Privacy

Privacy policy.

Effective May 21, 2026

Avivamiento Internacional (the "church", "we", "us"), based in Mexico City, is the data controller for personal information collected through our website avivamientointernacional.org, our mobile app, and our authenticated web platform app.avivamientointernacional.org. This policy explains what we collect, why, with whom we share it, and your rights. We comply with Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP).

1. What we collect

Only what we need to deliver the app and pastoral care:

  • Account: name, email, phone number, optional profile photo. Authentication is self-hosted: your password is stored encrypted (bcrypt) in our database, with Google sign-in (OAuth) as an option.
  • Church profile: campus you attend, small group (célula), role within the church (member, leader, pastoral team), communication preferences.
  • Spiritual activity: prayer requests you submit, events you RSVP to, connection cards you fill out on your first visit.
  • Donations: payments are processed by Stripe; we only receive the amount, date, last 4 digits of the card, and an internal identifier. We never store your full card number or CVV.
  • Push notifications: an anonymous device token (Apple Push or Firebase) used to deliver live-service alerts, event reminders and the daily devotional. You can disable these from your phone settings at any time.
  • Technical data: IP address, device type, OS version, and error logs — retained for a limited time for debugging.

2. How we use it

  • Authenticate you and keep your session active.
  • Show you relevant content: sermons, events, daily devotional, small groups near your campus.
  • Process your donations and issue receipts.
  • Send pastoral communication (email, push, occasionally WhatsApp if you provided your number). You can always opt out.
  • Coordinate volunteer service, team rotations, and internal leadership events.
  • Improve the platform, detect errors, prevent abuse.

We do not use your data to train AI models, we do not sell it, and we do not share it with advertisers.

3. Who we share it with

We share data only with operational service providers, bound by contracts requiring the same level of confidentiality. These providers process data in US data centers:

  • Google — Google sign-in (OAuth), if you choose it. Primary authentication is self-hosted (we do not use a third-party identity provider).
  • Stripe — payment and subscription processing.
  • Resend — transactional and pastoral email delivery.
  • Vercel — platform hosting and image storage (Vercel Blob).
  • Neon — database.
  • Expo / Apple / Google — push notification delivery to your mobile device.
  • Google (YouTube) — embedded sermon and live-stream playback. YouTube has its own privacy policy.

We do not transfer your data to third parties for commercial purposes. If a competent authority requires it by court order, we will notify you when legally possible.

4. Your rights (ARCO)

You have the right, at any time, to:

  • Access the personal data we hold about you.
  • Rectify any inaccurate or incomplete data.
  • Cancel your account and request deletion (subject to legal retention obligations, e.g. donation tax receipts we must keep for 5 years).
  • Object to processing for secondary purposes such as pastoral communication by email or push.

To exercise any of these rights, email us at hola@avivamientointernacional.org from the email you registered with, stating which right you wish to exercise. We respond within 20 business days.

5. Cookies and similar technologies

We use a minimal set of strictly necessary cookies: our session cookie to keep you signed in, and a cookie to remember your language preference. We do not use advertising or third-party tracking cookies.

6. Minors

Our digital platforms are designed for users 13 and older. If you are under 18, we ask that a parent or guardian review this policy with you. We do not knowingly collect data from children under 13; if we identify such an account, we delete it.

7. Retention and security

We keep your data while your account is active. If you close your account, we delete identifiable personal data within 30 days, except for financial records the law requires us to keep. We use encryption in transit (HTTPS), encryption at rest in the database, and restrict data access to authorized pastoral staff.

8. Changes to this policy

We may update this policy when our practices or applicable law change. We will publish any changes on this page and update the effective date at the top. Material changes will additionally be communicated by email.

9. Contact

For any question about this policy or about how we handle your personal data, email us at hola@avivamientointernacional.org.