Privacy Policy

Great Ministers runs the platform and is responsible for your account: your email address, your password (stored only in encrypted form by our authentication provider), and your sign-in history.

Your church is responsible for your member record — your name, phone number, date of birth, photo, role, and anything it records about your service, availability and giving. Questions about that information go to your church administrator.

• Account: email address, encrypted password, and the date you joined.
• Identity check: the date of birth and phone number you confirm, and the date the check passed.
• Church record: your name, role, supervisor, photo, and contact details your church entered.
• Ministry activity: services, availability, rota assignments, leave requests, messages, and sermons you preach.
• Finance: gifts you record or make, expenses, Gift Aid declarations, and Direct Debit mandates — held for the church only, visible only to its finance team.
• Technical: the minimum needed to serve the app securely, plus a local install record if you add the app to your phone.

Account and security data is processed to give you the service you signed up for, to keep your account verified, and to stop anyone else getting in. Ministry and finance records are processed on your church's instructions, and for its legitimate interests in running services, caring for volunteers, and keeping proper accounts. Finance records may also be kept to meet legal duties such as tax and Gift Aid requirements.

We do not sell your data, and we do not use it for advertising.

Every record is scoped to your church. Access is enforced on the server for every read and write, not just hidden in the screens — a member of one church cannot reach another church's records even by changing a link. Inside a church, access follows your role: ministers see their own availability and rota, supervisors see their team, church administrators see the church, and finance records are limited to the finance team and the church administrator.

Our hosting, email and payment providers process the data needed to run those services for us, under contract and only on our instructions. Card payments are handled entirely by our payment providers; card numbers never reach this app.

Traffic is encrypted in transit. Passwords are held in encrypted form by our authentication provider and can never be read back, even by us. Accounts must be verified against the date of birth and phone number your church holds before a workspace opens, and repeated failed attempts are rate limited.

Full bank account numbers are never stored here. Where sensitive documents are uploaded — expense receipts for example — they are stored privately and only served to you through short-lived signed links.

Your account lasts until you close it. Ministry records stay while your church needs them for rotas, care and safeguarding. Finance, Gift Aid and Direct Debit records are kept for as long as tax and HMRC rules require, which can be several years after a gift is made. When a church's subscription ends, its data remains available to that church and can be exported before closure.

You can ask for a copy of your information, have it corrected, ask for it to be deleted, or object to how it is used. Much of this you can do yourself from your profile; for anything else, ask your church administrator, or contact us and we will pass the request to the right place.

You also have the right to complain to the Information Commissioner's Office (ico.org.uk) about how your data is handled.

We use the storage needed to keep you signed in and to make the app installable on your phone. We do not set advertising or cross-site tracking cookies. Clearing your browser storage signs you out.

If this policy changes we will announce it in the app before the change takes effect. For any privacy question, use the contact form, or speak to your church administrator for matters about your church record.