Syarat & Ketentuan ECC

Versi 2026-05-22 · Diperbarui 1 Juni 2026

Privacy Policy — Els App

Effective Date: May 31, 2026 Last Updated: May 31, 2026

This Privacy Policy describes how Elshaddai Creative Community (ECC) ("we", "us", "our") collects, uses, and protects your personal information when you use the Els App mobile application ("the App"). By using the App, you agree to the practices described in this policy.

1. Information We Collect

1.1 Information You Provide

When you create an account or use the App, we may collect:

  • Phone number (required) — for account identification and OTP verification via WhatsApp
  • Full name (required) — for personalization and member directory
  • Date of birth (optional) — for birthday reminders and age-appropriate ministry recommendations
  • Address (optional) — for branch assignment and pastoral care
  • Email address (optional) — for account recovery and communications
  • Gender (optional) — for ministry and homecell grouping
  • Profile photo (optional) — for member directory display
  • Branch affiliation — to associate you with your local ECC branch
  • Family relationships (optional) — to link family members within the congregation

1.2 Information Generated by Use

As you use the App, we automatically collect:

  • Attendance records — when you check in to services or events via QR scan
  • Event RSVPs and giving history — for events you register for or contribute to
  • App interaction data — features accessed, screens visited (for diagnostics)
  • Device information — device type, operating system, app version (for support and crash reporting)
  • Error logs — anonymized crash reports to improve app stability

1.3 Information We Do NOT Collect

  • We do not collect precise location data (GPS)
  • We do not collect contact lists from your phone
  • We do not access SMS or call logs
  • We do not sell your data to advertisers
  • We do not use third-party advertising trackers
  • We do not collect biometric data (no fingerprint, no face recognition)

2. How We Use Your Information

We use your information to:

  • Authenticate you and maintain your account
  • Provide church services: attendance tracking, event RSVP, online giving
  • Display relevant content based on your branch, ministry, and homecell
  • Send notifications about services, events, and church news
  • Improve App functionality through aggregated, anonymized analytics
  • Comply with legal obligations under Indonesian law (UU No. 27/2022)
  • Respond to your support requests

We do not use your information for:

  • Targeted advertising
  • Profiling for commercial purposes
  • Sale or rental to third parties

3. Sharing of Information

We may share your information only in the following limited circumstances:

3.1 Within ECC Organization

  • Branch administrators can view member information within their branch for pastoral care
  • Homecell leaders (PIC) can view member contact info within their homecell
  • Ministry leaders can view team member information for coordination

3.2 Service Providers

We use trusted third-party services to operate the App:

  • WhatsApp Business API (Meta Platforms) — for OTP delivery
  • Cloud hosting — for App backend infrastructure
  • Email service providers — for transactional emails (account recovery)

These providers are contractually obligated to protect your data and use it only as instructed.

3.3 Legal Requirements

We may disclose your information if required by Indonesian law, court order, or to:

  • Comply with legal processes
  • Protect the rights, property, or safety of ECC, our members, or the public
  • Investigate fraud or security issues

3.4 Business Transfers

In the unlikely event of merger, acquisition, or transfer of assets, your information may be transferred. We will notify you of any such change.

We will never sell your personal information to third parties.

4. Data Security

We implement industry-standard security measures:

  • Encryption in transit — all data transmitted via HTTPS/TLS
  • Encrypted storage — sensitive data encrypted at rest
  • Access controls — role-based access; only authorized staff can view member data
  • Regular security audits — periodic review of our security practices
  • Secure authentication — OTP-based via WhatsApp, no password storage

While we take reasonable steps to protect your data, no system is 100% secure. We cannot guarantee absolute security.

5. Data Retention

  • Account data — retained for as long as your account is active
  • Attendance records — retained for historical and pastoral purposes
  • Giving records — retained for tax compliance (minimum 10 years per Indonesian regulations)
  • Diagnostic logs — automatically purged after 90 days

When you delete your account (see Section 6), we will delete or anonymize your personal data within 30 days, except where retention is required by law.

6. Your Rights

Under the Indonesian Personal Data Protection Law (UU No. 27/2022) and applicable international standards, you have the right to:

  • Access — request a copy of your personal data
  • Correction — request correction of inaccurate data
  • Deletion — request deletion of your account and personal data
  • Restriction — request limitation of data processing
  • Objection — object to specific uses of your data
  • Portability — receive your data in a structured, machine-readable format
  • Withdraw consent — at any time for optional data uses

How to Exercise Your Rights

We will respond to your request within 30 days.

7. Children's Privacy

The App is intended for users aged 13 and above. Users under 18 require parental or guardian consent before registering. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately for deletion.

8. International Data Transfer

ECC has branches in Indonesia and internationally. Your data may be processed in any country where ECC operates. We ensure all international transfers comply with Indonesian data protection law and use appropriate safeguards.

9. Third-Party Links

The App may contain links to external websites (e.g., YouTube live streams, Zoom meetings). We are not responsible for the privacy practices of these external sites. We encourage you to read their privacy policies.

10. Cookies and Similar Technologies

The App does not use cookies. We do not use web tracking pixels or advertising identifiers. The App uses standard mobile device identifiers only for crash reporting and bug diagnostics.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via:

  • In-app notification
  • Email (if you provided one)
  • Updated "Last Updated" date at the top of this policy

Continued use of the App after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data:

13. Governing Law

This Privacy Policy is governed by the laws of the Republic of Indonesia, including but not limited to:

  • Undang-Undang No. 27 Tahun 2022 tentang Pelindungan Data Pribadi (Personal Data Protection Law)
  • Undang-Undang No. 11 Tahun 2008 tentang Informasi dan Transaksi Elektronik (Electronic Information and Transactions Law)
  • Peraturan Pemerintah No. 71 Tahun 2019

Any disputes shall be resolved through Indonesian courts of competent jurisdiction.

Kebijakan Privasi — Els App (Bahasa Indonesia)

Tanggal Efektif: 31 Mei 2026 Terakhir Diperbarui: 31 Mei 2026

Kebijakan Privasi ini menjelaskan bagaimana Elshaddai Creative Community (ECC) ("kami") mengumpulkan, menggunakan, dan melindungi informasi pribadi Anda saat menggunakan aplikasi mobile Els App ("Aplikasi"). Dengan menggunakan Aplikasi, Anda menyetujui praktik yang dijelaskan dalam kebijakan ini.

1. Informasi yang Kami Kumpulkan

1.1 Informasi yang Anda Berikan

  • Nomor HP (wajib) — untuk identifikasi akun dan verifikasi OTP via WhatsApp
  • Nama lengkap (wajib)
  • Tanggal lahir (opsional)
  • Alamat (opsional)
  • Email (opsional)
  • Jenis kelamin (opsional)
  • Foto profil (opsional)
  • Cabang gereja — untuk asosiasi cabang
  • Hubungan keluarga (opsional)

1.2 Informasi yang Dihasilkan Otomatis

  • Catatan kehadiran ibadah dan event
  • Riwayat RSVP event dan persembahan
  • Data interaksi aplikasi (untuk diagnostik)
  • Informasi perangkat (jenis, OS, versi aplikasi)
  • Log error anonim

1.3 Informasi yang TIDAK Kami Kumpulkan

  • Lokasi GPS presisi
  • Daftar kontak telepon
  • SMS atau log panggilan
  • Data biometrik (sidik jari, wajah)
  • Tidak menjual data ke pengiklan
  • Tidak ada tracker iklan pihak ketiga

2. Penggunaan Informasi

Informasi Anda digunakan untuk:

  • Autentikasi dan pemeliharaan akun
  • Layanan gereja: kehadiran, RSVP event, persembahan online
  • Konten relevan berdasarkan cabang, ministry, dan homecell
  • Notifikasi ibadah, event, dan berita gereja
  • Peningkatan fungsi aplikasi melalui analitik agregat & anonim
  • Kepatuhan kewajiban hukum (UU No. 27/2022)
  • Respon permintaan dukungan

3. Pembagian Informasi

Informasi dibagikan terbatas pada:

  • Internal ECC — admin cabang, pemimpin homecell, pemimpin ministry untuk keperluan pelayanan
  • Penyedia layanan — WhatsApp Business API (OTP), cloud hosting, layanan email transaksional
  • Kewajiban hukum — jika diwajibkan hukum Indonesia atau perintah pengadilan
  • Pengalihan bisnis — dalam kasus merger/akuisisi (dengan pemberitahuan)

Kami tidak menjual data pribadi Anda ke pihak ketiga.

4. Keamanan Data

  • Enkripsi dalam transit (HTTPS/TLS)
  • Penyimpanan terenkripsi
  • Kontrol akses berbasis peran
  • Audit keamanan berkala
  • Autentikasi OTP via WhatsApp (tanpa penyimpanan password)

5. Retensi Data

  • Data akun — selama akun aktif
  • Catatan kehadiran — untuk keperluan historis dan pelayanan
  • Catatan persembahan — minimum 10 tahun (kepatuhan perpajakan)
  • Log diagnostik — dihapus otomatis setelah 90 hari

Saat Anda menghapus akun, data pribadi akan dihapus/dianonimkan dalam 30 hari (kecuali yang diwajibkan hukum).

6. Hak Anda (UU PDP No. 27/2022)

Anda berhak untuk:

  • Mengakses salinan data pribadi
  • Mengoreksi data yang tidak akurat
  • Menghapus akun dan data pribadi
  • Membatasi pemrosesan data
  • Menolak penggunaan tertentu
  • Portabilitas data dalam format terstruktur
  • Menarik persetujuan kapan saja untuk penggunaan opsional

Cara menggunakan hak Anda:

Kami akan merespon dalam 30 hari.

7. Privasi Anak

Aplikasi ditujukan untuk pengguna usia 13 tahun ke atas. Pengguna di bawah 18 tahun memerlukan persetujuan orang tua/wali. Kami tidak sengaja mengumpulkan informasi dari anak di bawah 13 tahun.

8. Transfer Data Internasional

ECC memiliki cabang di Indonesia dan internasional. Data Anda mungkin diproses di negara mana pun tempat ECC beroperasi, dengan mematuhi UU PDP Indonesia.

9. Tautan Pihak Ketiga

Aplikasi dapat berisi tautan ke situs eksternal (YouTube live, Zoom). Kami tidak bertanggung jawab atas praktik privasi situs tersebut.

10. Cookie

Aplikasi tidak menggunakan cookie atau tracker iklan. Hanya identifier perangkat standar untuk laporan crash.

11. Perubahan Kebijakan

Kami dapat memperbarui kebijakan ini sewaktu-waktu. Notifikasi via aplikasi, email (jika tersedia), atau update tanggal "Terakhir Diperbarui" di atas.

12. Kontak

13. Hukum yang Berlaku

Kebijakan Privasi ini diatur oleh hukum Republik Indonesia:

  • UU No. 27 Tahun 2022 tentang Pelindungan Data Pribadi
  • UU No. 11 Tahun 2008 tentang ITE
  • Peraturan Pemerintah No. 71 Tahun 2019

Sengketa diselesaikan melalui pengadilan Indonesia yang berwenang.