Literature Evangelism App
Privacy Policy for the Literature Evangelism App
Last updated: November 1, 2026
Request account deletionThe Central California Conference of Seventh-day Adventists ("CCCSDA," "we," "us," or "our") operates the Literature Evangelism App (formerly called the Youth Rush App), its administrative website, and related services (collectively, the "Service"). This Privacy Policy explains what information the Service handles, how it is used and disclosed, and the choices available to users.
Participating conferences, churches, schools, ministries, and other organizations may administer their own literature evangelism programs through the Service. Their policies and instructions may also apply to information they collect or use through their programs.
Scope
This policy applies to the Literature Evangelism App, its administrative tools, websites that link to this policy, and the cloud services that support them. It applies to program participants, leaders, administrators, personal-mode users, and people whose information is entered during canvassing or ministry activity.
Information We Collect
Depending on how the Service is used, we may collect or process the following categories of information:
- Account and profile information, such as name, email address, phone number, profile photo, date of birth, gender, job description, role, authentication identifiers, and account preferences.
- Organization and program information, such as conference or organization, program, team, leader, territory, route, personal workspace, assignments, permissions, and affiliation history.
- Canvassing and distribution records, such as visits, outcomes, completed territories, route and territory logs, sales, donations, books and dropdowns distributed, products, inventory, drop plans, notes, timestamps, and completed canvassing time entries.
- Customer and community-contact information entered by users, such as name, email address, phone number, delivery or visit address, receipt details, survey responses, follow-up requests, notes, and interests in religious ministry, health, or lifestyle programs.
- Location and map information, which may include precise location, background location when enabled, general areas, geohashes, routes, territory boundaries, visit locations, delivery locations, and location-sharing status.
- Transaction and payment records, such as items, quantities, actual amount received, suggested amount, discounts, payment type, cash denominations, change, check number, donation-only status, receipts, refunds, transaction status, and payment-service references.
- Work, time, and payroll-related information used by participating organizations, such as time entries, eligibility or worker classification, compensation profile, and payroll-system employee identifiers.
- Communications and media, such as support messages, team conversations, push-notification content, profile images, photos or videos submitted through the Service, radio messages, saved voice clips, and any transcripts or related metadata generated for those communications.
- Device, usage, and diagnostic information, such as app and build version, operating system, device model, notification and location permissions, battery or low-power status, network type and quality, connection latency, feature usage, activity timestamps, crash reports, error logs, and radio connection diagnostics.
- Information received from participating organizations, payment and payroll services, ministry follow-up systems, mapping providers, authentication providers, and other integrations connected to the Service.
If you enter information about another person, you are responsible for having appropriate authority to do so and for providing any notice or obtaining any consent required by your organization or applicable law.
How We Collect Information
We collect information directly from users when they create or update an account, record canvassing activity, process or document a transaction, complete a survey or time entry, communicate through the Service, or contact support. Program leaders and administrators may add or update information for the programs they manage. We also receive information automatically from devices and service providers when the Service is used, subject to device permissions and settings.
How We Use Information
We use information to:
- Provide, maintain, personalize, and improve the Service.
- Authenticate users and manage accounts, roles, personal workspaces, organizations, programs, teams, assignments, and permissions.
- Support canvassing, territory planning, visits, deliveries, surveys, follow-up, inventory, product distribution, sales, donations, receipts, refunds, and payment reconciliation.
- Support team coordination, participant safety, location-aware features, live location sharing when enabled, radio communication, messaging, and notifications.
- Support timekeeping, payroll preparation, performance and activity reporting, and program administration.
- Send requested customer receipts and transfer eligible follow-up information to ministry systems when a participating organization enables that integration.
- Create operational statistics and reports, including active-user counts and combined financial and distribution totals described below.
- Detect, investigate, and prevent errors, abuse, fraud, security incidents, and violations of program rules.
- Provide support, communicate service or policy changes, meet legal and accounting obligations, and enforce our terms and agreements.
Location Information
Some features use precise or approximate location to record visits, map territories, support routes and deliveries, verify activity locations, and help teams coordinate. With permission, the app may collect location while it is in use and, for features that require it, in the background.
Organization and program leaders may see location or location-derived activity for users in programs they administer, according to assigned roles and sharing settings. Personal-mode users may have separate controls for sharing general areas, completed territories, visit outcomes, follow-up interests, or live location with affiliated organizations. Users can change device location permissions and available in-app sharing settings, although disabling them may limit features.
Payments, Donations, and Financial Records
The Service records sales, donations, distribution quantities, refunds, and payment status so users and programs can operate and reconcile canvassing activity. Card payments may be processed by Square. Square receives payment-card information under its own privacy practices. The Literature Evangelism App is not intended to store complete payment-card numbers or card security codes.
We may store transaction identifiers, payment status, amount, receipt links, Square location or account references, authorization credentials, and related verification information needed to connect the Service with Square. The Service may also record cash, check, or other payment details entered by a user. Access credentials are restricted to authorized systems and personnel.
Communications, Radio, and Notifications
The Service may support team messaging, push notifications, live radio, and saved voice messages. Communications can include text, audio, transcripts, sender and recipient information, timestamps, delivery status, and diagnostic metadata. Team members, leaders, or administrators may receive or review communications according to the feature used, program roles, and safety or support needs. Voice and messaging providers process this information to transmit or store the communication.
How We Disclose Information
We may disclose information in the following circumstances:
- To authorized organization, program, and team leaders who need it to administer their programs, support participants, coordinate activity, prepare payroll, manage inventory, review safety issues, or perform other assigned duties.
- To authorized CCCSDA platform administrators for account management, support, security, auditing, service operation, and platform reporting.
- According to a personal-mode user's affiliation and sharing choices. Private notes, receipt settings, payment accounts, and full personal sales records are not included in ordinary organization views unless a separate feature or permission expressly provides access.
- To service providers that host or support the Service, including Google and Firebase, Apple, Sentry, Square, LiveKit, email delivery providers, mapping providers, and other vendors that provide authentication, storage, cloud computing, analytics, diagnostics, communications, payments, receipts, or maps.
- To participating ministry or follow-up systems, such as Thrive, when an organization enables the integration and a user records information for that purpose.
- When required by law, legal process, or a valid government request, or when reasonably necessary to protect users, the public, our rights, or the security and integrity of the Service.
- In connection with a merger, reorganization, transfer, or other change involving the operation of the Service, subject to appropriate protections.
We do not sell or rent personal information. We do not disclose personal information to third parties for their own targeted advertising.
Personal Canvasser Platform Reporting
Authorized CCCSDA platform administrators may use a Personal Canvassers report to understand use of personal canvassing mode, including users who are not affiliated with an organization. The report may show personal workspace owners by name, email address, workspace name, most recent qualifying activity, and activity indicators. A user is counted as active when the Service records a sale, completed visit, territory log, or completed canvassing time entry within the reporting period. Opening the app, editing an existing record, or leaving a timer unfinished does not by itself count as activity.
The report may also show combined totals for books distributed, dropdowns distributed, and total money received for selected reporting periods. Total money received may include book proceeds, dropdown proceeds, and donation-only receipts, with refunds and transaction status handled consistently with the Service's statistics. These totals are calculated across users and do not include per-user financial or distribution totals or customer-level transaction details.
Combined totals do not guarantee anonymity. An administrator may be able to infer information when a report covers a small number of users or when the administrator already knows related facts.
Analytics and Diagnostics
We and our service providers may use usage events, device information, crash reports, performance data, and aggregated statistics to understand how the Service is used, diagnose failures, improve features, maintain security, and plan capacity. Analytics and diagnostic records may be linked to an account, device, organization, or program when needed for those purposes.
Data Retention
We retain information for as long as reasonably necessary to provide the Service, operate participating programs, maintain accurate sales, donation, payroll, inventory, territory, and accounting records, resolve disputes, prevent abuse, support safety and security, and meet legal obligations. Retention may vary by record type and by the requirements of the participating organization.
When you request account deletion, we remove your sign-in account, profile and associated personal data eligible for deletion, including private testimony drafts and source recordings. Shared organizational financial, sales, donation, payroll, inventory and program audit records may be retained, with only the attribution needed to understand those records, where a specific permitted purpose requires retention. Shared or published testimony articles may retain the author's name and chosen byline, together with publication approvals and author or guardian consent evidence, within the existing publication permissions. Account deletion does not expand those permissions or reverse a withdrawal. We explain specifically retained categories and their purposes when responding to your request.
For an account deletion request, the following retention periods and end conditions apply to specifically retained records:
- Ordinary shared financial and audit records: 7 years after the close of the fiscal year to which the record relates, or longer where the governing record schedule, law or a legal hold requires. This is an organizational default, not a claim that every record is legally subject to 7 years. Payroll, property and archival master records follow their governing schedules. We keep only the attribution needed for the permitted purpose.
- Shared or published articles, the author's name and chosen byline, publication approvals and author or guardian consent evidence: while authorized publication or editorial use continues. After the final authorized use, we retain only evidence needed for a specific unresolved rights claim or legal hold until that purpose ends. Existing publication permissions and withdrawals continue to govern.
- Detailed app deletion-case records and cleanup diagnostics: 90 days after the case is fully closed and all review items are resolved, then minimized to the security record described below. A specific documented claim or legal hold may require longer retention. Open cases and pending cleanup are not erased or treated as completed because of age. This 90-day period does not promise deletion of support email or mailbox archives.
- Minimal blocked-account security record: only the account identifier, deletion generation and time, and the status and scope needed to prevent restoration or reuse of the deleted account or data. It excludes names, email addresses, message or recording contents, location histories and payment credentials. We keep it while needed to prevent restoration, and remove it when the app is decommissioned and restoration or reuse is no longer possible.
- Unclear copies or provider connections require staff review within the original 30-calendar-day deletion window. We identify the owner, purpose and end condition of each specifically retained item in our response. A technical failure does not fulfill the deletion commitment or silently extend that window.
Current verified service settings provide 7-day soft deletion for the default app storage and radio-audio storage; separate testimony-media storage has soft deletion disabled. Database recovery history is 1 hour, point-in-time recovery is disabled, and no managed database backup schedules or backups were listed. Ordinary Cloud Logging records are retained for 30 days and required infrastructure audit logs for 400 days under a locked retention setting. These are existing service settings, not new active-user purge rules or a guarantee that every copy expires on the same schedule. Recoverable copies remain access-restricted; eligible deletions must be reapplied before restored data is used.
These verified settings do not establish an expiry period for manual or off-project exports, device copies, caches, support mailboxes or email archives, or third-party services. We review those copies and connections for the request, delete eligible data, and explain any specifically retained category, purpose and end condition. We do not promise a universal 90-day backup expiry.
The deletion-request timeframes and category-specific retention choices in this update apply only when you request deletion. They do not establish automatic deletion of active accounts or an account-age or inactivity-based purge of active users' data. The acknowledgment and eligible-deletion commitments in section 13 remain measured from receipt of the request.
Security
We use administrative, technical, and organizational safeguards designed to protect information, including authentication, role-based access, server-side authorization, encryption provided by our platforms, and restricted access to service credentials. No system can guarantee complete security. Users should protect their devices and login credentials and promptly report suspected unauthorized access.
Your Choices and Account Deletion Requests
Depending on the feature and your role, you may be able to update profile information, manage notification and location permissions, change personal-mode sharing settings, stop live location sharing, or disconnect a payment integration. Device settings control access to location, microphone, camera, photos, and notifications.
You may request access to, correction of, or deletion of your personal information or account by contacting us. We may need to verify your identity and may direct program-record requests to the participating organization that administers the relevant program. Some information may be retained where permitted or required for legitimate operational, accounting, payroll, security, or legal purposes.
To request deletion of your Literature Evangelism App account and associated personal data, use Settings > Delete Account in the app, or email youthrush@cccsda.org. You can use email without reinstalling the app or signing in. Include the email address associated with your account and state that you want your account deleted. Do not send your password, payment credentials or identity documents with the initial request; we will contact you if further identity verification is needed.
We will acknowledge your deletion request within two business days of receipt and delete your account and associated personal data eligible for deletion within 30 calendar days of receipt. Identity verification does not restart the 30-day period. Within the same period, we will explain any specifically retained information and its purpose, and notify you of any unresolved cleanup issue. Notification of an issue does not by itself fulfill our deletion commitment. Acknowledgments and follow-up are handled by staff through youthrush@cccsda.org; accepting an in-app request does not mean all associated data has already been deleted.
Email a deletion requestyouthrush@cccsda.org
Children and Minors
The Service is intended for adults and for minors age 13 or older who participate with the permission and supervision required by their parent or legal guardian and participating organization. It is not intended for children under 13. We do not knowingly collect personal information from a child under 13 without legally sufficient authorization. If you believe a child under 13 has provided personal information through the Service, contact us so we can investigate and take appropriate action.
Changes to This Policy
We may update this policy as the Service, our practices, or legal requirements change. We will post the revised policy through the Service or at the location where this policy is published and update the date above. When appropriate, we may provide additional notice in the app or through another communication channel.
Contact Us
For privacy questions or requests, contact the Central California Conference of Seventh-day Adventists at youthrush@cccsda.org. If your question concerns a participating organization's program, you may also contact that organization directly.