Privacy Policy
Last updated: May 17, 2026
GroupKith ("we," "us," "our") makes a private community app for small groups. This policy explains what information we collect, how we use it, and the choices you have. Plain language first; the technical detail is in each section.
The short version
- We do not run ads. We do not sell personal information to anyone.
- Communities are private by default. What you post is visible to other members of that community, and that is it.
- We collect the minimum needed to operate the service: account info and the content you post in order to keep the app functional.
- You can delete your data at any time.
Information we collect
Information you give us
- Account info — your name, email, optional profile photo, and (if you set one) a password.
- Content you post — messages, prayer requests, events, RSVPs, reactions, replies, and attached photos.
- Community memberships — which groups you belong to and your role in each.
Information collected automatically
- Push tokens — when you opt in to notifications, we store a device token (provided by Apple/Google) so we can deliver them.
What we don't collect
- Your contacts, location, microphone, or camera unless you explicitly grant access for a specific feature (e.g. attaching a photo).
- Third-party tracking pixels or ad-network identifiers. We don't run any.
How we use information
- To operate the service — deliver messages, sync devices, send the notifications you opted into.
- To prevent abuse — rate-limiting, spam and harassment review.
- To communicate with you — service notices, security alerts, and product updates.
How we share information
We do not sell personal information. We do not share content with advertisers, data brokers, or analytics resellers.
We may disclose information if required by law (subpoena, court order), or to protect the safety, rights, or property of GroupKith, our users, or the public. When permitted by law we will notify affected users.
Where data is stored
GroupKith data is stored on cloud infrastructure in the United States. If you access the service from elsewhere, you consent to your information being transferred to and processed in the United States.
Security
Connections to GroupKith are HTTPS-only. Authentication uses signed bearer tokens with short-lived access tokens and rotating refresh tokens. Data in transport is encrypted. No system is perfectly secure; we will notify users in the event of a breach as required by applicable law.
To be clear about what this does and doesn’t mean: GroupKith is not end-to-end encrypted. We can technically access the content you post in order to operate the service, respond to abuse reports, and meet legal obligations. What we will never do is run ads against it, sell it, or mine it to build a profile of you. End-to-end encryption for direct messages is something we’re exploring for the future, and we’ll say so plainly here if it ships.
Your rights and choices
- Access & export. Request a copy of your data from within the app or by emailing privacy@groupkith.com.
- Correction. You can edit your profile and content directly in the app.
- Deletion. You can delete your account at any time from Settings. Deletion removes your account and personal posts.
- Push opt-out. Manage in your device settings at any time.
Children's privacy
GroupKith is not directed to children under 13. We do not knowingly collect information from children below that age. If you believe a child has provided information to us, contact us and we will delete it.
Changes
We may update this policy from time to time.
Contact
Questions or requests: privacy@groupkith.com.