Privacy Policy

1. About this policy

This policy explains how [Anointed Mission legal entity name] ("Anointed Mission", "we", "us") collects, uses, shares and protects personal information when you use amission.ca, the Mission Hub platform, or take part in our programs and events. We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). If you live in Quebec, we also follow Quebec's privacy law (Law 25).

This policy is part of our Terms of Service. Please also read our Cookie Policy.

2. Our Privacy Officer

Our Privacy Officer is responsible for how we handle personal information: [Privacy Officer name]. You can reach them at hello@amission.ca (subject: "Privacy Officer") or by mail at [Mailing address], Ontario, Canada.

3. What we collect

We collect only what each program needs. Depending on how you take part, this may include:

• Account details: your name, email address, phone number if you give it, and your password (stored securely by our sign-in provider; we never see it).
• Your date of birth, so we can place you in the right age group and apply the right safety rules.
• Where you live: your city, neighbourhood or community hub.
• Your sign-up answers: the programs that interest you, your goals, whether you need a laptop or internet access, and any accessibility needs you choose to share.
• For participants under 18: your parent or guardian's name, relationship to you, email address and phone number, and the permissions they give.
• Program records: your groups and cohorts, attendance, course progress, certificates, and goals you set with a mentor.
• Messages and posts you share on the Mission Hub.
• Your reflection journal entries. These are private unless you choose to share one with your mentor.
• For mentors, leaders and volunteers: your application, references, training and Vulnerable Sector Check status.
• For donors: your name, contact details, gift amounts and receipts. Card details are handled by our payment provider; we never see or store your card number.
• Technical information: sign-in cookies and the security logs our hosting provider keeps, such as IP addresses and browser type.

Health, faith and family details are always optional. When you share them, we treat them as sensitive and limit who can see them.

4. How we use your information

• To create your account and place you in a program, group or cohort.
• To get a parent or guardian's approval and permissions for participants under 18.
• To run our programs, record attendance and progress, and issue certificates.
• To match you with a mentor and support your check-ins.
• To keep everyone safe, including following our Safeguarding Policy and the two-adult rule.
• To contact you about your programs, sessions and account.
• To process donations and, once we are a registered charity, issue official receipts.
• To report on our impact to funders. These reports use totals and anonymous information, never your name, unless you give us written permission.
• To meet our legal obligations.

We do not sell your personal information, and we do not use it for advertising.

5. Your consent

We ask for your consent when you sign up, and we ask separately for things such as joining a program, messaging with a mentor, and using your photo or story. You can withdraw a permission at any time. If you do, we may not be able to offer the part of the program that depends on it, and we will tell you what changes.

6. Young people and their parents or guardians

• Children aged 10 to 12 are signed up by a parent or guardian.
• Young people aged 13 to 17 sign up themselves, and a parent or guardian must approve before they start. The parent or guardian gives each permission separately: for each program, for messaging with a mentor, and for photos and media.
• A verified parent or guardian can see their child's profile, programs and permissions. They cannot read their child's private journal.
• Other participants and mentors see a young person's first name and last initial only.
• We never publish a photo of a young person without media permission from their parent or guardian.
• Messages between a mentor and a young person stay on the Mission Hub, and our staff can see them. Mentors are told this before they start.
• A parent or guardian's access ends when the young person turns 18.

7. Who can see your information

Inside Anointed Mission, people see only what their role needs. Mentors see only the people they are assigned to. Instructors and leaders see only their own groups. Staff access depends on their duties, and staff must use two-step sign-in.

We use these service providers to run the platform:

• Supabase: our database, sign-in and file storage, in Canada (Montréal).
• Vercel: hosts our website and app. Our app runs on servers in Montréal; pages may be delivered through Vercel's global network.
• Resend: sends our emails, such as sign-in and parent or guardian approval emails. Emails may be processed outside Canada.
• Google Fonts: provides the icons on our site. Your browser contacts Google's servers to load them, which shares your IP address with Google.

Our providers may use your information only to provide their service to us. Before we start using new providers, such as for text messages, live video sessions or online giving, we will update this list.

We may also share information when the law requires it, or when we believe someone is at risk of serious harm. Under Ontario law, we must report to a children's aid society if we believe a child may need protection.

8. Where we store your information

We store your information in Canada. Some of our providers, such as our email provider, may process information outside Canada. When that happens, it may be subject to the laws of that country.

9. How long we keep it

If you ask us to delete your information, we delete:

• your profile and sign-up answers;
• your journal entries, course progress and posts;
• messages that never involved anyone under 18.

To keep young people safe and meet our legal duties, we keep some records for a set period, then delete them: messages and check-in notes involving anyone under 18, safeguarding records, screening records, consent records, and our record of who changed what. We keep these for [retention period set by our board]. While we keep them, only our safeguarding lead and Privacy Officer can see them, and your name is replaced with a reference number.

We keep donation and receipt records for the period the Canada Revenue Agency requires. We will tell you what we deleted, what we kept, and until when.

10. How we protect it

• Your information is encrypted when it travels over the internet and when it is stored.
• Our database itself checks who is allowed to see each record, so a mistake in our app cannot show one person's information to another.
• Staff must use two-step sign-in.
• We record every change to participant records, and who made it.
• Everyone who works with young people is screened, including a Vulnerable Sector Check.

If a privacy breach creates a real risk of significant harm to you, we will tell you and report it to the Office of the Privacy Commissioner of Canada.

11. Your rights

• You can ask to see the personal information we hold about you.
• You can ask us to correct it.
• You can withdraw a permission at any time.
• You can ask us to delete your information, as described in section 9.
• You can ask us to explain how we use your information.

Email hello@amission.ca (subject: "Privacy Officer"). We will answer within 30 days. A parent or guardian can make these requests for a child under 18.

If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca or 1-800-282-1376. If you live in Quebec, you can also contact the Commission d'accès à l'information du Québec.

12. Emails and text messages

We send messages you need for your account and programs, such as sign-in emails, session reminders and parent or guardian approvals. We send newsletters and other updates only if you agree to receive them, and every one has an unsubscribe link, as Canada's Anti-Spam Legislation (CASL) requires.

13. Cookies

We use a small number of cookies to keep you signed in and remember your choices. We do not use advertising cookies. See our Cookie Policy for details.

14. Changes to this policy

We may update this policy. We will post the new version here with a new date and tell account holders about any significant change.

15. Contact us

Anointed Mission · [Mailing address], Ontario, Canada · hello@amission.ca