You can delete your ChurchPlanner account and the personal data associated with it at any time. This page explains the two ways to request deletion and what happens to your data.

---

Option 1 — Delete from inside the app

If you can still sign in to ChurchPlanner on the web or the mobile app:

1. Sign in at www.churchplanner.ca or open the mobile app.
2. Open Profile → Privacy & Data.
3. Choose Delete My Account, type DELETE to confirm, and enter your password if prompted.

Your account is removed immediately and you are signed out.

---

Option 2 — Request deletion by email

If you have uninstalled the app or can no longer sign in, email us from the address tied to your account at [email protected] with the subject line "Account deletion request". We will verify your identity, delete your account, and confirm by reply within 30 days (usually within a few business days).

---

What gets deleted

When you delete your account we remove:

• Your sign-in credentials (email, password hash, linked Google or Apple ID).
• Your profile information (name, phone number, notification preferences, profile picture).
• Two-factor authentication setup, recovery codes, and active sessions.
• External login links you set up (Google, etc.).
• Personal notification subscriptions (birthday digest, position alerts).

What may be kept and why

Some information remains in the system after your account is deleted:

• Contact records owned by your church. If your church added you to its membership directory, that contact record belongs to the church (the data controller) and is only deleted if the church requests it. Email [email protected] if you need this removed as well — we will work with the church administrator.
• Records you generated as part of church activity. Attendance entries, schedule assignments, and messages sent through the system are part of the church's records and remain visible to authorized church staff.
• Limited operational logs and backups. Server logs (typically 90 days) and encrypted database backups (typically 30 days) may contain your identifiers until they roll off on their normal schedule.
• Billing records for paid subscriptions. Invoices and payment records held by our payment processor (Stripe) are retained for accounting and tax purposes as required by Canadian law (typically 7 years).

---

Questions

For deletion requests, identity verification, or any related privacy questions, contact [email protected]. See our Privacy Policy for the full description of how we handle personal information.