EdifiU

This Privacy Policy describes how EdifiU("we," "us," or "our") collects, uses, shares, and protects personal information in connection with the EdifiU platform — the ministry operations software licensed to churches, Bible colleges, and other mission-driven organizations (each, an "Organization").

This is a single, platform-level policy covering EdifiU itself. It does not cover any Organization's own, separate privacy notice, website, or communications, which may add terms specific to that Organization.

Who Controls Your Information

Your Organization — the church, college, or ministry that invited you onto EdifiU — is the data controller for the personal information of its own members, students, donors, staff, and volunteers. Your Organization decides what information is collected through the platform and how it is used in its ministry, and it is your first point of contact for most privacy questions and requests.

EdifiU acts as a data processor / service provider on your Organization's behalf: we operate the platform, store the data, and process it only as needed to provide the service and as instructed by your Organization, not for our own independent purposes.

Information We Collect

Account and profile information — name, email, phone, mailing address, birthdate, household or family relationships, and photo, if you or your Organization add one.
Program and participation data — event registrations, attendance, small group or class enrollment, volunteer roles and schedules, and progress through learning pathways and spiritual development opportunities offered by your Organization.
Giving and financial data— donation amounts, fund designations, and pledge records. If your Organization uses EdifiU's online giving feature, payment card details are handled directly by our payment processor (Stripe); EdifiU does not store full card numbers.
Communications — messages, emails, or texts sent or received through the platform, and support requests or feedback you submit to us.
Usage and device data — sign-in timestamps, IP address, browser or device type, pages visited, and diagnostic or error logs generated as you use the platform.
Content you provide — documents, notes, or other files you or your Organization upload to the platform.

How We Use Information

Provide, operate, and maintain the platform for your Organization.
Enable your Organization's staff and authorized leaders to add, update, and organize people, programs, giving, and communications within their own Organization.
Process online giving and generate donor records and receipts.
Communicate with you about your account, a program you're part of, or a support request.
Maintain security, detect and prevent misuse, and enforce our terms of service.
Comply with applicable law and respond to lawful requests.
Understand and improve the platform, using aggregated or de-identified information where possible.

We do not use personal information collected through EdifiU to serve third-party advertising.

Legal Bases for Processing

Where applicable law requires a stated legal basis for processing personal information — including under the Philippines' Data Privacy Act of 2012 (RA 10173) — EdifiU and your Organization rely on one or more of the following:

Consent — for information you or your Organization choose to submit.
Contract — to perform the services your Organization has engaged EdifiU to provide.
Legitimate interests — of EdifiU or your Organization, such as keeping the platform secure and preventing misuse, balanced against your rights.
Legal obligation — such as responding to a lawful request from a regulator or court.

How Information Is Shared

We do not sell or rent personal information to anyone, for any purpose.

Within your Organization.Group administrators — ministry leaders, class instructors, event coordinators, and similar staff or volunteer roles your Organization designates — can see information submitted in connection with the specific group, class, program, or event you're part of, and only within your own Organization. Role-based access controls limit each person to the data their role covers.
Service providers. We use vetted vendors to operate the platform, including Vercel (application hosting), Supabase (database and authentication), and Stripe (online giving payment processing). Each is bound by confidentiality and data protection obligations and may only use the data to provide their service to us.
Legal and safety reasons. If required by law, subpoena, or court order, or to protect the rights, safety, or property of EdifiU, an Organization, or any person.
Business transfers. In the event of a merger, acquisition, or sale of assets, personal information may transfer as part of that transaction, subject to continued protection under this policy or a comparably protective one.

Where Information Is Hosted and Cross-Border Transfers

EdifiU serves Organizations across the United States — currently including Illinois, Iowa, Wisconsin, Ohio, Minnesota, and Florida — and in the Philippines. Regardless of where your Organization is located, your information is generally hosted and processed in the United States. Each Organization's data is logically isolated from every other Organization's data on the platform.

For Organizations and individuals in the Philippines, this means personal information is transferred outside the Philippines to the United States for hosting and processing. We take steps consistent with the Data Privacy Act of 2012 (RA 10173) to ensure a comparable standard of protection follows the data across that transfer, including through contractual safeguards with our hosting and service providers.

Data Retention

We retain personal information for as long as your Organization maintains an active EdifiU account and needs it to provide ministry services to you, plus any additional period needed to comply with law, resolve disputes, or honor your Organization's own record-keeping instructions. When your Organization closes its account or asks us to delete specific records, we delete or de-identify the applicable data within our normal operating and backup cycles.

Security

We use industry-standard safeguards to protect personal information, including encryption of data in transit and at rest, tenant-isolated data storage designed to prevent one Organization from accessing another Organization's records, and role-based access controls limiting staff to the data their role requires. No system is completely secure, and we cannot guarantee absolute security, but we work to continually strengthen these protections.

Children's Information

Some Organizations run programs for children and students below the age of majority. Where EdifiU processes information about a minor, we do so at the direction of, and under the consent and supervision arrangements established by, the minor's parent, guardian, or Organization — consistent with that Organization's own policies and applicable law.

Your Rights and Choices

Depending on where you and your Organization are located, you generally have the right to request access to, correction of, or deletion of your personal information held on the platform. Because your Organization is the data controller, we generally ask that you start with your Organization, which can make many of these changes directly or work with us to fulfill your request. You're also welcome to contact us directly using the details below, and we will coordinate with your Organization as needed to respond.

Cookies and Similar Technologies

EdifiU uses cookies and similar technologies to keep you signed in, remember your preferences, and understand how the platform is used so we can keep it reliable and secure. We do not use third-party advertising cookies to track you across other sites.

Changes to This Policy

We may update this Privacy Policy from time to time as the platform, our services, or applicable law change. We'll update the "Last updated" date above when we do, and for material changes we'll take reasonable steps to let Organizations know.

Contact Us

Questions about this Privacy Policy, or a request regarding your personal information, can be sent to hello@edifiu.com.