Privacy Policy

By using Cenacle, you agree to the collection and use of information as described in this policy. If you do not agree, please discontinue use of the platform.

For questions or concerns, contact us at cenacle@neilian.dev.

1. Who We Are

Cenacle is a web-based Catholic prayer platform that allows users to pray together online through live prayer rooms and a daily Online Mass. It is operated as a personal ministry project, donation-based, and not for commercial profit.

2. Information We Collect

We collect only the minimum information necessary to operate the platform.

2.1 Host Accounts (Registered Users)

When you create a host account via Google Sign-In, we receive from Google:

• Display name — editable by you after account creation
• Email address — used for account identification only, never shared publicly
• Account creation date

We do not store your Google profile picture. We do not store your Google password.

2.2 Guests (Non-Registered Users)

When you join a prayer room or attend Online Mass as a guest, we temporarily collect:

• Display name — the name you enter before joining, stored per session in our database for the duration of the room

We do not require an email address, password, or any account creation from guests.

2.3 Prayer Intentions

When you submit a prayer intention before attending Online Mass:

• The intention text is stored permanently and anonymously in our database
• It is displayed publicly for that specific mass only
• It is never linked to your name, device, or account
• It exists solely as an act of offering — a record between you and God

2.4 Prayer Room Activity

When you participate in a prayer room, we store:

• Your guest display name and the room you joined
• Whether you were designated as prayer leader
• Join and leave timestamps
• Whether a kick action was taken (for moderation records)

2.5 Information We Do NOT Collect

We explicitly do not collect:

• Camera images or snapshots
• Microphone audio recordings
• Location data
• Device identifiers beyond the session scope

3. How We Use Your Information

We do not use your information for:

• Advertising or marketing
• Selling or sharing with third parties for commercial purposes
• Automated profiling or behavioral tracking
• Any purpose beyond operating the platform

4. Third-Party Services

Cenacle uses the following third-party services that may process your data as part of platform operation:

Each of these services operates under their own Privacy Policy. We have chosen providers with strong privacy practices, but we encourage you to review their policies independently.

5. Data Retention

6. Your Rights (Philippine Data Privacy Act)

Under the Data Privacy Act of 2012, you have the right to:

• Be informed — know what data we collect and why
• Access — request a copy of the personal data we hold about you
• Correction — update your display name directly in your account settings; request correction of other data via email
• Erasure / Blocking — request deletion of your account and all associated data
• Data Portability — request your data in a readable format
• Object — object to processing of your personal data
• Lodge a complaint — with the National Privacy Commission (NPC) of the Philippines at privacy.gov.ph

To exercise any of these rights, email us at cenacle@neilian.dev. We will respond within 15 business days.

7. Account Deletion

If you are a registered host and request account deletion:

• Your account is permanently deleted from our system
• All rooms you created are deleted
• All participant records associated with your rooms are deleted
• Your email and display name are permanently removed

To request deletion, email cenacle@neilian.dev with subject line: "Account Deletion Request"

We will process your request within 15 business days.

8. Children and Minors

Cenacle is intended for users 18 years of age and older.

Users between the ages of 13 and 17 may use Cenacle only under the direct guidance and supervision of a parent or legal guardian. By allowing a minor to use Cenacle, the parent or guardian accepts responsibility for compliance with this policy.

We do not knowingly collect personal information from children under the age of 13. If you believe a child under 13 has provided us with personal information, contact us immediately at cenacle@neilian.dev and we will delete it.

9. Security

We take reasonable technical and organizational measures to protect your data:

• All data transmitted between your browser and our servers is encrypted via HTTPS
• Authentication is handled by Supabase Auth with industry-standard security practices
• Google OAuth is used for host authentication — we never handle or store passwords
• Access to the database is restricted and governed by Row Level Security (RLS) policies

No method of transmission or storage is 100% secure. We encourage you to use secure networks when attending prayer sessions.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. Continued use of Cenacle after changes are posted constitutes acceptance of the updated policy.

For significant changes, we will make reasonable efforts to notify registered hosts via their email address.

11. Contact

For any privacy-related questions, requests, or concerns:

Email: cenacle@neilian.dev
Response time: Within 15 business days