Legal document
This document sets out exactly what data the platform collects, why, how long it keeps it, who can access it, and what you can require.
Version 1.2 · In force since 29 October 2026
The data controller is La Voix de la Puissance Divine, TO BE COMPLETED (legal form, registration number and registered address to be specified).
For any question about your data, write to contact@lavoixdelapuissancedivine.com.
Data protection officer: TO BE COMPLETED (to be appointed if the applicable regulation requires one).
IDENTITY AND ACCOUNT — full name, email address, password (stored encrypted, never readable), profile picture and banner if you upload one, chosen language, time zone.
PROFILE, ALWAYS OPTIONAL — biography, occupation, home town, country of origin, date of birth, gender, languages spoken, spiritual gifts, interests, phone and WhatsApp number. You choose the visibility of each of these fields.
LOCATION — country and city. Either you declare them, or they are inferred APPROXIMATELY from your network address at sign-in. No precise position is collected and no movement tracking takes place.
USAGE — content viewed, reactions, comments, saved items, event participation, last visit date.
WHO VIEWED, WHO REACTED, WHO COMMENTED — when you are signed in and open a piece of content (post, signal, spark, service, teaching, course, prayer request, testimony…), the platform records that YOU viewed it, and when. Your reactions and comments are already linked to your name. These named lists can be read by a restricted circle, described in section 6. A visitor without an account is never recorded by name: no persistent identifier and no tracking cookie is set for this purpose.
⚠️ THE AUTHOR SEES WHO VIEWED WHAT THEY PUBLISH — when you open a post, a signal or a spark, the person who published it can see that you viewed it: your name, your photo and the time you viewed it appear in the "seen by" list of THEIR content, as on common messaging apps and social networks. This applies to those three kinds only. It is NEVER the case for a prayer request or a testimony: their author does not know who read them (see section 5).
⚠️ PRAYER REQUESTS AND TESTIMONIES — the text you write, the category chosen and the visibility selected (private, anonymous or public). Such content may reveal your health, family situation or religious beliefs: it is treated as sensitive data (see section 5).
⚠️ PASTORAL CONVERSATIONS AND MESSAGES — the content of your exchanges with the Reverend and the pastoral team, attachments, voice and video notes. Treated as sensitive data (see section 5).
APPOINTMENTS — subject, description, urgency, preferred date and time, meeting format, contact phone and email, country, city and time zone.
NOTIFICATIONS — your preferences, and your browser's technical subscription if you enable notifications outside the app.
TECHNICAL LOG — administrative actions are recorded with their author and date. The network address appears there and is readable only by the technical administrator.
BOOK ORDERS — the fact that an order exists, its amount and its status. Payment data is handled by the payment provider and never passes through our servers.
AI ASSISTANT — the text of your exchanges with the assistant, in order to keep its history and measure usage.
WE DO NOT COLLECT — your banking details, your precise GPS position, your contacts, your address book, or any data from another service. No advertising tracker is set, and no data is sold or rented.
RUNNING YOUR ACCOUNT and giving you access to the platform: necessary to perform the relationship you sought by creating an account.
SUPPORTING YOU SPIRITUALLY — prayer, pastoral exchanges, appointments: your consent, given each time you write a request or ask for an appointment. You may withdraw it by deleting the request.
KEEPING YOU INFORMED — publication notifications, appointment reminders: your consent, withdrawable at any time in your preferences.
SECURING the platform — security log, sign-in rate limiting: the ministry's legitimate interest in protecting accounts and content, and in being able to identify the author of an intrusion or abuse.
COMPLYING WITH THE LAW — retention of administration records.
No automated decision producing legal effects is taken about you. No advertising profiling is carried out.
ACCOUNT AND PROFILE — for as long as your account exists, then thirty days after closure (cooling-off period), after which they are erased or anonymised.
PRAYER REQUESTS AND TESTIMONIES — until you delete them. A deleted request goes to the bin for thirty days, then disappears permanently.
PASTORAL CONVERSATIONS — for as long as the conversation exists. You can clear it for yourself at any time.
APPOINTMENTS — three years after the appointment date, for pastoral follow-up.
SECURITY LOG — kept with no time limit, and nothing in it is erased. It records sign-ins (date, IP address, device, approximate country and city) and the actions carried out on the platform — never the content of your messages, notes or private prayers. Legal basis: the ministry's legitimate interest in ensuring the security and integrity of the platform, and in being able to trace, even long afterwards, the author of an intrusion or abuse (GDPR, Article 6(1)(f)). Only the platform's technical administrator can read it, and every opening of the log is itself recorded.
REMINDER LOG — ninety days.
NAMED VIEWS (who viewed which content) — twelve rolling months. Once a month, views older than twelve months are erased; only the NUMBER of views of each piece of content is kept, with no names. Your reactions and comments follow the lifetime of the content, or disappear as soon as you remove them.
AI ASSISTANT EXCHANGES — until you delete the conversation.
A prayer request or a pastoral conversation may reveal your most intimate matters: an illness, a bereavement, a marital difficulty, a debt, a fear. Such content therefore receives handling distinct from everything else.
WHO CAN READ THEM — a PRIVATE request is readable only by you and by the authorised pastoral team. An ANONYMOUS request appears on the prayer wall without your name: the platform never passes your identity to the display, including technically. A PUBLIC request appears with your name, because you chose so. A pastoral conversation is readable only by its participants — neither an administrator nor headquarters has access.
WHAT NEVER TRAVELS — the subject of an appointment and the content of a request appear in NO notification sent outside the application. A notification says a message exists; it does not say what it contains, precisely because it may appear on a locked screen that other eyes can see.
WHO READ A PRAYER OR A TESTIMONY — the list of people who opened a prayer request or read a testimony is reserved for the Reverend and the technical administrator, and for them ALONE: neither the pastoral team nor assembly leads can see it — nor THE AUTHOR of the request or testimony: in a small assembly, knowing who read one's prayer would weigh too heavily. This restriction is enforced by the database itself, not only by the screen.
WHAT REMAINS YOURS — you may change a request's visibility, delete it, or close a conversation, at any time and without having to justify yourself.
THE REVEREND AND THE PASTORAL TEAM — prayer requests addressed to them, appointments concerning them, conversations they take part in.
THE ADMINISTRATION — account management (name, email address, role, status). It has access NEITHER to pastoral conversations NOR to the content of private requests.
THE TECHNICAL ADMINISTRATOR — full technical access, necessary for maintenance, and logged.
THE "WHO VIEWED, WHO REACTED, WHO COMMENTED" LISTS — readable only by people the ministry has authorised BY NAME to consult them: for content of their own assembly only, except the Reverend and the technical administrator, who consult them for every assembly. No role grants this access by itself; every authorisation is recorded and can be withdrawn at any time. Every consultation of a list is written to the security log. Other members see only the numbers — with one exception: the author of a piece of content sees who viewed THEIR OWN posts, signals and sparks.
EXTENSION LEADS — only the data of their own space. They have access neither to the appointments nor to the pastoral notes of other spaces.
OUR PROVIDERS — database hosting and authentication (Supabase, servers in Germany), site hosting (Vercel), media delivery (Bunny, servers in Germany), the conversational assistant (Anthropic, United States, for processing your exchanges with the assistant only), book payments (PayPal), and delivery of out-of-app notifications (your browser's vendor). Each acts on our instructions and does not use your data for its own purposes.
⚠️ TRANSFERS OUTSIDE EUROPE — the conversational assistant and the payment service process data in the United States. Contractual framework: TO BE COMPLETED.
ACCESS — know what data we hold about you and obtain a copy.
RECTIFICATION — correct what is inaccurate. Most fields can be edited directly from your profile, without writing to us.
ERASURE — request deletion of your account and your data. This is triggered from your profile.
PORTABILITY — receive your data in a machine-readable format, to take elsewhere.
OBJECTION AND RESTRICTION — object to processing based on our legitimate interest, or ask for it to be frozen pending a check.
WITHDRAWAL OF CONSENT — at any time, without calling into question what was done before.
TO EXERCISE THESE RIGHTS — write to contact@lavoixdelapuissancedivine.com. We reply within thirty days. If our answer does not satisfy you, you may refer the matter to the competent data protection authority: TO BE COMPLETED.
Exchanges with the platform are encrypted in transit by the HTTPS protocol. Passwords are stored in encrypted form and are readable by no one, including us.
Access to data is partitioned row by row at the database level: it is not the interface that decides what you may read, it is the database itself, and it refuses what you are not entitled to even if the interface were bypassed.
Sensitive administrative actions require the password to be entered again and are logged.
No system is infallible. In the event of a data breach likely to create a risk to your rights, you will be informed.
This policy may be revised. Its version and effective date appear at the top. Any substantial change is announced within the application before it takes effect.