← Back to Dashboard

Privacy Policy

Last updated: May 2026

OCIA Companion (“the App”) is published by Credoworks LLC (“we,” “us,” or “our”). This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have. It applies to the OCIA Companion web application (ociacompanion.app) and the OCIA Companion mobile apps for Android and iOS.

1. Information We Collect

We collect only what’s needed to operate the service. All information you provide is linked to your account.

  • Account information: your display name, email address, and password (passwords are hashed and stored by our authentication provider — we never see them in plain text).
  • Profile content: optional profile photo and display name you choose.
  • Parish and classroom data: for directors, information about your parish and OCIA program (parish name, location, session schedules, weekly content you author).
  • Faith-formation content you create: discussion posts, journal entries, bookmarks, quiz responses, personal notes, attendance records, and OCIA stage progress. This may indicate religious affiliation, which we treat as sensitive personal information.
  • Direct messages exchanged between sponsors and candidates within a classroom.
  • Documents you upload to your parish’s resource library (curriculum materials, session handouts, etc.).
  • Subscription status: whether your parish is on a free plan, active, past-due, or canceled subscription. Payment card information is collected and stored by Stripe; we never see or store card numbers.
  • Identifiers: a unique user ID generated when you sign up. We do not collect device advertising identifiers (IDFA/IDFV).
  • Diagnostics: crash reports, performance traces, and breadcrumbs (recent actions leading to an error) via Sentry. These are linked to your account so we can investigate issues you report. We do not collect screen recordings or keystrokes.

2. How We Use Your Information

Your information is used only to:

  • Provide and maintain the OCIA Companion service.
  • Facilitate communication between classroom participants (directors, candidates, and sponsors).
  • Display your content (notes, bookmarks, progress, etc.) and track your learning across the OCIA program.
  • Process subscription payments and manage billing on behalf of your parish.
  • Diagnose crashes and performance issues so we can fix them.
  • Respond to support requests you initiate (via email or the in-app support form).

We do not sell, share, or distribute your personal information to third parties for marketing purposes. We do not display advertising in the app, and we do not track you across other companies’ apps or websites.

3. Third-Party Service Providers

We use the following service providers to operate the app. Each processes only the data necessary for its role:

  • Supabase — authentication, database, and file storage. Hosts your account and all parish/classroom data.
  • Stripe — payment processing for parish subscriptions. Stripe collects and stores payment card information directly; we do not.
  • Sentry — crash and error reporting. Receives diagnostic information (linked to your user ID and email) when the app encounters an error.
  • Vercel — web application hosting and serverless function infrastructure.
  • Resend — transactional email delivery (e.g., signup confirmations, announcements from your director).
  • Google Generative AI — used only when a director taps “Generate Quiz.” The session’s title and reflection prompt are sent to Google to draft a quiz; no personal information is shared.

We may also share information when required by law (subpoena, court order) or to investigate violations of our Terms of Service.

4. Data Storage, Security, and Retention

Your data is stored on Supabase infrastructure with encryption at rest and in transit. Row Level Security (RLS) policies in our database ensure each user can only access data they are authorized to view. Personal notes and journal entries are private and visible only to you.

We retain your information for as long as your account is active. If you delete your account, we delete your personal data within 30 days. Some information may be retained longer in backups (up to 90 days) or as required for legal compliance (e.g., financial records related to subscriptions).

5. International Data Transfers

OCIA Companion is operated from the United States, and your data is processed and stored on infrastructure located in the United States. If you are accessing the app from outside the U.S., you understand that your data will be transferred to and processed in the U.S.

6. Children’s Privacy

OCIA Companion is intended for adults participating in the Order of Christian Initiation of Adults. The app is not designed for and is not marketed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, contact us and we will delete it promptly.

7. Religious Affiliation

We recognize that participation in an OCIA program may indicate your religious affiliation, which is considered sensitive personal information under many privacy laws (including GDPR Article 9 and CCPA). We treat this information with the highest level of care: it is visible only within your classroom context, never shared with third-party services beyond what’s strictly required to run the app (e.g., your name appearing in a Sentry error report alongside other diagnostic data), and never used for advertising.

8. Your Rights

You have the right to:

  • Access and export your personal data.
  • Request correction of inaccurate data.
  • Request deletion of your account and associated data — see our account deletion page.
  • Withdraw consent for processing where consent is the lawful basis (you can do this at any time by deleting your account).
  • Lodge a complaint with a supervisory authority if you believe we have violated your rights under applicable data protection law.

Residents of California (CCPA), the European Economic Area, the United Kingdom (GDPR), and other jurisdictions with similar regulations have additional rights. To exercise any of these rights, contact us using the information below.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page and, for material changes, notify you via email or an in-app notice.

10. Contact

For privacy-related inquiries, including data access, correction, or deletion requests, contact us at support@credoworks.net.

OCIA Companion is published by Credoworks LLC, a Florida limited liability company.