ChurchRide

Privacy Policy

Last updated: July 2026

1. Who We Are

ChurchRide is operated by FID Integrated Services ("we", "us", "our").

We are committed to protecting the personal data of all users — church administrators, drivers, and members — in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Contact for data protection matters: churchride@protonmail.com

2. Data We Collect

We collect the following personal data depending on your role:

All users (Church Admin, Driver, Member):

  • Full name
  • Email address
  • Password (stored as a secure hash — never in plain text)
  • Push notification token (Firebase Cloud Messaging token — used solely to deliver in-app notifications to your device; can be removed at any time by disabling notifications)

Church Members:

  • Phone number (optional — for admin contact purposes only)
  • Home address (for pickup routing — only entered by the member themselves)
  • Home GPS coordinates (lat/lng — derived from your address for route planning)
  • Location consent status and timestamp

Drivers:

  • Real-time GPS location (lat/lng) — only when a bus run is actively in progress
  • This data is transmitted from your device while you have an active run open

Church Admins:

  • Church name, address, postcode, phone number, denomination
  • Stripe billing information (managed by Stripe — we only store a Stripe customer ID)

3. How We Use Your Data

DataPurposeLegal Basis
Name, emailAccount creation and loginContract performance
Home address + GPSCalculating your pickup point on a bus routeContract performance
Driver GPS locationShowing live bus location to members during a runContract performance + Legitimate interests
Phone numberAdmin contact (not used for automated messaging)Legitimate interests
Terms acceptance timestampDemonstrating consent to our TermsLegal obligation (UK GDPR Art. 7)
Location consent timestampDemonstrating GDPR-compliant consentLegal obligation
Stripe customer IDProcessing subscription paymentsContract performance

4. Location Data — Important Details

Member home address & GPS coordinates:

Your home address is used solely to calculate your pickup stop on a bus run. It is visible to your Church Admin and your assigned driver for route planning purposes. It is never shared outside your church organisation.

Driver live GPS location:

When you start a bus run, ChurchRide transmits your device's GPS location to our servers approximately every 5–10 seconds. This is displayed on a live map to members who have a confirmed booking on that run.

Driver location data is:

  • Only active when you have an open, in-progress run
  • Automatically marked inactive when the run is completed or after 2 hours of inactivity
  • Deleted from our servers within 24 hours of the run ending

You have the right to withdraw location consent at any time by contacting your Church Admin or emailing churchride@protonmail.com. However, withdrawing location consent means you cannot use the live tracking feature as a driver.

5. Who Sees Your Data

DataVisible to
Your name, emailYou + your Church Admin
Your home address + GPSYou + your Church Admin + your assigned driver (admins can edit this on your behalf)
Your booking detailsYou + your Church Admin
Driver live locationAll members with a confirmed booking on that run
Church billing detailsChurch Admin only
Platform-wide dataFID Integrated Services (super admin) only

We do not sell, rent, or share your personal data with any third party for marketing.

6. Third-Party Services

We use the following third-party services to operate ChurchRide:

  • Stripe — payment processing. Stripe's privacy policy: stripe.com/gb/privacy
  • Cloud hosting provider — ChurchRide is hosted on a secure, GDPR-compliant cloud infrastructure. No personal data is sold or shared with the hosting provider for marketing purposes. Infrastructure details are available on request by emailing churchride@protonmail.com.
  • Google Maps — map display and address geocoding
  • Firebase Cloud Messaging (Google) — push notification delivery. FCM uses device tokens to deliver notifications; no message content is stored by Google beyond what is necessary for delivery. Google's privacy policy: policies.google.com/privacy

We do not use advertising networks, analytics trackers, or social media pixels.

7. Data Retention

DataRetention period
Active account dataRetained while account is active
Driver GPS location recordsDeleted within 24 hours of run completion
Booking historyRetained for 12 months after the booking date
Cancelled/deleted accountsData deleted 30 days after cancellation
Admin-deleted membersPermanently deleted immediately — cannot be recovered
Subscription billing recordsRetained for 7 years (legal/accounting requirement)

8. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

  • Right of access — request a copy of all data we hold about you
  • Right to rectification — ask us to correct inaccurate data. Church Admins can also update member details (name, phone, address) directly from the admin dashboard
  • Right to erasure — ask us to delete your data (subject to legal retention requirements). Church Admins can also permanently delete a member's data directly from the admin dashboard — this action is immediate and irreversible
  • Right to restriction — ask us to pause processing your data
  • Right to data portability — receive your data in a machine-readable format
  • Right to object — object to processing based on legitimate interests

To exercise any of these rights, email: churchride@protonmail.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

9. Cookies

ChurchRide uses only essential cookies required for the app to function (session authentication). We do not use advertising cookies, tracking cookies, or analytics cookies. No cookie consent banner is required for essential cookies only.

10. Children's Data

ChurchRide is not intended for users under the age of 16. We do not knowingly collect personal data from children. If you believe a child's data has been submitted, please contact churchride@protonmail.com and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy periodically. Church Admins will be notified by email of any material changes at least 14 days before they take effect.

12. Contact

FID Integrated Services

Email: churchride@protonmail.com

Website: churchride.co.uk