Privacy Policy – OYC Connect

Last updated: 18 February 2026

This Privacy Policy explains how OYC Connect (“we”, “our”, “us”) collects, uses, and protects information in the OYC Connect mobile application and related services provided by Our Youth Center (OYC) in Melbourne, Australia.

By using the OYC Connect app, you agree to the collection and use of information in accordance with this Policy.

1. Information We Collect

We collect the following types of information:

  • Account Information
    When you create an account or log in, we collect:
    • Full name
    • Email address
    • Phone number
    • Password (stored securely via our authentication provider)
  • Profile & Preferences
    When you update your profile or settings, we may store:
    • Updated name and contact details
    • Notification preferences (e.g., enabling or disabling push notifications)
  • Donation Information
    When you make a donation, we collect:
    • Donation amount and currency
    • Non-sensitive payment metadata (e.g., payment intent ID)
    • Association of the donation with your user account

    We do not store or see your full card number, CVV, or PIN. All card details are handled by our payment processor, Stripe.

  • Usage Information
    We may collect basic usage information such as:
    • Pages and sections you interact with (e.g., Home, Events, Donations)
    • Approximate timestamps of actions (e.g., when you donate or update your profile)
  • Device & Notification Identifiers
    To send optional push notifications, we use:
    • A push notification identifier or token provided by OneSignal
    • Basic device information (e.g., device type, OS version) provided by the push SDK

2. How We Use Your Information

We use the information we collect for the following purposes:

  • Account management and authentication – to create and manage your account, allow you to log in securely, and change your password.
  • Providing app features – to show you prayer times, events, announcements, classes, and your profile information.
  • Processing donations – to process your donations securely via Stripe, keep internal donation records, and allow designated admins to view aggregated donation history.
  • Notifications – to send you optional push notifications about important updates (e.g., community announcements, events, and other center-related messages) when you have enabled notifications.
  • Security & abuse prevention – to protect the app, investigate suspicious activity, and maintain the security of our systems.
  • Analytics & improvement – to understand how the app is used so we can improve features, reliability, and user experience.

3. Legal Basis (for users in the EU/EEA/UK)

Where applicable, we process your information based on one or more of the following legal bases:

  • Performance of a contract – to provide you with the app’s core features (account, profile, access to events/classes, donations).
  • Legitimate interests – to secure our services, understand app usage, and improve features, provided these interests are not overridden by your data protection rights.
  • Consent – when you enable optional features such as push notifications; you can withdraw this consent at any time in the app settings or device settings.

4. Sharing Your Information

We do not sell or rent your personal data. We share information only with trusted service providers as necessary to operate the app:

  • Supabase
    We use Supabase as our backend for authentication, database, and secure storage. Your account, profile, and app data are stored on Supabase servers.
  • Stripe
    We use Stripe to process donations. Stripe receives your payment information directly. We receive limited payment metadata (e.g., payment intent ID, amount, status) for our internal records.
  • OneSignal
    We use OneSignal to deliver push notifications. OneSignal receives device and notification tokens necessary to send messages to your device.
  • Infrastructure providers
    Our backend and hosting providers may process data solely to operate and secure the service.
  • Legal requirements
    We may disclose information if required by law, regulation, or legal process, or to protect our rights, users, or the public.

5. Data Retention

We retain your personal information for as long as reasonably necessary to:

  • Provide the OYC Connect services to you
  • Maintain accurate records of donations and key activities
  • Comply with legal, tax, and accounting obligations
  • Resolve disputes and enforce our agreements

When data is no longer required, we will delete it or anonymize it where possible.

6. Your Choices & Rights

You have control over your information in the following ways:

  • Access & update – You can view and update your profile information (e.g., name) within the app.
  • Notifications – You can enable or disable push notifications from within the app’s profile settings and/or your device settings.
  • Account deletion – You may request deletion of your account and associated personal data by contacting us (see contact section below). Some donation records may be retained where required by law.

Depending on your jurisdiction, you may also have rights to:

  • Request a copy of the personal data we hold about you
  • Request correction of inaccurate data
  • Object to certain processing, or request restriction of processing

To exercise any of these rights, please contact us using the details below.

7. Children’s Privacy

OYC Connect is primarily intended for use by adults and guardians. We do not knowingly collect personal information directly from children under the age required by local law without appropriate parental or guardian consent.

8. Data Security

We take reasonable technical and organizational measures to protect your data, including:

  • Using secure, modern authentication and encryption via our backend (Supabase)
  • Relying on reputable providers (Stripe, OneSignal) that implement strong security practices

However, no method of transmission or storage is 100% secure. You are responsible for keeping your account password confidential and for securing access to your devices.

9. International Transfers

Our service providers may process data on servers located outside your home country. Where required by law, we take steps to ensure that appropriate safeguards are in place when transferring your data.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. Your continued use of the app after any changes indicates your acceptance of the updated Policy.

11. Account Deletion

You can request deletion of your OYC Connect account and associated personal data at any time.

  • How to request deletion: Email us at ouryouthcenter1881@gmail.com from the email address you used to sign up, with the subject line “OYC Connect – Delete my account”.
  • What we delete: Your account and profile information (such as name, email, and phone number) and any data tied to your user profile.
  • What we may retain: Certain donation/payment records may be retained where required for legal, tax, accounting, or fraud-prevention purposes. These records do not include full card details (Stripe processes card details directly).
  • Timeline: We aim to complete deletion within a reasonable time after verifying the request (typically within 30 days).

12. Contact Us

If you have any questions about this Privacy Policy or how your data is handled, please contact us:

  • Email: ouryouthcenter1881@gmail.com
  • Address: Our Youth Center, 1881 Mickleham Rd, Mickleham VIC 3064, Australia

This Privacy Policy is provided for information purposes and does not constitute legal advice.