Who handles your information
Congregate is operated by Yun Labs Studio (SSM No. 202603077336 / 003834775-V), a sole proprietorship registered in Malaysia. This notice is provided under Malaysia’s Personal Data Protection Act 2010 (Act 709), as amended, and covers Congregate’s public website, member app, and admin console. Congregate provides software for church discovery, events, attendance, membership, communications, and serving teams.
Yun Labs Studio is the data controller for platform accounts, security, and support. When we handle a church’s operational records solely on its instructions, we act as its service provider/data processor; the church controls the purposes of those records. Each participating church decides how to use its church records, who may access them, and how to follow up with members and visitors. Churches may have their own privacy notices and legal responsibilities. For church records, contact the church directly; for platform privacy requests, email support@congregate.my.
Information we collect
- Account and profile: email address, name, mobile number when provided, sign-in identity, and authentication/session information. Email and password sign-in is handled by our authentication provider.
- Church participation: church connection requests, memberships, roles, teams, groups, attendance and check-in times, serving assignments, availability or blockout dates, and related activity history. Church administrators and authorised team members may enter records about you, including guest records.
- Content: announcements, event details, uploaded images and files, service plans, songs, checklist entries, notes, and other material you or your church submit.
- Device and technical information: IP address, browser/device information, request and security logs, session cookies, and browser storage needed to deliver and protect the service.
- Notifications: if you enable push notifications, the push subscription endpoint, encryption keys, and associated browser information used to deliver them.
- Support: information you send when requesting help or reporting an issue.
Information comes from you, your sign-in provider, your browser/device, and your church’s authorised users. Attendance, membership, and serving information may reveal religious beliefs or affiliation and is treated as sensitive personal data. We and churches must obtain explicit consent before processing this information unless a specific legal exception applies. Reading this notice, accepting the Terms, or allowing browser location access is not a substitute for explicit consent to sensitive-data processing. Churches must obtain the required consent for records they enter, including guest and child records. Avoid uploading unrelated sensitive information.
Required information and your choices
An email/sign-in identity and name are required to create and use a member account. Guest entry requires a name and browser identifier; email or other details are collected where you provide them. If you do not supply information necessary for a particular request, we cannot create the account, identify the attendee, or complete that request. You can still view public pages without an account.
A mobile number, optional profile details, uploaded content, push notifications, and location permission are voluntary unless a particular church workflow explains why an item is required. Declining an optional item limits only the related feature. You can refuse location access and ask an usher for attendance help. You can limit processing by changing settings, withdrawing consent, or emailing us. We will explain any effect on your account or church participation.
Sign in with Google
If you choose Google sign-in, Google shares your account identifier, email address, and basic profile information such as your name and profile picture, subject to the permissions shown by Google. Our authentication provider processes this information to create or recognise your Congregate account and establish a session.
We use Google identity information for sign-in, account identification, account security, and displaying your profile where supported. The current integration does not request access to Gmail, Google Contacts, Google Drive, or Google Calendar. Congregate’s own event and serving calendars are separate from Google Calendar.
Google identity information is stored with your account and authentication records. We share it only as described in this policy, including with providers operating the service and, for the profile details used in church participation, authorised church users. We do not sell Google user data, use it for advertising, or use it to train general-purpose AI models.
Congregate’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. You can revoke access through your Google Account connections. Revoking Google access does not delete existing Congregate or church records; use the deletion options below as well.
How we use information
We use information to authenticate users; maintain profiles and church connections; display relevant events and announcements; manage attendance, groups, teams, rosters, service plans, and tools; deliver account and event notifications; respond to support requests; and investigate errors, misuse, or security incidents. Church teams use authorised access to organise activities and follow up with their community.
We process information to provide the service you request, with permission where required, to protect and maintain the service, and to meet applicable legal obligations. Where local law requires explicit consent for sensitive information, the relevant operator or church must obtain it. This notice does not replace that consent. We do not use church participation records for solely automated decisions that produce legal or similarly significant effects.
We do not sell personal information or use church participation data for targeted advertising.
Location and check-in
When you choose location-based self check-in, your browser asks for location permission. Congregate sends your current coordinates to the server to check whether you are within the event’s permitted area. This is a check-in request, not continuous background location tracking.
You can decline or withdraw browser location permission. If self check-in is unavailable, ask an usher or church team for help. The calculated distance from the event location is stored with a successful location-based check-in. Attendance, its time, and the check-in method may still be recorded when your attendance is confirmed, including through church-configured serving attendance workflows.
Cookies and storage on your device
Congregate uses authentication cookies to maintain sessions. Guest event entry uses an HTTP-only browser token to recognise a guest on later visits; the guest cookie is set for up to 180 days and may be renewed when used. Clearing it removes browser recognition, not the church’s attendance records.
The installable web app uses browser storage, cached assets, and locally saved app data to support navigation, preferences, and recovery of previously loaded screens. Shared-device users should sign out and clear site data when needed. Browser controls let you clear cookies and storage; doing so may sign you out or remove offline data.
Retention and account deletion
We retain account information while needed to provide the service. Church operational records may remain after membership ends or an account is deleted, for church administration, historical attendance and serving records, security, and legal obligations. Logs and backups follow the retention practices of the relevant infrastructure provider. We keep identifiable information only for as long as needed for the stated purpose, a lawful church record requirement, dispute resolution, or an applicable legal duty; it should then be deleted or de-identified. Ask us or the relevant church for the retention basis for a specific record.
You can request account deletion in the member app under Profile → Settings → Delete account. The current process disables sign-in, removes linked sign-in identities, replaces the account email, clears the mobile number, deactivates memberships, revokes roles, removes future serving assignments, and withdraws connection requests. It retains your name and historical church records; it is not complete erasure or anonymisation. A sole church administrator must arrange another administrator before self-service deletion can proceed.
For removal or correction of retained church records, or guest records created without an account, contact the relevant church. Separate copies exported or otherwise retained by a church must be addressed with that church. For platform records, request help from the operator using the contact section below.
Your choices and rights
You can edit profile details in the app, manage browser permissions, turn off push notifications, revoke Google access, and request account deletion. Depending on applicable law, you may also request access to or correction, deletion, restriction, or portability of your information, object to processing, or withdraw consent. These rights may be subject to lawful limits and identity verification. Withdrawing permission may prevent a related feature from working.
Email support@congregate.my with your account email, the relevant church, and your request. You may write in English or Bahasa Malaysia. We may ask for proportionate identity verification and will respond within the time required by applicable law. Where a lawful exception or fee applies, we will explain it. You can request access, correction, withdrawal of consent, prevention of direct marketing or processing likely to cause damage or distress, and transfer of your data to another controller where the statutory portability conditions and technical feasibility allow. Withdrawal affects future consent-based processing and does not automatically erase records that have another lawful retention basis.
If a church controls the information, direct your request to that church. You may also contact us for help identifying the appropriate church contact; we remain responsible for requests concerning data we control. You may also raise concerns with the applicable data protection authority, including Malaysia’s Personal Data Protection Commissioner where relevant.
Security and international processing
We use authentication, permission-based access, and infrastructure security measures to protect information. Access is limited to authorised people and providers for the purposes in this notice. We take reasonable steps to keep records accurate and ask you and your church to correct outdated details. No system is completely secure. Keep your account secure and report suspected unauthorised access promptly.
If a personal data breach occurs, we will investigate, take appropriate containment steps, and notify the Personal Data Protection Commissioner and affected individuals where required by law. Required notices will explain the relevant risks, protective steps, and contact details.
Our infrastructure providers may store or process information outside your country, including outside Malaysia. Where we transfer information outside Malaysia, we must meet the applicable conditions under section 129 of the PDPA, including an appropriate protection basis or another permitted exception, and take reasonable steps to protect the data through provider arrangements and access controls. Contact the operator for information about the hosting locations and safeguards applicable to your account.
Children’s information
Congregate is intended for church communities and is not designed for children to use independently. Independent account use is for people aged 18 or over. A person under 18 may participate only with a parent or legal guardian’s permission and supervision, subject to applicable law and the Terms. Churches must obtain required authorisation before entering a child’s information and restrict access appropriately. Contact the church or operator if you believe a child’s information has been collected without required permission.
Contact and changes
The operator is Yun Labs Studio (SSM No. 202603077336 / 003834775-V), a sole proprietorship registered in Malaysia. The responsible privacy contact is Jeshua Woon Tien Ming, proprietor. For privacy requests, questions, or platform support, email support@congregate.my. Include the kind of request and the relevant church; do not send passwords or unnecessary sensitive records.
This notice is available in English and Bahasa Malaysia. Both versions describe the same processing and choices. Contact us if you need clarification or find a difference between them.
We will update the date when this policy changes and provide additional notice of material changes where required. New uses of Google user data require appropriate disclosure and consent before that use begins. Read our Terms of Service for the rules that apply to using Congregate.