English · Bahasa Indonesia

Privacy Policy

CredoGo · Effective 23 October 2026 · Last updated 23 October 2026

This policy explains what the CredoGo app (the "App") collects, how we use it, who can see it, and how you can delete it. CredoGo is a community app for Catholic parishes, connecting the Diocese, Parish, Parish District and Basic Ecclesial Community (Lingkungan).

1. Who we are

The App is operated by CredoGo. You can contact us at your.assistant@credogo.id.

2. Information we collect

• Account information: your name, email address, and email verification status. Your password is handled by Firebase Authentication; we never see it. If you sign in with Google, we receive the name, email and profile photo on that Google account.
• Profile information you provide: phone number, address, date of birth, gender, profession, profile photo, preferred language, and your parish and community affiliation.
• Content you create: feed posts, prayer requests, comments, reactions, events, event payment proofs, community details, and chat messages and attachments (images, documents, and shared locations).
• Location: only when you choose to share a location in chat or pick an address for an event. The App asks for your permission first and uses your device's GPS for that action.
• Activity and status: notifications, your block list, message reports you submit, and — only if you turn on read receipts — your online status, last-seen time and read receipts.
• Technical data: crash reports and diagnostics (Firebase Crashlytics), app integrity checks (Firebase App Check), and the device and app information needed to run the App.

3. How we use your information

• To create and run your account and the community features of the App.
• To show your content to the right audience: Global, your Parish, or your Community.
• To verify members and assign administrator roles.
• To send notifications about your posts, events, chats and community activity.
• To moderate content and messages, and to handle reports.
• To process event registrations and payment confirmations.
• To keep the App secure, diagnose crashes and fix bugs.

We do not sell your personal information, and we do not use it for advertising.

4. Who can see your information

Other members can see your name, profile photo, role, status, gender, the names of your diocese, parish, district and community, and the content you post, comment on, or join. They cannot see your phone number, address, date of birth, profession or email address.

Administrators can see more, limited to their role. Administrators for your parish or community can view your full profile, verify your membership, and review content and reported messages within that scope. Super administrators can do this across the App.

Service providers process data on our behalf:

• Google Firebase (Authentication, Cloud Firestore, Cloud Storage, Cloud Functions, App Check and Crashlytics), which stores and processes the App's data.
• Google Sign-In, if you choose to sign in with Google.
• Google Maps, for displaying maps and searching addresses.
• OneSignal, for sending push notifications.

We may disclose information if the law requires it.

5. Where your information is stored

Your information is stored on Google Cloud servers, which may be located outside Indonesia.

6. How long we keep it, and how to delete it

We keep your information while your account is active. You can delete your account at any time in the App: open Profile and choose Hapus akun (Delete account). When you delete your account, we:

• Delete your sign-in account.
• Remove your profile details, including your email, phone number, address, date of birth, gender, and profile photo.
• Delete your notifications, online status and block list.
• Anonymize your posts, comments and chat messages so they no longer identify you. Chat message text and attachments are removed.

Copies of data may remain in Google's backup systems for a limited period after deletion.

7. Your choices

• View and correct your profile in the App.
• Turn read receipts and online status on or off.
• Decide, each time, whether to share your location.
• Delete your account, as described above.

8. Security

Data is sent over encrypted connections (HTTPS/TLS). Access to data is controlled by security rules that enforce each user's role and scope, and sensitive operations run on the server. No system is completely secure, so please keep your password private.

9. Children

CredoGo is not directed at children under 13. If you believe a child under 13 has given us personal information, contact us and we will delete it.

10. Changes to this policy

If we change this policy, we will update the date at the top of this page. Significant changes will also be shown in the App.