Skip to content
Christ Cathedral

Privacy Policy

What data we collect through the Christ Cathedral app (CCMyChurch) and this website, what we use it for, and how we keep it safe.

Last updated: 26 October 2026

This policy explains what personal data we collect through the Christ Cathedral app (CCMyChurch) and the ccmychurch.com website, what we use it for, who can see it, how long we keep it, and your rights over it. By creating an account or using our services, you confirm that you have read this policy.

1. Who we are

These services are run by Yayasan Eklesia Basilea (GBI Basilea), the foundation behind Christ Cathedral and its campuses, including GBI Basilea Christ Cathedral (Gading Serpong), GBI Basilea Menteng (Jakarta) and CC Atmosphere Melbourne (Australia). In this policy, "we" means Yayasan Eklesia Basilea as the controller of your personal data.

Contact: info@ccmychurch.com · WhatsApp +62 813-1060-2060 · Jl. Gading Golf Boulevard No.888, Gading Serpong, Tangerang, Banten 15332, Indonesia.

2. What we collect

Account and profile

  • When you sign up or sign in: full name, nickname, gender, date of birth, campus, marital status, address, occupation, email address and/or phone number, and an emergency contact (name, number, relationship).
  • What you can add to your profile: place of birth, blood type and wedding date.
  • Baptism details you report (date, church, city) or that the church has recorded.
  • Existing church records. If you were registered as a member before this app existed, we hold data from the church's earlier records, which may include your member number (NIJ), a photo, and your national ID (KTP) and family card (KK) numbers. KTP/KK numbers and photos are not requested in the app and are visible only to authorised staff.

Family

The head of a household can link family members or add members without an account, such as children or elderly parents, with their name, relationship, gender and (optionally) date of birth. By adding someone, you confirm that you are entitled to provide their data, for example as their parent or guardian.

Activities and ministry

  • Class and event registrations, including QR-coded tickets and the number of people attending.
  • Family Community (FC): join requests, membership and meeting attendance (recorded by QR scan or by the FC leader), and meeting photos uploaded by FC leaders.
  • Dream Team: sign-ups to a ministry team and your FC leader's recommendation.
  • Room bookings: room, date, time, purpose and number of people.
  • Partner coupons given to you and their use.
  • Messages to the Help Center.
  • Pastoral care requests (for example counselling or prayer): topic, how you'd like to meet, preferred times, phone number and the note you write. This information can be personal and sensitive; we handle it with particular care.

Giving

When giving through the app is available, payments are processed by a licensed payment provider. We only keep the amount, category, status and transaction reference. We never store your card number, CVV or bank account details.

Device and technical data

  • Your device's notification token (to send notifications) and its platform.
  • When you sign in: the time, the device name and your IP address.
  • When you scan a QR code to check in: the scan result and browser/app information (user agent).

The app does not use your location and does not use third-party analytics or advertising tools.

Website forms

  • The answers you give in a form (for example a registration or a contact message) and any files you upload when a form asks for them.
  • The time of submission and a random fingerprint of your IP address; we do not store the IP address itself.
  • The website uses no tracking, advertising or analytics cookies, only those needed for the site and its forms to work securely.

3. Device permissions

  • Camera: to scan QR codes (check-in, tickets, family invitations) and, for FC leaders, to photograph meetings. Used only while you use those features.
  • Photos: when you choose an existing photo to upload.
  • Notifications: for event reminders, news from your FC or Dream Team, and church announcements. You can turn them off at any time in your device settings.

4. How we use your data

  • To create and manage your account and verify you when you sign in.
  • To provide the services you ask for: classes, events, FC, Dream Team, room bookings, coupons, pastoral care and the Help Center.
  • To contact you about the activities and ministries you take part in, including notifications and birthday greetings.
  • For pastoral care and support by the leaders and pastors assigned to you.
  • To keep our services secure and prevent misuse.
  • To produce internal ministry statistics (for example attendance numbers).
  • To meet legal obligations.

We process your data on the basis of your consent, to provide the services you request, for the legitimate purposes of the church's ministry, and to comply with the law. We never sell or rent your personal data to anyone.

5. Who can see your data

  • You, in your profile.
  • Fellow FC members see your name and, in the calendar, your birthday.
  • FC leaders, the FC Core Team and the pastors over your FC can see your profile (including date of birth, contact details and address) and your attendance, for pastoral care.
  • Dream Team unit leaders see your sign-up and your FC leader's recommendation.
  • The pastoral care team assigned to that type of care sees your pastoral request.
  • Coupon partners see only your full name and the coupons you can use, when they scan your QR code.
  • Church staff and administrators, within the scope of their roles.

Service providers

We use third parties that process data on our behalf, only as far as needed:

  • The server and hosting providers our system runs on.
  • Email and/or WhatsApp delivery services, to send sign-in codes.
  • Google Firebase Cloud Messaging, to send notifications to your device.
  • Licensed payment providers, when giving or paid tickets through the app are available.
  • Google reCAPTCHA, to protect website forms (subject to Google's Privacy Policy). YouTube videos on the website use privacy-enhanced mode.

We may also disclose data where required by law or by an order of a competent authority.

6. International transfers

Your data may be processed outside the country you live in, for example for members of the Melbourne campus or by service providers such as Google. We only do so with adequate safeguards as required by applicable law.

7. Security

We use encrypted connections (HTTPS), store sign-in codes in hashed form, limit access to data by role, and keep form uploads in storage that is not publicly accessible. No system is completely secure; if a personal data breach affects you, we will notify you as required by law.

8. How long we keep data

  • Account and activity data is kept while your account is active.
  • Website form answers are kept as long as needed for the purpose of that form.
  • Giving records and other records we must keep by law are kept for the period the law requires.
  • After you ask us to delete your account, your data is deleted or anonymised as described below.

9. Deleting your account

You can ask us to delete your account at any time:

  • in the app, under Profile → Delete Account (the steps are on the Delete Account page), or
  • by emailing info@ccmychurch.com from your registered email address or number.

Your account is closed straight away: you can no longer sign in and notifications stop. Within 30 days we delete or anonymise your personal data, except data we are required to keep by law (such as giving records) or need to resolve a dispute. Statistics that can no longer be linked to you may be kept.

10. Children

Users under 18 may only create an account with the consent of a parent or guardian. Younger children should be added by their parents as family members without an account. A parent or guardian can ask to see, correct or delete their child's data by contacting us.

11. Your rights

Under Indonesia's Personal Data Protection Law (Law No. 27 of 2022), you have the right to:

  • be informed about, and get a copy of, your personal data;
  • correct inaccurate data (most of it you can change yourself in your profile);
  • ask for your data to be deleted and withdraw your consent;
  • object to certain processing, including stopping notifications;
  • raise an objection or complaint, including with the competent data protection authority.

Members in Australia also have rights under the Privacy Act 1988. To use these rights, contact us at info@ccmychurch.com. We will respond as soon as possible and within the time limits set by law.

12. Changes to this policy

We may update this policy. We will announce important changes in the app or on the website before they take effect. The latest version is always available on this page.