1. Overview
Society of the Good Shepherd ("we," "us," or "our") is a 501(c)(3) nonprofit organization operating under the trade name The Historic Faith (DBA). This Privacy Policy describes how we collect, use, and protect your personal information when you use our website at thehistoricfaith.com and The Historic Faith and CCF Calendar mobile apps (together, the "Site").
2. Information We Collect
Information you provide
- Account registration: name, email address, password, and required date of birth when you create an account
- Profile information: optional profile photo, display name, biography, profile visibility, and optional faith notes such as reflections or prayer requests
- Forum posts: content you post in community forums
- Messages and uploads: private message text and files you choose to send, including photos, videos, audio or voice recordings, documents, filenames, and generated transcript text
- Calendar and church tools: calendar events, event descriptions, group and role assignments, preferences, and text you submit to the calendar assistant. Authorized church administrators may enter directory names, contact details, birthdays, family details (including optional stillbirth information), and congregation membership or leadership information. Access to private church records depends on your permissions; these records are not public store-listing content.
- Orders and delivery: donation or order confirmation and history; when you save a delivery address, full name, mailing address, and optional phone number. Payment information is processed by third-party payment providers; we receive confirmation of your donation but do not store credit card numbers
Information collected automatically
- Usage and device data: account, anonymous, session, and push-subscription identifiers; page paths and referrers; feature and course activity; event data; device category; one-way hashes of IP address and browser user-agent; and country when supplied by our network provider
- Cookies and session data: used to maintain your login session and remember preferences
3. How We Use Your Information
We use your information to:
- Provide and improve our educational content and services
- Maintain your account and track course progress
- Moderate community forums
- Send important account-related notifications
- Process donations and provide tax receipts
- Analyze Site usage to improve the user experience
4. Information Sharing
We do not sell, rent, or trade your personal information. We may share information only in the following circumstances:
- Service providers: trusted third parties that help us operate the Site (hosting, payment processing, email delivery, analytics, media storage and delivery, and transcription)
- Calendar AI Co-pilot: if you agree to use Co-pilot, we send your request, text from attached text documents, and details of up to 20 upcoming calendar events to OpenAI to suggest changes. If you record voice, we send the recording to Soniox for transcription; its transcript may be included in a later request to OpenAI. You can decline or withdraw consent in Co-pilot and continue using the calendar without AI. Suggested changes are not saved until you confirm them.
- Embedded media: when a page loads or plays a YouTube or Vimeo player, the provider receives information such as your IP address, browser or device information and identifiers, the referring page, and player activity. Providers may derive approximate location from your IP address and use cookies or similar technologies for playback, analytics, security, and, where applicable, personalization. These providers may process this information for their own purposes under their policies: Google/YouTube and Vimeo. Data can be sent when a player loads, before you press play.
- Payment security: where payment-method features load Stripe, Stripe may receive device identifiers and activity signals for fraud prevention in addition to information you explicitly submit for payment processing. Stripe may use fraud-prevention information across businesses under its privacy policy. These features depend on which pages and account functions you use.
- Legal requirements: when required by law, subpoena, or court order
- Safety: to protect the rights, safety, or property of our users or the public
Society of the Good Shepherd: SMS and WhatsApp privacy
Society of the Good Shepherd operates the messaging services offered through The Historic Faith and TWELVE. When you choose to receive messages, we collect your phone number, the programs and channels you select, your consent and verification records, and message delivery, reply, and opt-out records. These records help us deliver your requested alerts, respond to you, and honor your choices.
We do not sell, rent, or share mobile numbers, messaging opt-in data, or consent records with third parties or affiliates for their marketing, advertising, lead generation, or analytics. The general analytics and information-sharing descriptions above do not permit those uses of messaging subscription data. We disclose only what is needed to providers that deliver and support your requested messages, such as Telnyx, mobile carriers, and Meta/WhatsApp, or as required by law.
Adding a number to an account, donation, church directory, or imported contact list does not subscribe it to SMS or WhatsApp messages. Consent is specific to the selected channel and program. We keep the consent and suppression records needed to respect opt-outs and resolve delivery or compliance questions. See our messaging terms for subscription, STOP, and HELP instructions.
5. Public Content
Content you post in forums or other public areas of the Site is visible to other users. Your display name (not your email address) is shown alongside your posts. Please be mindful of the information you choose to share publicly.
6. Cookies & Analytics
We use cookies to:
- Keep you logged in across visits until you sign out, revoke access, or your remembered login expires
- Remember your site preferences
- Understand how the Site is used (analytics)
We may use PostHog for product analytics. When enabled, PostHog may receive usage events, anonymous or session identifiers, and a THF account identifier for signed-in users; browser storage may use cookies or local storage. You can learn more at posthog.com/privacy.
You can control cookie settings through your browser. Disabling cookies may affect some Site functionality, such as staying logged in.
7. Data Security
We use industry-standard security measures to protect your information, including HTTPS encryption, secure session handling, and access controls. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.
8. Data Retention
We retain your account information for as long as your account is active. If you request account deletion, we will remove your personal data within a reasonable timeframe, except where retention is required by law or for legitimate nonprofit recordkeeping (such as donation records).
9. Children's Privacy
The Site is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us personal information, please contact us so we can remove it.
10. Your Rights
You may:
- Access and update your account information through your profile settings
- Request a copy of the personal data we hold about you
- Request deletion of your account and personal data (we will process deletion requests within 30 days; certain records such as donation history may be retained as required by law)
- Opt out of non-essential communications
To delete your The Historic Faith or CCF Calendar account, follow our account deletion instructions, including how to request deletion without signing in. To exercise other rights, please visit our Contact page.
11. Third-Party Links
The Site may contain links to external websites and embedded third-party services. Embedded media can receive information within the app as described above, without opening an external website. We are not responsible for the privacy practices of third-party sites. We encourage you to review their privacy policies.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Your continued use of the Site after changes constitutes acceptance of the revised policy.
13. Contact
If you have questions about this Privacy Policy, please visit our Contact page.