This Privacy Policy explains how Holy Fire Ministries (“we”, “us”, “our”) collects, uses, shares, and protects your information when you use the HFI Connect mobile application (the “App”) on iOS and Android.
By creating an account or using the App, you agree to this Policy. If you do not agree, please do not use the App.
HFI Connect is a private community app for members of Holy Fire Ministries. It lets approved members read the Bible, view events, announcements and sermons, submit and pray for prayer requests, react and comment, and receive notifications. We collect only the information needed to operate this community and to keep your account secure. We do not sell your personal data, and we do not use it for third-party advertising or cross-app tracking.
The App asks for the following permissions, only when needed, and explains why at the moment of use:
| Permission | Why |
|---|---|
| Camera | Take a profile photo or capture an image for a post. |
| Photo Library (read) | Choose a profile picture, attach an image to a post, or pick a background for a verse image. |
| Photo Library (add/save) | Save verse images and posts to your device’s photos when you tap Download. |
| Notifications | Send you alerts about events, announcements, prayer activity, comments/reactions, and celebrations. |
| Microphone | Record audio only if you choose to capture a sermon clip. |
You can change or revoke these permissions at any time in your device settings.
We use your information to:
Legal bases (where applicable): performance of our service to you, your consent (notifications, camera/photo access, optional profile fields), and our legitimate interests (security, debugging, and operating the community).
We share information only as needed to run the App, with service providers (“processors / sub-processors”) who handle data on our behalf under their own privacy and security commitments:
| Provider | Purpose |
|---|---|
| Supabase | Database, authentication, and file storage |
| Expo | Push-notification delivery and app build/update services |
| Apple Push Notification service (APNs) | Delivering notifications on iOS |
| Google Firebase Cloud Messaging (FCM) | Delivering notifications on Android |
| Sentry | Crash and error reporting |
| Resend | Sending transactional emails |
| Cloudflare R2 | Media storage and faster content delivery |
| Apple / Google | Sign-in (Sign in with Apple) and app distribution |
We may also disclose information if required by law, to protect the rights, safety, or property of our community, or in connection with a lawful request.
Community visibility: content you post (your name, prayer requests, comments, reactions, profile photo) is visible to other approved members of the community. Please share only what you are comfortable making visible to the congregation.
We do not sell personal data.
Our service providers may process and store data on servers located outside your country (including outside India). Where this happens, we rely on appropriate safeguards and the providers’ contractual and security commitments to protect your information.
We keep your personal data for as long as your account is active. If you delete your account (see Section 8), we delete or irreversibly anonymize your personal data and content within a reasonable period, except where we must retain certain records to comply with legal obligations, resolve disputes, or enforce our agreements. Backups are purged on a rolling schedule.
You have the right to access, correct, update, or delete your personal information, and to withdraw consent (for example, by turning off notifications or revoking permissions).
Deleting your account:
You can edit most profile information directly in the App at any time.
HFI Connect is intended for the members of Holy Fire Ministries and is not directed to children under 13. Members under the age of 18 should use the App only with the involvement and consent of a parent or guardian. If you believe a child has provided us personal information without appropriate consent, contact us and we will delete it.
We use industry-standard measures to protect your information, including encrypted connections (HTTPS/TLS), hashed passwords, and database access controls (row-level security) that restrict data to authorized users. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your data and to notify you of any breach as required by law.
We may update this Policy from time to time. When we make material changes, we will update the “Last updated” date and, where appropriate, notify you in the App. Your continued use of the App after changes take effect means you accept the updated Policy.
If you have questions, requests, or complaints about this Policy or your data:
For users in India, you may contact us at the address above as our grievance contact under the Digital Personal Data Protection Act, 2023. We will respond to verified requests within the time required by applicable law.