1. What data we collect

We collect only the minimum data necessary to provide the service:

• Congregation data: congregation name, unique ID, encrypted password.
• User data: first and last names of publishers, link to congregation.
• Territory data: territory names, boundaries (GeoJSON), processing history, assignment statuses.
• Technical data: interface language, time zone, app settings.
• Optional data: Telegram Chat ID (only when Telegram bot is connected).

2. How we use your data

Your data is used exclusively for:

• Providing territory management functionality.
• Handling territory requests and related notifications.
• Keeping territory processing history.
• Generating statistics and reports for your congregation.
• Sending Telegram notifications (only with your consent and bot connection).

3. Sharing data with third parties

We do NOT sell, transfer, or exchange your personal data with third parties. Your data is available only to:

• You and other authorized users of your congregation.
• Your congregation administrators (for user and territory management).

4. Data security

We apply modern data protection methods:

• Password encryption: all passwords are stored using bcrypt (one-way hashing).
• Secure connection: data is transmitted via HTTPS (SSL/TLS).
• Secure storage: data is stored on protected servers with regular backups.
• Access control: only authorized congregation users can access data.
• Regular updates: we regularly update security to protect against new threats.

5. Your rights

Under data protection laws, you have the right to:

• Access your personal data (right of access).
• Correct inaccurate or incomplete data (right to rectification).
• Delete your data (right to erasure).
• Restrict processing of your data (right to restriction).
• Port your data to another service (right to data portability).
• Withdraw consent to data processing at any time.

6. GDPR compliance

MyTerritoryApp complies with the EU General Data Protection Regulation (GDPR - Regulation (EU) 2016/679).

GDPR sets strict rules for processing personal data of EU citizens and grants expanded rights. We adhere to the GDPR principles:

• Lawfulness, fairness, and transparency.
• Purpose limitation: data collected only for specific, explicit purposes.
• Data minimization: we collect only necessary data.
• Accuracy: we take steps to keep data up to date.
• Storage limitation: data is stored only as long as necessary.
• Integrity and confidentiality: we protect data from unauthorized access.

7. Legal basis for processing

We process personal data based on the following legal bases:

• Consent (Article 6(1)(a) GDPR): by registering you consent to processing.
• Performance of a contract (Article 6(1)(b) GDPR): processing is necessary to provide services.
• Legitimate interests (Article 6(1)(f) GDPR): for security and service improvement.

8. Data retention period

Your data is stored until:

• You delete your account or congregation data.
• The period necessary for processing purposes expires.
• You withdraw your consent (if applicable).

9. Cookies and tracking technologies

We use only essential technologies:

• Session cookies: to maintain your authorization during use.
• "Remember me" tokens: for automatic login (stored securely).
• We do NOT use cookies for tracking or advertising.

10. Children data protection

MyTerritoryApp is intended for congregations and their members. If you are a parent/guardian and believe your child provided personal data, please contact us.

11. Changes to this Privacy Policy

We may update this Privacy Policy periodically. Material changes will be announced via the app or email (if provided).

12. Contact

If you have questions about this Privacy Policy or want to exercise your data rights, you can:

• Delete your data via the app interface (in congregation settings).
• Contact your congregation admin for access or deletion.
• Contact us via the website contact form (if available).

13. Right to lodge a complaint

If you believe your data rights are violated, you can file a complaint with your data protection authority. In the EU, this may be:

• The authority of your EU member state.
• European Data Protection Supervisor.

Contact us

If you have privacy questions, want to delete your data, or have other questions, please fill the form below: