Legal

Privacy Policy

Last updated: 26 August 2026. Applies to c0nnected, operated by Dave Timmermans for the c0nnected initiative, based in the Netherlands.

The short version

We collect as little as possible. We do not sell your data, we do not share it with advertisers, and we do not track you across the web. The pattern of who gathers where for devotionals is sensitive, in some places genuinely dangerous, and we treat it that way. This policy is written to be read, not to protect us.

What we collect, and why

If you only browse public activities, we collect nothing that identifies you. There is no third-party analytics, no advertising pixel, no cross-site tracking. Our server keeps standard, short-lived request logs for security, with email addresses and any personal identifiers hashed.

If you sign in, you give us an email address so we can sign you in (by a one-time magic link or a password you choose). We store:

• your email address, to sign you in;
• a name and a preferred name, if you choose to add them;
• your home community and the languages you speak, if you choose to add them;
• an optional profile photo, if you upload one.

If you are a host or animator, we additionally store the activities you create and your role in a community.

If you take part in an activity or a chat, we store your RSVPs and the messages you send, so the app can show who is coming and carry the conversation. We do not use your browser's live location; when the app helps you find activities in a place, it asks which place, not where you are right now.

What we never do

• We never sell or rent your personal information. It is not an asset to us.
• We never share your data with advertisers or data brokers.
• We never expose your email or phone to other users. When you message a welcome contact, our server relays it — the contact sees your message, not your address, unless you choose to include it.
• We never send you marketing email. The only email we send is the sign-in link and, if you have opted in, the specific notifications you asked for.

Who can see what

Visibility is enforced by the database itself, not merely by the interface.

• Public activities are visible to everyone. Community activities are visible only to signed-in members.
• Welcome contacts show only a name and languages to the public. Phone and email are visible only to signed-in members.
• Your profile is editable by you. Other members see only your preferred name, languages, and photo if you added one.

Keeping the community safe

In chat and other places where members can post, you can report content and block another member. Reports are reviewed and content that breaks the community guidelines is removed. This helps keep c0nnected a welcoming place for everyone.

Your rights

• Export. One button returns everything we hold about you, as a plain file.
• Deletion. One button deletes your profile for real. We anonymise your authorship of past activities so the community's calendar is not broken. This is real deletion, not a hidden flag.
• Correction. You can edit your profile at any time.

Under the GDPR you also have the right to object, to restrict processing, and to complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). We would rather you talk to us first, at [email protected].

Where the data lives

Data is stored with Supabase, and the app is served by Cloudflare. We keep your data only as long as your account exists. Request logs are short-lived.

Children

This tool is intended for adults and for youth participating in community activities with the knowledge of their families and the institutions. We do not knowingly collect data from children without that context.

Changes

If this policy changes in a way that matters, we will tell you plainly, in advance where we can — not by quietly editing a page.

Contact

Dave Timmermans, [email protected], the Netherlands. A real person answers.