1. Who We Are

My World is operated by Evangel Ltd. ("we", "us", "our"). We are responsible for the personal data you provide when using the My World platform, including its web application and associated services.

If you have any questions about this policy or how we handle your data, contact us at support@evangel.solutions.

2. Data We Collect

Account and identity data

When you create an account we collect:

• First name and last name
• Email address
• Password (stored as a secure hash by Firebase Authentication — we never see your plaintext password)
• Display name and user handle
• Profile photo URL (if you add one)

Community and membership data

When you join or interact with a community we record:

• Which communities you are a member of, your role, and when you joined
• Which groups (e.g. cell groups) you belong to and your role within them
• Attendance records for meetings and events you attend
• RSVPs and check-in history
• Member QR code tokens used for event check-in

Event participation data

When you participate in a live or recorded event:

• Whether you joined live or watched a replay, and the times you started and stopped watching
• An attendance code linked to your account
• Your device type and operating system (e.g. "mobile — Android") — collected automatically
• Your approximate location (latitude, longitude, altitude, accuracy) — only if you grant permission when prompted by your browser

Content you create

• Messages sent in community channels or event chat
• Announcements, reactions, and comments
• Group posts and gallery photos you upload
• Library ratings, reviews, and comments
• Cell group meeting reports and attendance notes

Payment data

If you make a donation or purchase a subscription, your payment is processed by Stripe. We store a record of the transaction (amount, currency, Stripe payment intent ID, and receipt URL) but we do not store your card details — those remain with Stripe. Guest payers who do not have an account may have their email address stored alongside their payment record, visible only to community administrators.

Usage and analytics data

• Page views and session data collected by Firebase Analytics (Google)
• Core Web Vitals performance metrics collected by Vercel Speed Insights
• Video interaction data (play, pause, completion) collected by Vimeo when you watch hosted videos

3. How We Use Your Data

• To create and manage your account
• To facilitate your membership in communities and groups
• To record and display event attendance to community administrators
• To enable messaging, announcements, and community features
• To process donations and subscription payments
• To generate attendance insights and reports for community leaders
• To send transactional communications (e.g. password reset emails via Firebase)
• To improve the performance and reliability of the platform

4. Legal Basis for Processing (UK/EU Users)

We process your personal data on the following legal bases:

• Contract — to provide the services you signed up for
• Legitimate interests — to operate, secure, and improve the platform, and to support community administrators
• Consent — for optional geolocation data collected during event attendance (you can deny the browser permission request)
• Legal obligation — where required by law

5. Data Sharing and Third Parties

We do not sell your personal data. We share data with the following third-party processors:

Google Firebase

We use Firebase Authentication, Firestore (database), and Firebase Storage for your account, community data, and uploaded files. Firebase Analytics collects usage data. Google's privacy policy applies: firebase.google.com/support/privacy.

Stripe

All payments are processed by Stripe, Inc. Stripe receives your email address, payment amount, and subscription details. Stripe's privacy policy applies: stripe.com/privacy.

Vimeo

Videos embedded in the platform are hosted by Vimeo, LLC. Vimeo may collect your IP address and video interaction data when you watch a video. Vimeo's privacy policy applies: vimeo.com/privacy.

Vercel

The web application is hosted on Vercel. Vercel collects performance metrics and request logs. Vercel's privacy policy applies: vercel.com/legal/privacy-policy.

Community administrators

Community administrators and group leaders can see your name, profile photo, membership status, attendance records, and any content you post within their community. They cannot see your password, full payment card details, or data from other communities.

6. Geolocation Data

When you submit an attendance form at an event, your browser may ask for permission to share your location. This is optional — you can deny the request. If you grant permission, your approximate coordinates (latitude, longitude, altitude, and accuracy radius) are stored against your attendance record and are visible to community administrators. You can revoke this permission at any time in your browser settings; this does not delete previously stored location data.

7. Data Retention

We retain your account data for as long as your account is active. Community membership records, meeting reports, and attendance history are retained for the duration of the community's operation. Messages that are deleted are soft-deleted (marked as deleted) and may be retained for a period before permanent removal.

Payment records are retained for up to seven years as required for financial record-keeping.

8. Your Rights

Depending on your location you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data (subject to legal retention requirements)
• Object to or restrict certain types of processing
• Data portability — receive your data in a structured, machine-readable format
• Withdraw consent for optional processing (e.g. geolocation) at any time

To exercise any of these rights, contact us at support@evangel.solutions. We will respond within 30 days.

9. Cookies

We use cookies and browser storage to keep you signed in and to support core platform functionality. Firebase Authentication stores an authentication token in your browser. Firebase Analytics may set analytics cookies. You can manage cookies through your browser settings; disabling them may affect your ability to sign in.

10. Children's Privacy

My World is not intended for children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data without appropriate consent, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this privacy policy from time to time. Material changes will be communicated via the platform or by email. Continued use of the platform after changes are published constitutes acceptance of the updated policy.