Privacy Policy

TrueLite is a platform operated by City & Banner that helps Christian ministries capture and follow up on form submissions — including salvations, testimonies, RSVPs, pledges, and any other form a ministry creates. We process personal data in connection with providing this service.

For questions about this policy or how your data is handled, contact us at privacy@trueliteapp.com.

This policy applies to two groups of people:

• Ministry accounts — individuals and organisations who sign up to TrueLite to create forms, manage submissions, and follow up with respondents.
• Form respondents — members of the public who submit a form published by a ministry using TrueLite. The ministry that published the form is the data controller for respondent data; TrueLite acts as a data processor on their behalf.

From ministry accounts:

• Name, email address, and profile photo (collected at sign-up)
• Organisation name, logo, public profile slug, and social links
• Team member details (names, email addresses, roles) when you invite staff
• Usage data and analytics events generated while using the dashboard

From form respondents (via ministry-published forms):

• Any fields the ministry includes on their form — typically name, email address, and phone number
• Free-text responses and custom field answers
• Audio recordings and text transcripts, where the form includes a guided confession or testimony feature
• Approximate location, where collected by the form

Automatically collected:

• IP address and basic device/browser information
• Page views, clicks, and interaction events (via PostHog analytics)
• Cookies — see the Cookies section below

Under the UK GDPR and EU GDPR, we rely on the following legal bases:

• Contract — processing your account data is necessary to provide the TrueLite service you have signed up for.
• Legitimate interests — we use analytics and usage data to improve the platform, prevent abuse, and communicate product updates. We have balanced this against your privacy interests and concluded that it is proportionate.
• Consent— for form respondents, the legal basis for processing rests on the consent given when submitting the ministry's form. Ministries are responsible for obtaining valid consent from their respondents. For optional cookies and marketing communications, we rely on your explicit consent.
• Legal obligation — where we are required to retain records by law.

Some forms include a guided confession or testimony feature powered by speech-to-text technology. Where you use this feature, an audio recording is captured in your browser and streamed in real time to AssemblyAI (US) for transcription. A text transcript is generated and both the audio file and the transcript are stored securely and associated with your form submission.

Audio data is particularly sensitive — it may include religious beliefs and biometric voice data. We treat it accordingly: access is restricted to the ministry that published the form and to TrueLite staff for support purposes only. Audio files and transcripts are automatically deleted 90 days after your submission. The submission record itself (without audio or transcript) is retained in line with the How long we keep your data section below.

You may request earlier deletion of your recording at any time by emailing privacy@trueliteapp.com (see Your rights below).

We retain data for as long as is necessary for the purposes set out in this policy:

• Ministry account data — retained for the lifetime of the account, and for up to 90 days after account deletion before being purged.
• Form submissions and respondent data— retained for as long as the ministry's account is active. Ministries may delete individual submissions at any time. When a ministry account is deleted, all associated submission data is scheduled for deletion.
• Audio recordings — the audio file and text transcript are automatically deleted 90 days after submission. The submission record itself is retained in line with the Form submissions and respondent data entry above.
• Analytics data — retained in PostHog for up to 12 months.

We share data with the following trusted sub-processors. Each is bound by a data processing agreement and is permitted to process your data only for the purposes we specify.

Where processors are located outside the UK or EEA, we rely on Standard Contractual Clauses (SCCs) or equivalent transfer mechanisms to ensure adequate protection.

We use a small number of cookies and similar technologies:

• Essential cookies — required for authentication and session management. These cannot be disabled.
• Analytics cookies — set by PostHog to help us understand how people use TrueLite. You can opt out via the cookie settings banner.
• Preference cookies — used to remember your theme (light/dark) and similar UI preferences.

You can manage or withdraw cookie consent at any time using the cookie settings link in the page footer.

Under the UK GDPR and EU GDPR, you have the following rights in relation to your personal data:

• Access — request a copy of the data we hold about you.
• Rectification — ask us to correct inaccurate or incomplete data.
• Erasure — request that we delete your data (“right to be forgotten”).
• Restriction — ask us to pause processing while a complaint is investigated.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests.
• Withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, email privacy@trueliteapp.com. We will respond within 30 days. If you are unsatisfied with our response, you have the right to lodge a complaint with your national data protection authority — for example, the ICO in the UK (ico.org.uk).

TrueLite is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe we have inadvertently done so, please contact us and we will delete it promptly.

We may update this policy from time to time. When we do, we will revise the version number at the top of this page and, for material changes, notify ministry account holders by email. Continued use of TrueLite after a change constitutes acceptance of the updated policy.