EPowered by Ekkle

Privacy Policy

Thesquare

Effective date: February 18, 2026 · Last updated: February 22, 2026

Thesquare uses the Ekkle church community platform to power its app and web experience. All data processing, storage, and security for this app is handled by Ekkle. The full Ekkle Privacy Policy below applies to your use of the Thesquare app.

1. Introduction

This Privacy Policy applies to the Thesquaremobile application and web experience, which is built on and powered by the Ekkle platform. References to “we,” “us,” or “our” refer to Ekkle, the platform operator, and Thesquare as the church community using the platform.

The Ekkle platform operates at ekkle.app and provides church-branded apps through its white-label program. This policy explains what personal data we collect, why we collect it, how we use and protect it, and your rights regarding that data.

2. Information We Collect

2.1 Information You Provide

  • Account information: Name, email address, and password when you register.
  • Profile information: Profile details such as first name, last name, and optional profile photo.
  • Church membership: Your membership and role within Thesquare.
  • Messages: Content of messages you send through in-app messaging. Messages are encrypted (see Section 5).
  • Donation information: When you make a donation, our payment processor (Stripe) collects your payment card details. We receive a transaction record but never store your full card number.
  • Content uploads: Sermons, images, videos, or other media uploaded by church administrators.
  • AI feature inputs: Content you submit to AI-powered features, such as onboarding chat, sermon transcription/metadata generation, moderation checks, and AI assistant prompts.

2.2 Information Collected Automatically

  • Device information: Device type, operating system, app version, and device identifiers for push notifications.
  • Usage data: Pages visited, features used, and general interaction patterns.
  • Log data: IP addresses, browser type, and referring URLs.

2.3 Information from Third Parties

We receive limited information from third-party services that are connected to the Service, such as payment status/details from Stripe and account/channel metadata from connected livestream platforms (e.g., YouTube or Facebook) when church administrators enable those integrations.

3. How We Use Your Information

  • Provide the Service: Authenticate your account, display church content, deliver messages, process donations, and send notifications.
  • Improve the Service: Analyze usage patterns and develop new features.
  • Communicate with you: Send transactional emails (donation receipts, password resets), notification emails based on your preferences, and service-related messages.
  • Safety and compliance: Enforce Terms of Service and comply with legal obligations.

4. How We Share Your Information

We do not sell your personal data. We share data only in these circumstances:

  • With Thesquare administrators: Church admins can see member account and membership data for their church, and donation records for giving features. They cannot read private message content unless they are a participant in that conversation.
  • Payment processor: Stripe processes donations under Stripe's Privacy Policy.
  • Infrastructure providers: Cloud hosting and CDN providers process data on our behalf.
  • Service providers: We use service providers for email delivery (Postmark), push notification delivery (including Apple APNs for iOS), and AI processing (OpenAI) to power specific product features.
  • Legal requirements: We may disclose data if required by law.

Your mobile information will not be sold or shared with third parties for promotional or marketing purposes. Text messaging originator opt-in data and consent will not be shared with any third parties for purposes unrelated to providing you with the services of that campaign. We may share Personal Data, including your SMS opt-in or consent status, with third parties that help us provide messaging services (including platform providers and phone companies).

4A. SMS / Text Messaging for Thesquare

Thesquare may send informational SMS (announcements, prayer requests, and event reminders) to people who opt in on https://thesquare.ekkle.app/sms or via other consent methods the church documents. Thesquare is the message sender; Ekkle provides delivery. Message frequency may vary. Message and data rates may apply. Reply HELP for help, reply STOP to opt out. See SMS Terms.

5. Data Security & Encryption

  • Message encryption (AES-256-GCM): All private messages are encrypted before storage. Plaintext is never saved.
  • Encryption in transit (TLS): All communication is protected by TLS.
  • Password hashing: Passwords are hashed using industry-standard algorithms.
  • Short-lived tokens: JWT access tokens expire after 15 minutes.

6. Data Retention

  • Account data: Retained until you delete your account.
  • Messages: Encrypted message data is retained while the related conversation exists and according to church/community controls.
  • Donation records: Retained as needed for accounting, tax, fraud prevention, and legal compliance.
  • Server logs: Retained for operational and security monitoring, then deleted or anonymized based on operational needs.

7. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, or delete your personal data and to manage your email/push notification preferences. To exercise rights requests, contact us at privacy@ekkle.app.

8. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal data from children under 13. Contact us at privacy@ekkle.app if you believe a child has provided data.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted here and the “Last updated” date will be revised.

10. Contact Us

Questions about this policy? Contact:

← View full Ekkle Privacy PolicyBack to Home