Privacy
GivApp Privacy Policy
Last updated: November 2, 2026
GivApp, LLC (“GivApp,” “we,” “us”) makes the GivApp apps for iPhone, Android and the web, and runs givapp.com. Churches and nonprofits use GivApp to receive gifts and run church life. Members and donors use it to give, stay connected and grow in faith.
This policy explains what we collect, why we collect it, who helps us process it, and the choices you have.
The short version
- We never sell or rent your personal information.
- No ads, no tracking. GivApp shows no ads. We don’t track you across other companies’ apps or websites, and we don’t share your information with advertisers or data brokers.
- We use your information only to make GivApp work for you and your church.
- You can delete your account in the app at any time.
What we collect and why
We collect only what GivApp needs to work: to process your gifts, connect you with your church, and run the features you use. We never use it for ads or to build a profile of you for anyone else.
Account and contact
- Your name, email address, password, phone number and profile photo.
- Mailing and household addresses that your church’s staff enter so they can send you giving statements. You can also give your address on a church form.
- Email addresses of people you invite to GivApp, used only to send the invitation.
Giving
- Your gifts, recurring gifts and receipts, and the churches and nonprofits you give to.
- Card and Apple Pay payments are processed by Stripe. You enter card details in Stripe’s own form, so GivApp never sees or stores your full card number. We keep only the card brand, last four digits and expiration date so you can recognize your card.
- Stripe’s payment software also collects device information, such as a device identifier, to prevent fraud.
Spare Change
- If you turn on Spare Change, you link a bank account through Plaid. You sign in to your bank on Plaid’s screen, so GivApp never sees your bank username or password.
- We receive your bank’s name, the accounts you choose, and a secure key from Plaid. We read your purchases only to calculate round-ups, and we don’t store them.
Church life
- Posts, comments, prayer requests, chat and direct messages, photos and files you share, event RSVPs, volunteer schedules, form answers, sermon notes and your prayer journal.
- Your prayer journal is private. No one else can see it in GivApp: not your church, not other members, and not GivApp’s support staff.
- Prayer requests you post to your church’s prayer wall can be seen by people connected to your church, including people who have given to it. Requests posted in a group can be seen by that group’s members. Your church’s administrators can see and moderate both.
This information can reveal your religious beliefs. Your church membership, prayer requests and journal can show your faith and personal circumstances. We use them only to provide these features to you and your church.
Bible reading
- Bible text comes from YouVersion. The app sends YouVersion the passages you open and a random install identifier, never your name, email or account. We clear the identifier when you sign out and make a new one the next time you sign in.
- We keep your reading position and history so you can pick up where you left off.
Notifications
- Push notifications are optional. If you allow them, we store your device’s notification token with your account. You choose which kinds you get in Profile > Notifications and can turn them all off in your device’s Settings. When you sign out, we unlink the device from your account.
- Email. We send receipts, password resets, digests, reminders and invitations. You can turn most kinds of email off in Profile > Notifications.
- Text messages. You get texts only if you turn them on for a church. We keep a log of each text: your number and the start of the message.
AI tools for church staff
- Church staff can use AI from Anthropic to draft sermon guides, discussion questions, prayer prompts and Bible pre-reading questions. They can also use it for worship planning: song suggestions, chord charts and service summaries.
- These tools send church content only: a sermon manuscript, its title, speaker and scripture, and song and service details. They never send members’ personal information, prayer requests, journals or sermon notes.
- Some tools run on their own once a church uses them. For example, prayer prompts are drafted when a sermon is published.
- Under Anthropic’s commercial terms, Anthropic doesn’t use this content to train its models.
- Nothing members do in the app is sent to AI.
Feedback you send us
- When you send feedback from the web app, it can include a screenshot and technical details: the page, your browser and device, and recent errors.
- We remove emails, phone numbers and card numbers from those details. We don’t take screenshots of pages that show giving, member, check-in, journal or prayer information unless you choose to.
- GivApp staff get an alert with your name and email so we can follow up.
Usage and technical information
- We keep our own records of how GivApp is used, such as when you open your digest and which church forms are viewed. Our servers also keep logs that include IP addresses.
- We use these to keep GivApp working and secure. We don’t share them with advertisers.
What we don’t collect
- Your location or your contacts.
- Photos you don’t choose to share. The iPhone app uses Apple’s photo picker, so it can’t browse your photo library.
- Advertising identifiers.
Children
Minimum age
- You must be at least 13 to create a GivApp account, and the app is rated 13+.
- We don’t knowingly collect personal information from children under 13 through accounts. If we learn that a child under 13 has an account, we’ll delete it. Parents can tell us at hello@givapp.com.
Kids check-in
- Children don’t use GivApp to check in. Church staff enter a child’s information, or a parent fills out a church form.
- That information can include the child’s name, birth date, photo, household, room or class, allergies and notes. Notes can include medical information.
- It also includes the people allowed to pick the child up (name, phone and relationship) and the pickup security code for each check-in.
Who sees children’s information
- Church staff and volunteers the church authorizes for check-in or for its member records.
- Staffed check-in stations show allergies and pickup names. Classroom displays show a child’s first name, last initial and an allergy summary.
How parents stay in control
- Your church holds your child’s record. Ask the church to review, correct or delete it.
- If you can’t sort it out with your church, email hello@givapp.com and we’ll help.
- Deleting your own GivApp account doesn’t delete your church’s records about your children. Ask the church to remove them.
Who helps us run GivApp
These companies process information for us so GivApp can work. They may use it only to provide their service to GivApp, except where noted.
| Company | What they do for GivApp | What they receive |
|---|---|---|
| Stripe | Card and Apple Pay payments, payouts to churches, church billing | Payment details you enter, gift amounts, device information to prevent fraud |
| Plaid | Bank linking for Spare Change | Your bank sign-in (on Plaid’s screen), account and purchase information |
| YouVersion | Bible text | The passages you open and a random install identifier |
| Anthropic | AI drafting tools for church staff | Sermon and worship-planning content, never member information |
| Mailgun | Email delivery | Your email address and the email’s content |
| Twilio | Text messages, only if you turn them on | Your phone number and the message |
| Apple Push Notification service | iPhone and iPad notifications | Your device’s notification token and the notification text |
| Google Firebase Cloud Messaging | Android notifications | Your device’s notification token and the notification text |
| Browser push services | Web notifications | Your browser’s notification address and the notification text |
| MongoDB Atlas | Our database and stored files | The information stored in GivApp |
| Amazon Web Services | Data centers for our database, and file storage | The information stored in GivApp |
| Heroku | Hosting for our servers | Information as it passes through our servers |
| SolarWinds Papertrail | Server logs | Technical logs, which can include IP addresses |
| Slack | Alerts to GivApp staff about feedback | Your name, email and a summary of your feedback |
| CCLI SongSelect | Song lyrics and chord charts, for churches that connect it | Song searches, never member information |
| mempool.space | Balance lookups for churches that list a bitcoin address | The church’s public bitcoin address |
Stripe and Plaid also handle your information under their own policies for payments, bank linking and fraud prevention. See Stripe’s privacy policy and Plaid’s End User Privacy Policy.
Links and other sites
When you share a link in a post or chat, our server visits that page to show a preview. Links you open and videos you play take you to other sites, and their own privacy policies apply.
When else we share information
- When the law requires it, for example a subpoena or court order.
- To protect people from harm, or to stop fraud or abuse.
- If GivApp is sold or merged with another company. We’ll tell you before your information moves to a new owner, and this policy will keep protecting it.
What your church sees
A church’s administrators see their own members’ and donors’ records for that church, and nothing from other churches.
- Records. Your church’s administrators, and the staff and volunteers they authorize, can see names, contact details, addresses, giving history, event RSVPs, volunteer schedules, form answers and check-in records. They can export these to spreadsheets.
- Staff notes. Church staff can keep notes about members and donors that you don’t see.
- Forms. Churches see the answers you submit on their forms, along with the IP address recorded with each submission.
- What they can’t see. Church staff can’t read your direct messages, group chats they aren’t part of, or your prayer journal.
- Several campuses. A church with several campuses on one GivApp account can see records across those campuses.
- Member directory. If your church uses the directory, other members can see your name and photo. Records your church creates also show email, phone and address unless you change that. You can change what’s shown, or hide yourself, in your profile’s privacy settings for each church. Members can email you through the directory without seeing your address.
- Linking your records. When you create an account and confirm your email, we link it to records your church already has with that email address.
- Your church’s own decisions. Each church decides how it uses the records it keeps about you. Ask your church about those records.
- GivApp staff. A small number of GivApp staff can see church and member records across all churches to support churches and run GivApp. They can’t read direct messages, group chats or prayer journals in the app.
Your choices
- See and update your information. Edit your name, phone number and photo in your profile. Ask your church to update the address and other details it keeps.
- Notifications. Choose push, email and text notifications by type and by church in Profile > Notifications. Turn push off entirely in your device’s Settings.
- Directory. Choose what other members see, for each church, in your profile’s privacy settings.
- Cards and Spare Change. Remove a saved card or turn off Spare Change at any time.
- Your rights. Depending on your state, you may have the right to ask what information we hold about you, correct it or delete it. Email hello@givapp.com and we’ll respond.
Deleting your account
How to delete it
- On iPhone, tap your name on the Hub tab to open Profile, then choose Delete account at the bottom.
- On iPad, choose Profile in the sidebar, then Delete account.
- You’ll confirm with your password. If you’re the only administrator of a church or you lead a group, the app first asks you to hand that role to someone else.
- You can also email hello@givapp.com from the address on your account and we’ll delete it for you.
Deletion is permanent and happens right away.
What we delete
- Your profile and photo, saved cards and your Stripe customer record, and bank links (we disconnect them at Plaid).
- Your prayer requests, prayer journal, sermon notes, favorites, Bible reading history and notifications.
- Your upcoming event RSVPs and volunteer assignments.
What stops
- Recurring gifts and Spare Change round-ups. No further charges are made.
What stays, showing “Deleted user”
- Messages, posts and comments you shared with others, including comments on other people’s prayer requests.
What your church keeps
- Records of your past gifts, including your name and email, for its tax and financial records. Receipts already sent to you aren’t affected.
- Its own record of you and your household, form answers you submitted, and past check-in, RSVP and volunteer records. Ask your church if you want these removed.
To keep your own copy of your giving history, export it from the app before you delete your account.
Security
- Information is encrypted as it travels between your device and GivApp, and our database provider encrypts the data it stores.
- Only GivApp staff who need access to run GivApp have it. A few engineers can reach the database directly to keep GivApp running and fix problems. Messages and journal entries are not end-to-end encrypted.
- No system is perfectly secure. If a breach affects your personal information, we’ll notify you as the law requires.
How long we keep information
- We keep your information while your account is open. When you delete your account, we delete it right away, as described above.
- Records your church keeps follow the church’s own practices.
- Copies in our providers’ backups and logs are removed on their normal schedules.
United States only
GivApp is offered only in the United States, and we store your information in the United States.
Cookies on our website
The givapp.com website and the GivApp web app use only the cookies and browser storage they need to work, such as keeping you signed in. Stripe and Plaid may set their own cookies on their payment and bank-linking screens to prevent fraud. We don’t use advertising or analytics cookies. Because we don’t track you across sites, every visit is treated the same whether or not your browser sends a Do Not Track signal.
Older versions of our apps
GivApp apps released before GivApp 3.0 included Google Firebase (analytics and crash reports) and Intercom (support chat). GivApp 3.0 removes them. Please update to the latest version.
Changes to this policy
We’ll post any changes on this page and update the date at the top. If a change affects how we use information we already have, we’ll tell you in the app or by email before it takes effect.