legal

Privacy Policy

Church Finance

Effective date: 22 April 2026

Church Finance ("the app") is developed by Bighetti. This privacy policy explains what data the app accesses, how it is stored, and your rights.

Data we collect

Church Finance is an offline-first application. All financial data (income and expense entries, categories, organisation details) is created by you and stored locally on your device in an encrypted SQLite database. The app does not collect analytics, usage data, or personal information beyond what you enter.

The following data is stored on your device:

• Financial entries you create (amounts, categories, notes)
• Organisation information (name, member list, roles)
• Cryptographic keys used for encryption and signing, stored in your device's secure keystore

Device permissions

The app requests the following permissions, each used for a specific purpose:

Permission	Purpose
Camera	Scanning QR codes when joining an organisation. The camera is activated only during the QR scan screen and no images or video are stored.
Bluetooth and Wi-Fi	Discovering and communicating with nearby devices for peer-to-peer data sync using Google Nearby Connections.
Location	Required by the Android operating system for Bluetooth and Wi-Fi device discovery. The app does not track, store, or transmit your location.
Biometric / device credentials	Authenticating you when the app is unlocked. Biometric data is handled entirely by the operating system and is never accessed by the app.

How data is stored

• All financial data is encrypted at rest using XChaCha20-Poly1305 authenticated encryption.
• Cryptographic keys are stored in your device's secure keystore (Keychain on iOS, Android Keystore on Android).
• Backups you create are encrypted with a passphrase you choose, using Argon2id key derivation.

Relay server

The app can optionally sync data between devices over a WebSocket relay server. The relay server:

• Acts as a stateless message forwarder only
• Does not inspect, decrypt, store, or log the content of any messages
• Does not store user accounts, profiles, or credentials
• Authenticates devices using Ed25519 challenge-response (no passwords)

Data sharing

Church Finance does not share your data with any third parties. Your financial data never leaves your device except:

• When you explicitly sync with another device in your organisation (via Nearby Connections or the relay server)
• When you explicitly create and share an encrypted backup file

Children's privacy

Church Finance is not directed at children under 13 and does not knowingly collect personal information from children.

Changes to this policy

We may update this policy from time to time. Changes will be reflected in the app and in this document with an updated effective date.

Contact

If you have questions about this privacy policy, contact us at dev@bighetti.org.