ChurchFlow
Delete your account
The short version
- Email developer@usewired.com with the subject Delete my ChurchFlow account.
- You do not need the app installed, and there is no charge.
- We acknowledge within 5 business days and complete within 30 days.
- Uninstalling the app deletes nothing. The records live on the server, not on your phone.
How to ask
Send one email to developer@usewired.com with the subject Delete my ChurchFlow account, and tell us the name of your church and the email address you use to sign in.
We may need to confirm who you are before acting, so that we do not delete somebody else's record on your say-so. We will ask for the least we can.
Who decides
Your church decides, not us. ChurchFlow is used by your church to keep its own records, so the church is the controller of that data and we process it on the church's instructions. This is set out in section 02 of the privacy policy.
So when you ask us, we pass the request to your church, act on its instruction, and tell you what was decided. If the church does not respond within 14 days we will tell you that, so you are never left without an answer.
You can also ask your church directly. A church administrator can remove a member record from ChurchFlow without involving us at all, and that is usually faster.
What is deleted
When a deletion is carried out, these are removed from live systems:
- Your member record: name, email address, phone number, address.
- Your profile photograph, if you set one.
- Your attendance history.
- Your prayer requests.
- Your notification preferences and any registered device token.
- Your volunteer assignments and event registrations.
What is kept, and why
Two things survive a deletion request, and we would rather say so plainly than have you discover it later.
| What | Why |
|---|---|
| Giving and donation records | A donation is the church's financial record and in many cases a tax record, so the church is required to keep it. Where the law allows, the record can be detached from your identity instead of destroyed, and that is what we do when the church asks. Card details are never ours to delete: they are held by Stripe, not by us. |
| Backups | A record removed from live systems stays in backups until the last backup containing it expires, which is up to 90 days. That is our host's retention schedule rather than a period we chose. Backups are not used to answer anything; they exist only to restore the service after a failure. |
How long it takes
- We acknowledge your request within 5 business days.
- We complete it within 30 days, which is also the period PIPEDA allows. If we need longer, PIPEDA lets us extend once by up to a further 30 days, and we will tell you before the first 30 are up rather than after.
- Backups then expire on their own schedule, as described above.
If you are not satisfied with how we handled it, tell us first and we will try to put it right. If you remain unsatisfied you can complain to the Office of the Privacy Commissioner of Canada.