Effective date: 24 June 2026 Last updated: 24 June 2026
App: Exploits Ministries (the "App") Provided by: Exploits Ministries (the "Ministry", "we", "us", "our") Address: Kampala, Uganda Contact: privacy@exploitsministries.org
This Privacy Policy explains what personal information the Exploits Ministries App collects, how we use and share it, and the choices and rights you have. It applies to the App on Android and iOS and to our backend services at https://app.exploitsministries.org.
By creating an account or using the App, you agree to the practices described here. If you do not agree, please do not use the App.
| Data | When / Why |
|---|---|
| Name | At sign-up and in your profile; shown with chat messages and content you submit. |
| Email address | At sign-up; used to authenticate your account and for account-related communication. |
| Profile photo | Optional; uploaded by you to personalise your profile and identify you in live-stream chat. |
| Bio | Optional short text (up to 300 characters) you add to your profile. |
| Date of birth / contact details | If you choose to provide them in your profile. |
| Prayer requests, testimonies, event RSVPs | When you submit them through the App. |
| Live-stream chat messages | The content of messages you send during a live broadcast. |
| Payment / giving details | When you make a donation or payment: mobile-money phone number, mobile network, amount, currency, and transaction references. Card payments are handled by our payment processor (see §5). We do not store full card numbers on our servers. |
| Data | Purpose |
|---|---|
| Authentication identifiers | A user ID and login session token issued by Firebase Authentication. |
| Role | Whether your account is a listener, broadcaster, or administrator. |
| Microphone audio (broadcasters only) | If you are an authorised broadcaster and start a live broadcast, the App captures your microphone audio and streams it live to listeners. The microphone is only used while you are actively broadcasting. Listeners' microphones are never accessed. |
| Local recordings (broadcasters only) | A broadcaster may record the outgoing broadcast on their own device. The recording is stored locally on the device and is not uploaded unless the broadcaster explicitly chooses to upload it as an audio sermon (see §2.3). |
| Listening activity | When you listen to a live stream we create a listener session (a session ID, the stream you joined, join/leave times, periodic "heartbeat" timestamps to keep the session alive, and basic device/network type) to count listeners and manage the connection. |
| Engagement & usage data | Views, replays, likes, comments, favorites, playlists, downloads, and aggregate listener/attendance counts, used to operate features and understand which content is popular. |
| Push notification token | A Firebase Cloud Messaging (FCM) token used to deliver notifications about new content, live streams, and payment confirmations. |
| Device / technical data | Standard request data such as IP address, app version, and device/network type, processed by our backend, content-delivery, and hosting providers to deliver and secure the service. |
If a broadcaster chooses to upload a recording, the audio file is uploaded to our storage (Firebase Storage) and published in the App as an audio sermon, together with the title and description provided. Uploaded sermons are publicly available to App users.
The broadcaster mixing feature lets a broadcaster import music files from their own device to mix into a broadcast. Imported music files remain on your device. We do not upload, copy, or store your imported music library on our servers. You are responsible for having the rights to any music you import and broadcast (see the Terms of Use).
If you sign in with Google Sign-In, we receive basic profile information (name, email address, and profile photo) from your Google account to create and authenticate your account.
We use the information above to:
We rely on the legal bases of performance of a contract (providing the App you signed up for), consent (e.g. microphone access, notifications), legitimate interests (security, analytics, improving the service), and legal obligation (financial records), where such concepts apply to you.
We do not sell your personal information. We share it only as follows:
The App relies on the following third parties. Each processes data under its own privacy policy:
| Provider | Purpose | Data involved |
|---|---|---|
| Google Firebase (Authentication, Cloud Firestore, Cloud Storage, Cloud Messaging, App Check) | Account authentication, database, file storage, push notifications, and abuse prevention | Account data, profile photo, uploaded content, FCM token, app-integrity signals |
| Google Sign-In | Optional login | Google profile name, email, photo |
| YouTube / Google | "Live TV" and video playback embed YouTube content | Standard YouTube playback/API data; governed by Google's privacy policy and YouTube's Terms of Service |
| Relworx | Mobile-money and card payment processing | Phone number, network, amount, currency, transaction references; card details entered into the processor's flow |
| Icecast streaming host | Delivers the live audio stream to listeners | Stream audio and listener connection data (e.g. IP address) |
| Cloudflare | Content delivery / proxy / security in front of our services | Network/technical request data (e.g. IP address) |
| Our cloud hosting provider | Hosts our backend API and database connections | All data above, as processed by our servers |
We do not use third-party advertising or behavioural-tracking SDKs. Audience and engagement metrics are computed on our own backend rather than through a third-party analytics service.
We keep personal information for as long as your account is active or as needed to provide the App, and longer where required for legal, accounting, or security reasons.
You can delete your account from within the App (Profile → Delete account). For security, you may be asked to re-authenticate before deletion. You may also request deletion by contacting us at privacy@exploitsministries.org.
When you delete your account, we permanently delete:
We retain but anonymise (disassociate from your identity, e.g. name shown as "Deleted user") the following, because deleting them outright would break records we are required or reasonably need to keep:
We retain financial and giving records for at least seven (7) years, or such other period as required by applicable Ugandan tax and accounting law.
We use industry-standard measures to protect your information, including authenticated API access, transport encryption (HTTPS/TLS), and app-integrity checks (Firebase App Check). No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
The App is intended for a general audience and is not directed at children under 13. We do not knowingly collect personal information from children under that age. If you believe a child has provided us personal information, contact us at privacy@exploitsministries.org and we will delete it. Where parental consent is legally required for a minor to use the App, that consent must be obtained before use.
Depending on where you live, you may have rights to access, correct, delete, or export your personal information, to object to or restrict certain processing, and to withdraw consent. You can exercise many of these directly in the App (edit your profile, delete your account) or by contacting us at privacy@exploitsministries.org. We will respond as required by applicable law. You also have the right to complain to your local data protection authority.
We operate primarily in Uganda. Our service providers may process and store data in other countries. Where we transfer data internationally, we take steps to ensure it is protected consistent with this Policy and applicable law.
We may update this Policy from time to time. We will post the updated version in the App and update the "Last updated" date, and, where required, notify you. Continued use of the App after changes take effect means you accept the updated Policy.
Exploits Ministries Kampala, Uganda Email: privacy@exploitsministries.org