Privacy Policy
Effective May 1, 2024
Last Updated: July 14, 2026
Decision Point Ministries (“Decision Point,” “we,” “our,” or “us”) respects your privacy and is committed to protecting Personal Information collected through our websites, mobile applications, browser-based applications, donation pages, and related digital services.
This Privacy Policy explains what information we collect, how we collect and use it, when we disclose it, how long we retain it, the choices and rights available to users, and how to contact us.
This Privacy Policy applies to:
- decisionpoint.org and related pages or subdomains operated by Decision Point;
- the Gospel App mobile application;
- the browser-based version of the Gospel App; and
- other websites, forms, applications, donation tools, and online services that link to this Privacy Policy.
Collectively, these are referred to as the “Services.”
By accessing or using the Services, you acknowledge that you have read this Privacy Policy. Where applicable law requires consent for a particular activity, we will request that consent separately.
PRIVACY POLICY SUMMARY
This summary highlights our principal practices. Please read the full policy for complete details.
- We collect information that users provide, including names, email addresses, phone numbers, mailing or physical addresses, account information, communications, form submissions, and donation information.
- We collect technical and Usage Information, such as IP address, browser or device information, app version, screens or pages visited, features used, and interactions with content.
- Certain optional ministry features may involve prayer requests, testimonies, faith responses, or other information that may reveal religious beliefs or other sensitive matters.
- We use information to operate and secure the Services, manage accounts, improve content and functionality, communicate with users, administer donations, issue receipts, and support Decision Point’s ministry mission.
- We use service providers for functions such as hosting, analytics, authentication, communications, donor management, and payment processing. Donation providers may include Virtuous Raise, PayPal, and related payment-processing partners.
- We do not sell Personal Information. We do not share Personal Information for cross-context behavioral advertising.
- Depending on location, users may have rights to access, correct, delete, restrict, object to, or obtain a copy of their Personal Information, and to withdraw consent where applicable.
DEFINITIONS
“Personal Information” means information that identifies, relates to, describes, can reasonably be linked with, or may reasonably be associated with an individual or household. Depending on applicable law, similar terms may include “personal data” or “personally identifiable information.”
“Sensitive Information” means Personal Information subject to additional protection under applicable law, which may include religious beliefs, precise location, financial account credentials, health information, or certain information relating to children.
“Usage Information” means technical, diagnostic, and interaction information generated when a user accesses or interacts with the Services.
“User,” “you,” and “your” mean an individual who accesses or uses the Services.
1. INFORMATION WE COLLECT
We collect different categories of information depending on which Service you use and how you interact with it.
1.1 Personal and Account Information
Personal Information may include:
- name;
- email address;
- phone number;
- mailing address, billing address, or physical address;
- username, account identifier, or login credentials;
- age or date-of-birth information, if requested for a particular feature;
- organization, school, church, club, or ministry affiliation;
- communication preferences; and
- information voluntarily submitted through registration, profiles, forms, surveys, messages, support requests, or other interactions with the Services.
Providing Personal Information is generally voluntary, but certain features may not be available without the information needed to provide them.
1.2 Donation and Transaction Information
When you make a donation or other financial contribution through the Services, we or our service providers may collect:
- name;
- email address;
- phone number;
- mailing or billing address;
- donation amount and frequency;
- payment method type;
- transaction date, status, and identifier;
- donor preferences, campaign designations, or comments;
- information needed to issue receipts and maintain charitable-contribution records; and
- payment-card, bank-account, PayPal, or other payment information submitted to the applicable payment provider.
Payment credentials are generally collected and processed by third-party payment providers, which may include Virtuous Raise, PayPal, and their underlying payment-processing partners. Decision Point may receive transaction and donor information but does not intend to retain full payment-card numbers or card security codes on its own systems.
We use donation information to process and administer donations, provide confirmations and receipts, communicate with donors, prevent fraud, resolve transaction issues, maintain financial and charitable-giving records, and satisfy legal, tax, accounting, audit, and reporting obligations.
1.3 Usage Information
We may automatically collect information about use of the Services, including:
- pages or screens viewed;
- content accessed;
- features used;
- buttons, links, or prompts selected;
- dates, times, and duration of sessions;
- referral source;
- search or navigation activity;
- app opens, return visits, and feature-completion events; and
- other interaction data used to understand service performance and engagement.
1.4 Device, Browser, and Technical Information
Technical information may include:
- IP address;
- device type and model;
- browser type and version;
- operating system;
- mobile carrier or network information;
- application version;
- device or advertising identifiers, where enabled and permitted;
- language and time-zone settings;
- crash, performance, security, and diagnostic data; and
- approximate geographic region inferred from IP address or similar technical information.
1.5 Ministry Engagement and Sensitive or Voluntary Submissions
Some features may permit users to voluntarily submit information related to faith or ministry engagement, including:
- prayer requests;
- testimonies;
- responses to gospel, ministry, or outreach prompts;
- spiritual decisions or reflections;
- participation in ministry challenges or activities; and
- other personal reflections or communications.
These submissions are optional and are not required for general use of the Services. They may reveal religious beliefs or contain other Sensitive Information. Users should share only information they are comfortable providing.
Users should avoid including Personal Information about another individual unless they have permission or another lawful basis to provide it. Information submitted through these features may be viewed or processed by authorized Decision Point staff, ministry personnel, volunteers, or service providers as necessary to respond to a request, provide support, administer a ministry feature, maintain safety, or support ministry engagement.
1.6 Cookies and Similar Technologies
Our websites and browser-based Services may use cookies, local storage, pixels, tags, software development kits, and similar technologies. These technologies may support account sessions, security, preferences, analytics, performance, communications, and advertising measurement.
Strictly necessary technologies may operate without consent where permitted by law. Where required, we request consent before using non-essential analytics or advertising technologies. Users may be able to manage preferences through a consent banner, browser controls, device settings, or other tools we provide.
1.7 Information from Third Parties
We may receive information from third parties, including:
- authentication providers;
- payment and donation providers;
- analytics and technology vendors;
- communications providers;
- churches, schools, clubs, ministry partners, or event organizers;
- social media or advertising platforms; and
- individuals who refer, register, or communicate information about another person.
Information received from third parties is handled in accordance with this Privacy Policy and any applicable contractual or legal requirements.
2. HOW WE COLLECT INFORMATION
We may collect information:
- directly from you when you create an account, complete a form, make a donation, contact us, register for an event, request support, or submit content;
- automatically through the Services using cookies, analytics tools, logs, software development kits, and similar technologies;
- from service providers and ministry partners that support our operations; and
- from public or other lawful sources where appropriate.
3. HOW WE USE INFORMATION
We may use information to:
- operate, maintain, and provide the Services;
- create, authenticate, and manage user accounts;
- personalize content and preserve user preferences;
- provide ministry content, challenges, tools, and requested features;
- respond to inquiries, prayer requests, support requests, and other communications;
- communicate about account activity, ministry updates, events, campaigns, service changes, security matters, and support;
- process donations and issue donation acknowledgments or receipts;
- maintain donor, financial, accounting, tax, and audit records;
- analyze usage, engagement, effectiveness, and service performance;
- diagnose errors, prevent abuse, detect fraud, and improve security;
- develop, test, and improve the Services and ministry resources;
- measure advertising and outreach campaigns, where permitted;
- comply with legal obligations and enforce applicable terms; and
- support the mission and ministry activities of Decision Point.
We seek to collect only information reasonably necessary for the purposes described in this Privacy Policy.
We do not sell Personal Information. We do not share Personal Information for cross-context behavioral advertising.
Users are responsible for ensuring that information they submit is accurate and that they have the right to provide it. This statement does not limit any obligations Decision Point may have under applicable privacy law when it receives Personal Information relating to another person.
4. LEGAL BASES FOR PROCESSING
Where applicable law requires a legal basis, we process Personal Information under one or more of the following bases:
- Consent: where you have given permission for a specific activity, such as certain analytics, communications, or processing of optional Sensitive Information.
- Contractual necessity: where processing is needed to provide an account, service, feature, donation transaction, or other requested interaction.
- Legitimate interests: where processing is reasonably necessary to operate, secure, evaluate, and improve the Services, administer Decision Point’s ministry, communicate appropriately, prevent fraud, or protect users, and those interests are not overridden by your rights.
- Legal obligation: where processing is necessary to comply with legal, accounting, tax, regulatory, reporting, or recordkeeping requirements.
- Protection of rights and safety: where processing is necessary to protect the rights, safety, or security of Decision Point, users, or others.
- Other lawful grounds recognized under applicable law.
Certain optional faith-related submissions may reveal religious beliefs or other Sensitive Information. Where additional authorization is required, we rely on an appropriate legal basis or condition, which may include explicit consent.
Where we rely on consent, you may withdraw that consent at any time by contacting us or using available account, communication, cookie, or privacy controls. Withdrawal will not affect the lawfulness of processing performed before withdrawal. Some features may become unavailable when the information is necessary to provide that feature.
5. HOW WE DISCLOSE INFORMATION
We may disclose information:
- to service providers and contractors that perform functions on our behalf;
- to ministry partners, event organizers, churches, schools, or clubs when necessary for a user-requested activity and permitted by law;
- to professional advisers, auditors, insurers, legal counsel, accountants, and consultants;
- to government authorities, law enforcement, courts, or regulators where required by law or valid legal process;
- when reasonably necessary to investigate fraud, security incidents, abuse, threats, or violations of applicable terms;
- to protect the rights, property, safety, or integrity of Decision Point, users, or others;
- in connection with a merger, reorganization, asset transfer, financing, or similar organizational transaction, subject to appropriate safeguards; and
- with your direction or consent.
We may disclose aggregated or de-identified information that cannot reasonably identify an individual, subject to applicable law.
6. SERVICE PROVIDERS AND THIRD-PARTY SERVICES
We use third-party service providers to help operate the Services. Depending on how you interact with us, these providers may support:
- cloud infrastructure, hosting, databases, and content delivery;
- account authentication and identity management;
- analytics, performance monitoring, and error reporting;
- email, text messaging, push notifications, and other communications;
- customer, donor, or ministry relationship management;
- donation forms, payment processing, fraud prevention, and transaction administration;
- security, spam prevention, and technical support;
- event registration and form processing; and
- other technical or administrative functions necessary to operate the Services.
Our donation and payment providers may include Virtuous Raise, PayPal, and other payment processors or financial-service providers used by Decision Point from time to time.
When you make a donation, payment details may be submitted directly to the applicable payment provider. Decision Point may receive related transaction information, such as name, contact information, billing address, donation amount, payment method type, transaction identifier, donation status, and receipt information.
Third-party providers may process information under their own terms and privacy notices as well as under agreements with Decision Point. Users should review the privacy notices of payment providers and other independent services they choose to use.
The Services may link to third-party websites, platforms, or services that Decision Point does not control. We are not responsible for the privacy, security, or content practices of those independent services.
7. INTERNATIONAL DATA TRANSFERS
Decision Point is based in the United States, and information may be transferred to, stored in, or processed in the United States and other countries where Decision Point or its service providers operate.
Those countries may have privacy laws that differ from the laws of the country where a user is located. Where required, we use appropriate safeguards for international transfers, which may include contractual protections, approved transfer mechanisms, assessments of the receiving jurisdiction, or another method recognized by applicable law.
8. DATA RETENTION
We retain Personal Information for as long as reasonably necessary to:
- provide and maintain the Services;
- fulfill the purposes described in this Privacy Policy;
- maintain accounts and user preferences;
- respond to inquiries and support requests;
- administer ministry programs and engagement;
- maintain donation, accounting, tax, audit, and legal records;
- prevent fraud, maintain security, and resolve disputes; and
- comply with legal obligations.
Retention periods vary based on the type of information, the purpose for which it was collected, legal requirements, and operational needs. When information is no longer needed, we take reasonable steps to delete, de-identify, or anonymize it, unless continued retention is permitted or required by law.
Backup copies may remain for a limited period until they are overwritten or deleted according to standard backup processes.
9. PRIVACY RIGHTS AND CHOICES
Depending on where you live and subject to applicable exceptions, you may have rights to:
- confirm whether we process your Personal Information;
- access Personal Information we hold about you;
- correct incomplete, inaccurate, or outdated information;
- request deletion or anonymization;
- obtain a portable copy of certain information;
- object to or restrict certain processing;
- withdraw consent where processing is based on consent;
- opt out of certain marketing communications;
- request information about categories of information collected, purposes of use, and parties to whom information is disclosed;
- request review of certain automated decisions, if we engage in decision-making covered by applicable law; and
- lodge a complaint with an applicable privacy or data-protection authority.
These rights may arise under laws including the European Union General Data Protection Regulation, the UK GDPR, Brazil’s Lei Geral de Proteção de Dados Pessoais, and other applicable privacy laws.
To exercise a privacy right, contact us using the information in Section 17. Please identify the Service involved and describe your request. We may verify your identity or authority before fulfilling a request.
We will respond within the period required by applicable law. A request may be limited or denied where an exception applies, including where retention is necessary for legal, accounting, tax, fraud-prevention, security, freedom-of-expression, public-interest, or recordkeeping purposes.
9.1 Communication Choices
You may unsubscribe from promotional email communications using the unsubscribe link in the message. You may opt out of text messages by following the instructions in the message, such as replying STOP, where supported. We may continue to send non-promotional communications relating to accounts, donations, security, support, or other requested transactions.
9.2 Cookie and Device Choices
Users may manage cookies through browser settings or through any consent-management controls we provide. Mobile devices may provide settings for notifications, location, advertising identifiers, or similar permissions. Disabling certain technologies may affect Service functionality.
10. CALIFORNIA PRIVACY RIGHTS
Decision Point is a nonprofit organization. The California Consumer Privacy Act, as amended by the California Privacy Rights Act, generally does not apply directly to nonprofit organizations. Nevertheless, Decision Point voluntarily provides California residents with the rights described in this section, subject to applicable exceptions and operational limitations.
California residents may request:
- disclosure of the categories and specific pieces of Personal Information collected about them;
- correction of inaccurate Personal Information;
- deletion of Personal Information collected from them;
- information about the purposes for which Personal Information is used; and
- information about categories of third parties to whom Personal Information is disclosed.
Decision Point does not sell Personal Information and does not share Personal Information for cross-context behavioral advertising.
California residents may submit requests using the contact information in Section 17. We may take reasonable steps to verify identity and authority before responding.
California’s “Shine the Light” law may permit residents to request certain information regarding disclosure of Personal Information to third parties for their own direct-marketing purposes. Decision Point does not disclose Personal Information to third parties for those third parties’ own direct-marketing use in the manner contemplated by that law.
11. BRAZILIAN PRIVACY RIGHTS
Individuals located in Brazil may have rights under the Lei Geral de Proteção de Dados Pessoais (“LGPD”), including, where applicable, the rights to:
- confirm whether their Personal Information is being processed;
- access their Personal Information;
- correct incomplete, inaccurate, or outdated information;
- request anonymization, blocking, or deletion of unnecessary, excessive, or unlawfully processed information;
- request portability, where available and subject to applicable regulations;
- receive information about entities with which information has been shared;
- receive information about the possibility and consequences of withholding consent;
- withdraw consent;
- request deletion of information processed based on consent, subject to legal exceptions;
- object to processing conducted in violation of the LGPD; and
- request review of certain decisions made solely through automated processing.
Brazilian users may submit requests using the contact information in Section 17 and may have the right to raise concerns with Brazil’s Autoridade Nacional de Proteção de Dados (“ANPD”).
12. ANALYTICS, ADVERTISING, AND AUTOMATED DATA COLLECTION
We may use analytics, performance-monitoring, and campaign-measurement tools to understand how the Services are used, diagnose technical problems, measure outreach, and improve functionality and reliability.
These tools may collect device information, IP address, app version, usage patterns, referral information, interactions with features, and other technical data. Information may be aggregated or pseudonymized, but pseudonymized information may still qualify as Personal Information under applicable law.
We do not use analytics information to sell Personal Information or to share Personal Information for cross-context behavioral advertising.
Decision Point may conduct paid advertising and use tools that measure whether an advertisement led to a website visit, registration, donation, or other interaction. Where required by law, non-essential advertising or measurement technologies will be used only after obtaining appropriate consent or providing required opt-out mechanisms.
13. DATA SECURITY
We use reasonable administrative, technical, and organizational safeguards designed to protect Personal Information from unauthorized access, loss, misuse, alteration, or disclosure. Safeguards may include access controls, authentication, encryption in transit, vendor oversight, backups, monitoring, and staff procedures appropriate to the nature of the information.
No method of transmission or storage is completely secure. We cannot guarantee absolute security.
Users are responsible for maintaining the confidentiality of account credentials and should notify us if they believe an account or interaction with the Services has been compromised.
14. DATA BREACH RESPONSE
We maintain procedures intended to identify, assess, contain, and respond to security incidents. Where required by applicable law, we will notify affected individuals, regulators, or other authorities of a breach involving Personal Information within the legally required timeframe.
15. CHILDREN’S PRIVACY
The Services are not directed to children under 13, and we do not knowingly collect Personal Information from a child under 13 without appropriate parental or guardian consent where required.
If we learn that we collected Personal Information from a child under 13 without required consent, we will take reasonable steps to delete it.
Different countries may define the age at which a child can independently consent to processing differently. Where a Service is offered to minors in a jurisdiction requiring parental authorization or additional protections, Decision Point may request age information, obtain parental or guardian consent, limit available features, or take other steps required by applicable law.
Parents or guardians who believe a child provided Personal Information without appropriate authorization may contact us using the information in Section 17.
16. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy to reflect changes in our Services, practices, technologies, providers, or legal obligations. When we make changes, we will revise the “Last Updated” date.
Where required, we will provide additional notice of material changes through the Services, by email, or through another appropriate method. If applicable law requires new consent, we will request it.
17. CONTACT US
Questions, concerns, or privacy requests may be directed to:
Decision Point Ministries
Email: info@decisionpoint.org
Website: decisionpoint.org
Mailing Address: PO Box 1118 Wheaton, IL 60187
Please include enough information for us to understand and respond to your request. We may need to verify your identity or authority.
18. JURISDICTION-SPECIFIC COMPLAINTS
Depending on location, you may have the right to contact a privacy or data-protection regulator, including:
- the relevant supervisory authority in the European Economic Area;
- the UK Information Commissioner’s Office;
- Brazil’s Autoridade Nacional de Proteção de Dados;
- the Office of the Privacy Commissioner of Canada;
- the Office of the Australian Information Commissioner;
- the Office of the Privacy Commissioner of New Zealand;
- the National Privacy Commission of the Philippines;
- Nigeria’s Data Protection Commission;
- India’s competent data-protection authority, once applicable procedures are in force; or
- South Africa’s Information Regulator.
This list is illustrative and may change as laws and regulatory structures develop.