NDU Christian Union — Privacy Policy

NDU Christian Union ("NDU CU", "we", "us", or "our") operates the NDU CU mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App. Please read it carefully. By using the App you agree to the practices described here.

1. Information We Collect

We collect the following categories of information:

• Account Information: When you sign in with Google we receive your name, email address, and profile photo from your Google account.
• Profile Data: Information you voluntarily provide such as your cell group, bio, and preferences saved inside the App.
• Usage Data: Pages visited, sermons played, events viewed, questions asked, and other in-app interactions used to personalise your experience.
• Device & Technical Data: Device model, operating system version, unique device identifiers, IP address, and crash/diagnostic logs.
• Push Notification Token: A Firebase Cloud Messaging (FCM) token used solely to deliver push notifications to your device.
• Payment Information: When you give a donation we collect your name, email, and phone number for payment processing. Full card or mobile-money details are handled exclusively by PesaPal and are never stored on our servers.
• Photos & Media: Only when you explicitly upload an image (e.g. to a cell-group discussion). We do not access your camera or gallery without your permission.
• Location Data: We do not collect precise or background location data.

2. How We Use Your Information

• To create and maintain your account.
• To personalise content — sermons, devotionals, events, and cell-group updates.
• To send push notifications about fellowship events, announcements, and activity in your cell group. You may opt out in your device notification settings at any time.
• To process donations securely through our payment partner, PesaPal.
• To maintain engagement statistics (attendance, giving history, leaderboard) visible only to you on your profile.
• To improve the App through aggregated, anonymised analytics.
• To comply with legal obligations.

3. Third-Party Services

The App integrates the following third-party services, each governed by their own privacy policy:

• Google Sign-In / Firebase Auth — authentication. Google Privacy Policy
• Firebase Cloud Messaging (FCM) — push notifications. Firebase Privacy
• Google Fonts — typography loaded at build time; no runtime data sent to Google.
• PesaPal — payment processing for donations. PesaPal Privacy Policy
• Agora RTC — real-time video for online fellowship meetings. Agora Privacy Policy
• Cloudflare R2 — cloud storage for sermon audio and media files.
• YouTube — some sermon content may be embedded via the YouTube player. Google Privacy Policy

We do not sell your personal information to any third party.

4. How We Share Your Information

We do not share your personal information with third parties except:

• With service providers listed in Section 3 strictly to operate the App.
• When required by law or in response to valid legal process.
• To protect the rights, property, or safety of NDU CU, its members, or the public.
• With your explicit consent.

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. You may request deletion of your account and associated data at any time by contacting us (see Section 10). Anonymised aggregate statistics may be retained indefinitely.

6. Children's Privacy

The NDU CU App is intended for university students and adults aged 18 and above. We do not knowingly collect personal information from children under the age of 13. If we become aware that we have inadvertently collected data from a child under 13, we will delete it promptly. If you believe a child under 13 has provided us with personal information, please contact us immediately.

7. Permissions Requested

• Internet — required to connect to our servers and third-party services.
• Camera / Photo Library — only requested when you choose to upload a photo to a cell-group discussion or update your profile picture.
• Microphone — only when you join a live video meeting (Agora RTC).
• Notifications — to receive fellowship announcements and event reminders. You can revoke this permission in your device settings at any time.
• Storage (Android) — to save media files you choose to download from Memory Corner.

8. Data Security

We implement industry-standard measures to protect your data including HTTPS/TLS encryption for all data in transit, hashed credentials, and restricted server access. No method of electronic transmission or storage is 100% secure; we cannot guarantee absolute security but are committed to protecting your information.

9. Your Rights

Depending on your jurisdiction you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your account and personal data.
• Object to or restrict certain processing.
• Data portability — receive a copy of your data in a structured format.

To exercise any of these rights, contact us using the details in Section 10.

10. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:

• Organisation: NDU Christian Union
• Email: nduchristianunion@gmail.com
• Website: https://nduchristianunion.site

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page with an updated Effective Date and, where appropriate, via an in-app notification. Your continued use of the App after changes are posted constitutes your acceptance of the revised policy.

12. Governing Law

This Privacy Policy is governed by the laws of the Republic of Uganda. Any disputes shall be subject to the exclusive jurisdiction of the courts of Uganda.