app version, push-notification token and preferences, login and activity times, session identifiers, diagnostic logs, IP address and request metadata that may be generated when the Services are used. • Promotion and safety data: promotion purchases, eligibility and impression records, promo-code use, fraud-prevention signals, complaints, reports, moderation decisions, and administrative notes. Identity-document images: For church verification, users may be asked to upload an image of the church’s PAN card. We use these images only to prevent fraud. We do not ask you to share your PAN number publicly.
3. How We Receive Data
We receive personal data: • directly from you when you register, edit a profile, submit content, make a payment, contact support, or request a church role; • from authorized church leaders and members when they invite you, assign roles, mention you, or manage a church community; • from your device when you grant permissions such as location, notifications, camera, photo library, or document access; • from connected services such as Google Calendar, Google Sign-In, Firebase, YouTube, Razorpay; and • automatically through server logs and records created when you interact with the Services.
4. Why We Use Personal Data
We use personal data only for specified purposes, including to: • create, authenticate, secure, and support your account; • provide profiles, church discovery, distance-based results, memberships, role permissions, chat, events, meetings, reminders, notifications, prayer requests, testimonies, reports, and bookmarks; • review church registrations and verify organizational, bank, and identity information; • process offerings, purchases, fees, refunds, transfers, reconciliation, and financial records; • synchronize calendar events when you enable Google Calendar access and display public YouTube information selected by a church; • personalize discovery and promoted content using factors such as location, church association, eligibility, and interactions; • detect abuse, fraud, security incidents, duplicate transactions, and violations of our Terms; • respond to support, privacy, grievance, and legal requests; and • maintain, troubleshoot, measure, and improve the Services and comply with applicable law. Where consent is required, you may withdraw it through the relevant device setting, connected-service setting, in-app control, or by contacting us. Withdrawal does not affect processing already lawfully completed and may prevent features that require the data from working. To protect church communities, we may use automated checks and authorized staff review of church profiles, public activity, reports, promotions, and transactions to verify accuracy, detect misuse, and enforce our Terms. Reviews are limited to what is needed for these purposes and may result in a request for corrections or a change to a church’s verification, visibility, or account status. Religious and community affiliation data: By creating a profile, choosing a denomination, specifying baptism status, joining a church, or submitting prayer requests and testimonies, you provide your explicit consent for goZurch to process this religious belief and affiliation information solely to enable and deliver church and community features. Financial ledger information: If ledger features are available, we may process and display church-related income, expenses, assets, liabilities, balances, and supporting transaction records to authorized users according to their roles and permissions. These records may be used for bookkeeping, reconciliation, fraud prevention, audit, support, and legal or tax compliance. Safety and moderation: We may review reported group-chat messages, images, announcements, church or member profiles, promotions, and related account activity to investigate complaints, protect members, enforce platform rules, and prevent fraud or unlawful activity. Monitoring may include automated detection and review by authorized personnel, limited to legitimate safety, security, moderation, and compliance purposes.
5. Who Can See Your Information
Church profiles, service times, public contact details, locations, media, announcements, events, testimonies, and public YouTube information may be visible to other users or the public. Your name, profile image, church role, messages, reactions, and other community activity may be visible to members or authorized leaders of the relevant church. Prayer requests and similar content are shown according to the audience and visibility controls offered when the content is submitted. If you hold a church leader role (Pastor or Associate Pastor), active members connected to that same church can view all information displayed on your member profile, including your email address, phone number, date of birth, state, city, and home address. While you hold one of these leader roles, these member-profile fields are not treated as private from connected members of that church. They are not made public to people outside the church merely because of your leader role. Private profile fields of members who do not hold a leader role remain limited to the profile owner and users with the applicable private-member permission. Choosing to make an offering anonymous limits how your identity is displayed to other users or the receiving church where supported. It does not prevent goZurch, payment providers, banks, or authorities from processing identity and transaction information when necessary for payment, fraud prevention, compliance, or dispute resolution. Do not publish information that you do not want the applicable audience to see. If you submit personal data about another person, you must have authority to do so and give them any notice required by law. Ledger access: Income, expenses, assets, liabilities, and related records are visible only to users who have the relevant church role or permission, subject to applicable law and the access controls provided in the Services. Do not enter unnecessary personal or confidential information into ledger descriptions or attachments.
7. Google User Data
If you connect Google Calendar, goZurch requests only the permissions shown during Google's authorization flow. We use Google account and Calendar data to create, update, remove, and reconcile goZurch-related calendar events and reminders that you request. We do not use Google Calendar data for advertising or sell it. Human access is limited to security, support requested by you, legal compliance, or your affirmative permission. goZurch uses YouTube API Services. An authorized church administrator can sign in with Google using read-only YouTube access to choose a channel. The app uses the temporary access token to list channels; our server does not store that token. We store the selected channel's public details and use YouTube API Services and public feeds to show its videos and live streams and identify new or live content. This may include channel and video IDs, names, images, titles, descriptions, thumbnails, publication times, duration, public statistics, and live status. We do not sell this data or use it for targeted advertising. The embedded YouTube player may collect device or viewing data and show advertising under Google's Privacy Policy. We refresh or remove stored YouTube API metadata within the applicable 30-day period. A church administrator can disconnect a channel in church management or ask support to remove it. You can also revoke goZurch's access in your Google Account security settings. Because we do not keep the YouTube token on our server, Google revocation alone may not remove a public channel already saved in goZurch; please disconnect it or contact support. Disconnection removes the church link and its church-specific video records. Public channel data may remain while another church independently links that channel. Removing data from goZurch does not delete anything on YouTube. You can disable Calendar synchronization in goZurch or revoke Google access. Information received from Google APIs is subject to the Google API Services User Data Policy, including its Limited Use requirements. Contact support@zptem.com with questions or a removal request.
8. Storage and International Processing
goZurch and its providers may process or store data in India and other countries where our infrastructure and service providers operate. Those countries may have different data-protection laws. Where required, we use contractual, technical, and organizational safeguards and comply with restrictions imposed by applicable law on cross-border processing.
9. Retention and Account Deletion
We keep personal data for as long as needed to provide the Services and for legitimate operational, security, dispute-resolution, financial, tax, audit, or legal purposes. The period depends on the data and the applicable requirement. You can permanently delete your account in the app through Profile → Danger Zone → Permanently Delete Account. After you confirm, we disable account access and sessions, end active church memberships, cancel pending join requests and invitations, disable push notifications, and queue removal of associated user files. We replace the account's public profile details with an anonymous identity. Historical group messages, prayer requests, testimonies, announcements, and meetings may remain visible to their permitted audiences with the former user's identity shown as anonymous. We remove some account preferences and other nonessential records while retaining information required for transactions, security, disputes, legal obligations, or other continuing lawful purposes. Free-text content and references written by other people may still contain identifying details. Backup copies may remain until they are replaced or expire under the applicable backup process. If you are the last pastor of an active church, you must assign another pastor before deleting your account. Deactivation is temporary and is not deletion. Closing your personal account does not automatically delete a church managed by other authorized users. An authorized church leader can contact support separately about church deletion. Data held independently by a church, payment provider, Google, YouTube, or another third party is governed by that party's practices. Identity-document images are retained only for as long as reasonably needed for verification, fraud prevention, disputes, security, or legal and regulatory requirements, and are deleted or securely disposed of when no longer needed, subject to lawful retention obligations.
10. Your Choices and Rights
Subject to applicable law, you may ask us to: • confirm whether we process your personal data and provide information about that processing; • correct inaccurate or incomplete data and update data that has changed; • erase personal data that is no longer necessary or legally required; • withdraw consent for consent-based processing; • provide a way to submit and escalate a grievance; and • recognize a valid nominee or authorized representative where applicable. You can update many profile and permission settings directly in the app. We may need to verify your identity and authority before acting on a request. We may deny or limit a request where permitted by law and will explain the applicable reason. You may also complain to the Data Protection Board of India or another competent regulator when that right is available under applicable law.
11. Device Permissions and Notifications
Location, camera, photo-library, document, calendar, and notification access are requested only when relevant to a feature. You can refuse or revoke device permissions in your operating-system settings. You can disable push notifications, location use, and calendar synchronization through available in-app or device controls. Some features, such as nearby church results, uploads, reminders, or notifications, may not work without the corresponding permission. Foreground-only location: goZurch does not collect, monitor, or track your device location in the background when the application is closed or not actively in use. Device location is requested and used solely in the foreground while you actively use the app to discover nearby churches and events.
12. Security
We use reasonable administrative, technical, and organizational safeguards appropriate to the nature of the data. These include encrypted network transport, password hashing, access-controlled object storage, encrypted Google Calendar refresh tokens, role-based access controls, session controls, and logging. Access to church administration and sensitive operations is restricted by authenticated roles and permissions. No system is completely secure. You are responsible for keeping your credentials and devices secure and for notifying support@zptem.com promptly if you suspect unauthorized access. If a personal-data breach requires notice under applicable law, we will provide the required notifications.
13. Children
People under 18 may use goZurch's general community features where permitted by law and with a parent or legal guardian's permission. Where applicable law requires verifiable parental or guardian consent before we process a minor's personal data, that consent must be obtained before the minor uses the affected features. Some features may be restricted until the required consent or safeguards are available. Only a person aged 18 or older may create or register a church in goZurch. If you believe a minor is using goZurch without required permission or consent, contact support@zptem.com so we can review the account.
14. Changes to This Policy
We may update this Policy when our practices, Services, providers, or legal obligations change. We will update the date above and provide additional notice in the app, by email, or through another appropriate channel when a change is material or consent is required. We will not apply a materially different purpose to previously collected data without the notice or consent required by law.
15. Privacy and Grievance Contact
To ask a privacy question, exercise a right, report a concern, or submit a grievance, contact: Grievance Officer / Privacy Contact goZurch / ZPTEM Email: support@zptem.com Support portal: https://www.zptem.com/products/gozurch/create-issue In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, grievances received will be acknowledged within 24 hours and addressed within 15 calendar days. Please use the email address associated with your account and describe your request clearly. Do not send passwords, one-time passwords, complete card details, or unnecessary identity documents by email.