Last updated: 28 May 2026
In short: We collect only what we need to run Avodah for your church. We never sell your data. You can request access, correction, or deletion of your personal information at any time.
Avodah ("we", "us", "our") is a cloud-based church management platform operated by Avodah Software. Our platform helps churches manage rosters, people, expenses, communications, events, and more through web and mobile applications.
If you have questions about this policy or your data, contact us at:
| Category | Data | Purpose |
|---|---|---|
| Account | Name, email address, password, phone number, profile photo | Creating and managing your account |
| Profile | Timezone, default church, custom attributes set by your church (e.g. birthday, gender, role) | Personalising your experience and church administration |
| Financial | Expense amounts, descriptions, categories, receipt images, bank account details (name, account number, sort code) | Expense submission, approval, and reimbursement |
| Communications | Chat messages, group messages, emoji reactions, prayer requests | Enabling messaging between church members |
| Church Activity | Roster assignments, attendance records, event participation, small group memberships, discipleship records | Church operations, scheduling, and pastoral care |
| Assessments | Responses to discipleship assessments and learning course progress | Tracking growth and programme completion |
| Uploaded Files | Profile photos, expense receipts, chat images, documents | Supporting features that require file attachments |
| Category | Data | Purpose |
|---|---|---|
| Device | Device name, platform (iOS/Android), push notification tokens | Delivering push notifications and managing sessions |
| Session | IP address, user agent, last activity timestamp | Session management and security |
| Usage | Feature interactions, notification read status, login timestamps | Improving the service and troubleshooting |
Some data processed through Avodah may be considered sensitive, including:
We process this information only to provide the church management services your church has engaged us for. Your church administrator is the data controller for this information and determines how it is used within their organisation.
We use your information to:
We do not sell, rent, or trade your personal data. We share information only in the following circumstances:
Your church administrators and authorised leaders can view member data, attendance records, roster assignments, and other information necessary for church operations. The visibility of your information is determined by the roles and permissions your church has configured.
We use trusted third-party services to operate the platform:
| Provider | Purpose | Data Shared |
|---|---|---|
| Google Firebase | Push notifications (FCM) | Device tokens, notification content |
| Amazon Web Services | File storage (S3), email delivery (SES) | Uploaded files, email addresses and content |
| Anthropic (Claude AI) | AI-powered receipt extraction and assistant features | Receipt images and text for data extraction |
| Deepgram | Audio transcription | Audio content submitted for transcription |
| Email Providers | Transactional email delivery (Postmark, Resend, or SMTP) | Email addresses and message content |
| WhatsApp (Meta) | Messaging integration (where enabled by your church) | Phone numbers and message content |
Each provider is bound by their own privacy policy and our data processing agreements. We only share the minimum data necessary for each service to function.
We may disclose your information if required by law, regulation, legal process, or enforceable government request.
Your data is stored on secure servers. Uploaded files may be stored locally on our servers or on Amazon S3 cloud storage. The mobile app stores authentication tokens and cached data locally on your device using secure storage.
We retain your personal data for as long as your account is active or as needed to provide the service. Specific retention periods:
Depending on your location, you may have the following rights regarding your personal data:
To exercise any of these rights, contact us at privacy@avodahapp.com. We will respond within 30 days.
Within the app, you can:
We use Firebase Cloud Messaging (FCM) to send push notifications to your mobile device. Notifications may include roster reminders, message alerts, expense status updates, and event notifications.
You can control push notifications by:
Your device token is registered with our servers when you enable notifications and removed when you log out.
Our web application uses cookies for:
We do not use third-party advertising or tracking cookies.
Authorised administrators may have the ability to view the platform as another user ("impersonation") for the purpose of troubleshooting and support. When an administrator is impersonating your account:
Avodah uses artificial intelligence for specific features:
AI features are optional and only activated when you explicitly use them (e.g. uploading a receipt for extraction).
Avodah is not directed at children under the age of 16. We do not knowingly collect personal information from children. Church administrators may store limited information about minors (e.g. names for attendance or check-in purposes) as part of the church's operations, and the church is responsible for obtaining appropriate parental consent.
Your data may be processed in countries other than your own, including the United Kingdom, the European Economic Area, and the United States (where our cloud service providers operate). We ensure appropriate safeguards are in place for any international transfers, including standard contractual clauses where required.
Avodah operates a multi-tenant architecture where each church's data is logically isolated. Church administrators can only access data belonging to their own organisation. If you are a member of multiple churches on the platform, each church can only see the data relevant to their organisation.
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice in the app or sending you an email. Your continued use of the service after changes take effect constitutes acceptance of the revised policy.
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
If you are unsatisfied with our response, you have the right to lodge a complaint with your local data protection authority. In the UK, this is the Information Commissioner's Office (ICO).