Privacy Policy

What We Collect

The Huddle collects your name, email, phone number, optional bio, join request information, communication choices, and content you submit to the members area. We store a secure password hash, session and verification token hashes, consent timestamps, and limited sign-in attempt records including IP addresses. We use this information to manage membership, secure accounts, organize gatherings, and send requested communications.

Prayer Privacy

The Prayer Wall is available only to signed-in members. All Members posts are visible to members. Leaders Only posts are visible to their author and group leaders, admins, and the owner. Anonymous to Members posts hide the author from ordinary members, while leaders, admins, and the owner can still see the author. Prayer notifications never include prayer text or author identity. Members may still remember or copy content they see, so share thoughtfully and avoid posting another person's sensitive information without permission.

Email and SMS Choices

You can separately choose email and SMS for meeting reminders, study announcements, and prayer updates in Account Settings. SMS requires explicit consent and a saved phone number. We record consent and withdrawal timestamps. You can withdraw consent at any time in Account Settings. Essential messages such as verification, password reset, and account security notices may still be sent. Message and data rates may apply to texts.

Access and Service Providers

Authorized leaders and admins can access membership information as needed to operate the group. Prayer visibility follows the choices above. Our hosting and database providers process information to run this site. Transactional email uses Resend when configured. When email is unavailable, messages are stored in a restricted admin outbox so an admin can help deliver links. We do not sell personal information or prayer content.

Retention

Active account and membership information is kept while you participate. Pending join requests are kept until reviewed or you ask a leader to remove them. Approved requests remain linked to membership until deletion. Declined join requests and email outbox logs are retained for up to 90 days and purged on the next account request after that period. Sign-in attempt logs are kept for up to one day. Expired sessions and verification tokens are purged on account activity.

Account deletion immediately removes your user profile, sessions, tokens, preferences, prayer posts, updates, and prayer activity. Linked member records, join request personal information, and related account outbox messages are deleted. Shared studies and calendar events remain. Provider delivery records and hosting backups may follow the provider's own retention schedule; deleted data in backups is not used for active membership.

Delete or Correct Your Information

Visit Account Settings to edit your profile, verify a new email, change your password, manage consent, or delete your account. Deletion requires a recent password confirmation and typing DELETE. It cannot be undone. The last owner must transfer ownership first. If you cannot access your account or want a join request removed, contact a Huddle leader through the group or use the Join page to request help.

Security

We use server authorization, secure session cookies over HTTPS, password hashing, input validation, and single-use expiring verification links. No online service can guarantee complete security. Keep your password and emailed links private and sign out of shared devices.