Privacy Notice

Last updated: July 17, 2026

Products covered: Blessly mobile app and admin portal (the "Services")

This Privacy Notice explains how we collect, use, share, and protect personal information when you use our Services, and the choices and rights you may have.

1) Our role: Processor for organizations, Controller for personal subscriptions

Blessly supports both organizational workflows (e.g., churches and nonprofits) and individual subscription features.

When you use Blessly through an organization

If you interact with Blessly because an organization uses our platform (for example, you appear in their directory, participate in their events or groups, receive communications, or donate), then:

The organization's privacy notice governs how they collect and use your information.

When you use Blessly personal subscription features

If you use Blessly's personal subscription features, Blessly is typically the Data Controller / Business for that account relationship and related data.

2) Personal information we collect

We collect personal information from you, from organizations you Connect to, and automatically from devices used to access the Services. Following an organization is private and does not, by itself, share your personal information with that organization (see "How we share personal information").

Categories of personal information may include:

3) How we use personal information

We use personal information to:

4) How we share personal information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share personal information only as described below.

A) With organizations you Follow or Connect to

You can Follow an organization to see its public content (such as events and announcements) in the app. Following is private: it does not share your name, contact details, or other personal information with that organization, and the organization sees only aggregate counts and information that does not identify you individually (for example, the total number of followers).

Your personal information becomes accessible to an organization only when you Connect to it — either by explicitly choosing to share your profile, or by taking an action that requires the organization to identify you, such as RSVPing or registering for an event, donating, joining a group, or volunteering. We tell you, at the moment you take such an action, that it will share your information with that organization. Once you Connect, information relevant to that organization's use of the Services may be accessible to it according to its permissions and settings.

If you later stop Following or disconnect, the organization stops receiving new information about you and you are removed from its active member views. Records it is required to keep (such as donation and attendance history) are retained as described in "Data retention." You may request deletion as described in "Your rights and choices."

B) With service providers (subprocessors)

We use vendors to help provide the Services, such as:

These providers are authorized to process personal information only to provide services to us under contractual confidentiality and security obligations.

C) For legal, safety, and compliance

We may disclose personal information to comply with law, respond to valid legal requests, protect rights/safety, investigate fraud/abuse, or enforce our terms.

D) Aggregated and de-identified information

We may share aggregated or de-identified statistics with organizations (for example, follower counts and engagement trends) that do not identify you individually.

E) Business transfers

If we're involved in a merger, acquisition, financing, reorganization, or sale of assets, personal information may be transferred as part of that transaction (with notice where required).

5) Where your information is stored (data residency & international processing)

Where we store and process your information depends on the type of information involved:

Transfers of personal data within the UK and the European Economic Area (EEA), and from the UK to the EEA, are covered by the applicable adequacy regulations, so church member data hosted in the EU is not transferred to the United States on that basis.

Some processing does take place in, or is accessed from, the United States — for example certain platform operations and service providers such as Stripe (payments). Where personal data of individuals in the UK or EEA is transferred to, accessed from, or processed in the United States or another country outside the UK/EEA, we use appropriate safeguards, which may include:

along with additional technical and organizational measures appropriate to the risk.

6) Legal bases for processing (UK/EEA)

Where UK GDPR/GDPR applies, we rely on one or more of the following legal bases depending on context:

Where sensitive information is processed (e.g., as configured by an organization), we apply appropriate safeguards and process it only as necessary to provide the Services and as permitted by applicable law.

7) Data retention

We retain personal information only as long as necessary for the purposes described in this Notice, unless a longer period is required by law.

Examples:

8) Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, and to object to or restrict certain processing.

9) Children's privacy

Blessly is not intended for children under 13 to create an account or use the Services independently, consistent with our Terms of Use. Organizations may use the Services to manage youth participation. In those cases, the organization is responsible for obtaining any required parental/guardian consent and providing required notices.

If you believe a child's information was collected improperly, contact the relevant organization or email info@blesslyapp.com.

10) Security

We maintain administrative, technical, and organizational safeguards designed to protect personal information, such as access controls, encryption in transit, monitoring, and secure development practices. No system is completely secure.

11) Cookies and similar technologies

We use cookies and similar technologies on our websites and admin portal for essential functionality (such as session management and security) and, where enabled, analytics to understand usage and improve performance. Where required by law, we provide appropriate notice and consent controls.

12) Changes to this Notice

We may update this Notice periodically. We will post changes on this page and update the "Last updated" date. For material changes, we may also notify you through the Services.

13) Contact

If you have questions about this Privacy Notice or our data practices, contact us at:

Blessly
Email: info@blesslyapp.com