ISKCON Chicago

Privacy Policy

This policy covers ISKCON Chicago: New Seva Kunj on iPhone and Android. It describes the app as it works today. Nothing here is aspirational, and where the app falls short of what you might expect, that is said plainly rather than left out.

Effective 1 September 2026

1. Who runs the app

The app is run by ISKCON Chicago (the International Society for Krishna Consciousness of Chicago), a religious congregation in Illinois, USA. The temple is the controller of the information described here. It is not a commercial product, there is no advertising in it, and nothing in it is sold, rented or traded to anybody.

Every screen beyond the sign-in page requires an account. There is no public devotee profile and no guest directory.

The controller

ISKCON Chicago
1716 W Lunt Ave, Chicago, IL 60626, USA
tech@iskconchicago.com

That address reaches the temple's technology seva, who answer privacy questions, deletion requests and moderation reports.

2. What information is collected

Almost everything below is something you type in yourself. Nothing is gathered quietly in the background. Only your name, email address and phone number are required; every other field can be left blank, and leaving it blank costs you nothing.

Your account

  • Your name, email address and a contact phone number
  • Your password, which is stored by our hosting provider as a hash and is never visible to anybody at the temple
  • Your profile photo, if you add one
  • Your access level — Devotee, Volunteer, Community Head, Tech Admin or President — and the date you joined
  • If you sign in with Google, your name, email address and profile picture as Google provides them

Your personal details

  • Date of birth, place of birth, gender and occupation
  • Home address
  • Emergency contact name and phone number
  • Languages you speak and the language you prefer
  • Skills you offer, whether you can give a lift, and whether you can host a program at home

Your family

  • Your marital status and your spouse's name
  • How many children you have, and for each child: their name, age, gender, whether they practise and since when, and whether they are initiated

A child's date of birth is not stored. If you use the date picker to work out an age, only the whole number of years is saved. See Children.

Your connection to the temple

  • Whether you say you are an ISKCON member — Yes, No, or Prefer not to say. Leaving it unanswered is not recorded as “no”; it is recorded as nothing at all
  • How long you have been coming, and the date you first joined the temple
  • How you found us
  • Your āśrama, if you give it

Your spiritual practice

  • Whether you are initiated, your first and second initiation dates, and your dīkṣā gurus
  • Your spiritual mentor
  • Your daily rounds of chanting

All of this is voluntary. None of it is a requirement for seva, and none of it appears in the Directory.

Your seva

  • The seva you join, are invited to, register yourself, or step back from
  • Whether a coordinator recorded you as served, absent or excused
  • Start and finish times, and the running timer
  • Who verified a seva you registered yourself, and any note they left
  • Coverage you asked for, or agreed to cover
  • What you wrote when you registered interest in weekly seva — your skills and availability
  • Your seva hours, seva count, giving total and any awards, used for Seva Yatra and the leaderboard

Being at the temple

  • The At the temple switch, which is yours to turn on and off
  • The date, and the times you checked in and checked out

No coordinate, address or map position is ever recorded. This is a switch you press, not a sensor. Turning it off takes you off today's list at once.

Messages and sangas

  • Direct messages you send and receive — the text, any photo, and the times they were sent, delivered and read
  • Sanga messages and photos, and which sangas you belong to
  • The original text and photo of a message you delete — see how long it is retained

Reporting and blocking

  • Which devotees you have blocked. Only you can read your own block list, and the devotee you blocked is never told
  • A report you make — what you reported, who it was about, the reason you gave, any note, and when
  • The temple's decision on that report, and what was done about it
  • Any moderation action taken about you — a warning, a removal, a suspension — with who took it and when
  • Whether your messaging or your account is suspended, and until when

A report is not anonymous to the temple: the President and Tech Admin see who made it. It is never shown to the devotee reported.

Donations

  • Your name and email as given to Zeffy, the amount, the currency, whether it was one-time or recurring, and which campaign it was for
  • Zeffy's payment reference, and the payment record Zeffy returns to the temple, which is kept for reconciliation and is readable only by the temple's server
  • Sponsorship bookings and whether they were fulfilled

No card number, bank detail or billing address ever reaches the app or the temple's database. See Donations and payment processing.

Notifications

  • A push token issued by Expo for the app on your phone
  • Whether the phone is an iPhone or an Android phone, and the device name it reports — for example “Rādhā's iPhone”
  • When that token was last seen, so tokens for phones you no longer use can be retired
  • The notifications sent to you, and whether you have read them

Photos and files

  • Your profile photo
  • Photos you attach to a message or a sanga chat
  • Daily darshan photos, and the name recorded for who dressed the Deities
  • Newsletter files, and anything you submit for the newsletter

All of these sit in private storage. Opening one requires a signed-in account. See Security measures.

What you write elsewhere

  • Announcements, comments and birthday wishes
  • Feedback you send the temple, which carries your name
  • Devotee care posts and replies, which are confidential to the devotees authorised to answer them
  • Requests for a higher access level, and the decision on them

3. What is not collected

This part matters as much as the list above, so it is stated on its own rather than left to be inferred.

  • Your location. The app does not read, send or store where your phone is. There is no background location, no geofence, and no location permission is requested on either platform. Temple check-in is a switch you turn on yourself.
  • Card and bank details. Donations are completed on Zeffy's own page in your phone's browser. Nothing about your card reaches the app or the temple's database.
  • Health, medical or dietary information. The app used to ask for dietary notes and health notes. It no longer asks, the questions are gone from the profile form, and the columns that held them were deleted from the database on 1 September 2026, along with everything that had been written in them.
  • Analytics and tracking. There is no analytics product in the app, no advertising identifier, no third-party tracker, no cookies, and no cross-app tracking of any kind.
  • Crash reports sent anywhere. When something goes wrong the app keeps the last few error details in memory so it can show you a sensible message and so a Tech Admin can read them on your phone. They are never transmitted, and they are gone when the app closes.
  • Your contacts, your calendar, or your microphone. The app does not use any of them and does not ask for them.
  • Your camera roll at large. The app asks for a photo only at the moment you choose to attach one, and receives only the photo you picked.

4. Why it is collected

A temple has always kept a record of its congregation, and this app is that record in a form a devotee can read and correct. Every group above is held for a reason that can be named, and this table names it.

What Why it is held Legal basis
Account and password To sign you in, and to decide what you are allowed to do. Performance of the agreement between you and the temple.
Phone, email, push token So a coordinator can reach you about seva you agreed to, and so a reminder can arrive. Legitimate interests of a congregation in running its community; consent for push notifications, which your phone asks for separately.
Personal and family details To keep the congregation record, so the temple knows the family it is serving and can greet, invite and look after them. Consent. Every one of these fields is optional.
Emergency contact So the temple can reach somebody who knows you if something happens during a program or a seva. Consent, and the vital interests of the person concerned.
Spiritual practice and ISKCON membership So weekly seva can be offered that fits where you are in your practice, and so the congregation can be told apart from visitors and newcomers. Consent, freely given and freely withdrawn. This is religious belief information, so it is collected only from a member of the congregation who volunteers it, and it can be cleared at any time.
Seva, attendance and hours To fill a rota, to credit the seva that was performed, and to keep the temple's service records straight. Legitimate interests of the temple in running its service.
Messages, sangas, care posts To carry the conversation, and to let the temple answer a safeguarding question honestly. Performance of the agreement; legitimate interests in the safety of devotees.
Reports and blocks To keep the community a place a devotee is safe in, and to be able to show what was done about a complaint. Legitimate interests in the safety of devotees, and compliance with the app stores' requirements for community content.
Donation records To thank you, to reconcile the temple's accounts, and to answer an auditor. Legal obligation. A charity in the United States must keep these.

Nothing here is used for advertising, profiling, automated decision-making or any purpose other than running this temple's community. If the temple ever wants to use something for a new purpose, it will ask first.

5. Who it is shared with

The honest summary is that the temple's leadership can see a devotee's record. That is how a temple works, and it is stated here plainly rather than buried. What the wider community sees is much narrower.

Who What they can see
Any signed-in devotee Your name, photo, access level and joined date, and — on your profile page — your email address, gender, date of birth, age and occupation. They also see you on today's temple list while your At the temple switch is on, your name beside seva you share, and your messages in any sanga you both belong to.
A devotee you message What you send them, and any photo attached to it.
Whoever posted a seva Who joined it, and whether each person served, was absent or was excused. If you are marked as not attending, the app tells you, so you can say if it is wrong.
Community Heads The full seva schedule and devotees' completed seva, because arranging seva depends on it.
The President and the Tech Admin Everything in your record. That includes your phone number, home address, birth place, family, initiation and mentor; every direct message and sanga message, including the original text and photo of messages that were deleted; every report made about anybody; every devotee's seva and attendance; and every donation. Blocking somebody does not narrow this: the temple's record is read as it stands, whoever has blocked whom, and the President and the Tech Admin cannot be blocked. This is deliberate — it is what lets the temple answer a safeguarding question or an accounts question — and it cannot be switched off in the app. If that is not something you want, do not write it here.
Newsletter editors Submissions made for the newsletter, and who sent them.
Devotees authorised for care Confidential devotee care posts and replies.
Nobody else Your emergency contact, home address, marital status, spouse, children, chanting rounds, initiation details, ISKCON membership answer and skills never appear in the Directory or on any profile page shown to another devotee.

Outside the temple, the only parties who handle any of this are the service providers in Third-party services and SDKs, each of which processes it on the temple's instructions and for no purpose of their own. Nothing is sold, rented or traded. The temple will disclose information if the law requires it, or where it is genuinely necessary to protect somebody's safety.

The app has no per-field privacy switches. The two things genuinely in your hands are the At the temple switch and whether you appear on the Seva Yatra leaderboard. Rather than show toggles that change nothing, the app's Privacy and visibility screen explains what is held — and this policy does the same.

6. Third-party services and SDKs

This is the complete list. There is no analytics SDK, no advertising SDK, no attribution SDK and no social media SDK in the app.

Service What it handles Role
Supabase Runs the sign-in, the database, the file storage and the server functions. Everything described in this policy is stored on Supabase's infrastructure on the temple's behalf. Processor
Expo Issues the push token for your phone and delivers the temple's notifications, which means the title and body of a notification pass through Expo's push service on the way to you. Processor
Apple and Google Apple's push notification service on iPhone, and Firebase Cloud Messaging on Android, carry the notification the last step to your phone. Processor
Zeffy Takes the donation on its own page, in your phone's browser, and tells the temple that it happened. Zeffy's own privacy policy governs what you enter there. Independent controller
Google Sign-In Only if you choose it instead of a password. Google tells the temple your name, email address and profile picture. The temple tells Google nothing about you. Independent controller

The app also opens ordinary web links in your phone's browser — the temple's own pages, and this policy. Once a page is open in the browser, that site's own terms apply.

7. Donations and payment processing

No payment information ever reaches the app

When you choose to give, the app opens Zeffy's own donation page in your phone's browser — Safari on iPhone, Chrome on Android. It is deliberately not shown inside the app, so that nothing the app runs can see what you type there.

Your card number, expiry, security code, bank details and billing address are entered on Zeffy's page and are never received, seen, processed or stored by the app or by the temple's database. The temple has no ability to charge you and no stored payment method for you.

The only thing the app passes to Zeffy is your email address, added to the link so that the gift can be matched back to your record. After the payment completes, Zeffy notifies the temple's server, which records the amount, the currency, whether it was one-time or recurring, the campaign, your name and email as you gave them to Zeffy, and Zeffy's own reference for the payment. That is the whole of it.

Donations are voluntary charitable contributions to ISKCON Chicago. They are never required to use the app or any part of it, and giving does not unlock any feature, content or level of access. Whether you give, and how much, changes nothing about what the app will let you do.

8. Where it is stored

Everything is held in the temple's own Supabase project — the database, the sign-in records, and the private storage buckets holding photos and newsletter files. That project is hosted in Amazon Web Services' us-west-2 region, in Oregon, in the United States. Backups are held by Supabase in the same region.

Push notifications pass through Expo's service, and then through Apple's or Google's, both of which operate internationally.

If you use the app from outside the United States, your information is transferred to and processed in the United States, which may not offer the same protections as the law where you live. By using the app you understand that this is where the temple's records live. Where a transfer needs a legal mechanism, the temple relies on the standard contractual clauses in its agreement with Supabase.

A small amount of information is also kept on your own phone so the app works and remembers you are signed in — your session, your preferences, and a cache of what you last looked at. Deleting the app removes it.

9. How long it is retained

There is no automatic clear-out. Your record is kept for as long as you are part of the community, and the temple's records of seva, donations and community life are kept as a temple's records always have been.

What How long
Your profile and personal details Until you change them, or until you ask to be forgotten — at which point they are erased.
Messages and sanga messages Kept as a temple record for as long as the temple runs the app. Erased when you ask to be forgotten.
The original of a deleted message Kept, and readable by the President and Tech Admin, until you ask to be forgotten.
Seva, attendance and hours Kept indefinitely. Survives being forgotten, with your name removed.
Donation records At least seven years, for the temple's accounts and for tax. Survives being forgotten, with your name removed.
Feedback and newsletter submissions Until you delete them, which really does delete them. Erased when you ask to be forgotten.
Reports and moderation decisions Kept while the account exists, and for up to two years after a decision, so that a pattern of behaviour can be seen.
Push tokens Until the phone stops responding, you sign out, you leave, or you ask to be forgotten.
Temple check-in One row per devotee, overwritten each day. Nothing is accumulated.

Two things deserve to be said outright, because they are not what people usually assume:

  • Deleting a message does not destroy it. Deleting removes it from the conversation both devotees see, but the original text and photo are retained as a temple record and can be read by the President or a Tech Admin. Asking to be forgotten does destroy them.
  • Removing a conversation only clears your own view. It empties that thread from your Messages list and nothing more. The other devotee still has theirs, and a new message brings the conversation back.

10. How to delete your account

Leaving and being forgotten are two different things, and the app draws the line between them rather than blurring it.

Leaving — reversible

Stepping away from the app. Nothing is erased. Notifications stop and the phone is forgotten, but the temple keeps your record as it stands, the way a congregation roll has always been kept.

Sign in again and everything is where you left it.

Being forgotten — permanent

Asking the temple to stop holding who you are. Your name becomes A former devotee, and your email, phone, address, date of birth, photo, emergency contact, family and spiritual details are all erased. Your profile photograph is deleted from storage. Your messages are deleted, including the retained originals. Your sign-in stops working.

This cannot be undone, and there is nothing to restore from.

Both are in the app

Open Profile, scroll to the bottom, and tap Leaving, or deleting your account. Being forgotten asks you to type DELETE first, because of what it does. Both take effect immediately — neither waits on anybody at the temple to approve it.

If you no longer have the app, you can ask for the same thing from a web page, without installing anything:

https://app.iskconchicago.com/delete-account

Or write to tech@iskconchicago.com from the email address on your account. The temple will confirm it is you and then carry it out, within 30 days and usually much sooner.

What survives being forgotten, and why

Two things outlive it, and neither of them says who you were:

  • The record that a seva was performed, because a month's hours must still add up a year later and closing months cannot be allowed to change silently after the fact.
  • The record that a donation was received, because a charity in the United States must keep its donation records for tax and audit whatever any donor asks.

Your name is removed from both. What is left is an hour and an amount with nobody attached to them.

One exception, and the app says so at the time: if you are the only person left who can administer the app, it will refuse to erase you until somebody else has been given that access. Otherwise the congregation would be left with an app nobody can run.

11. Children

This app is not directed at children. It is meant for adults. The temple does not knowingly create accounts for anybody under 13, a child should not sign up, and there is nothing in the app aimed at children — no games, no child-facing content, and no advertising of any kind.

A parent or guardian may record their own children within their own profile, as part of the family's congregation record. It is always the parent who enters this, from their own signed-in account. A child never has an account and never enters anything. For each child the app holds their name, age in whole years, gender, whether they practise and since when, and whether they are initiated.

A child's date of birth is not stored. The form offers a date picker to save you the arithmetic, but the date is used to work out the age and is then discarded; only the number of years is saved.

Children's details are never shown in the Directory, never shown to other devotees, and are visible only to the parent who entered them and to the President and Tech Admin. They can be edited or cleared at any moment in ProfileYour details, and they are erased entirely when the parent asks to be forgotten.

If you believe a child has created an account, or that a child's details are in the app and should not be, write to tech@iskconchicago.com and they will be removed promptly.

12. Security measures

  • Encrypted in transit and at rest. Everything travels over TLS, and is encrypted where it is stored.
  • Passwords are hashed by the hosting provider. Nobody at the temple can read your password.
  • The database decides who may read each row, on the server, rather than trusting the app to hide things. Row-level security is on for every table holding devotee information, so a request for somebody else's private details is refused by the database itself — not by the screen.
  • Private storage. Profile photos, message images and newsletter files sit in buckets that are closed to the public. A link to one does not work on its own; the app has to mint a signed link that expires after an hour, and only for a signed-in devotee.
  • The most sensitive columns are not even granted to the app. The retained original of a deleted message cannot be read by any ordinary query, at any access level, because the permission to select those columns is not given to the app's role at all.
  • Access levels are granted only by the President or a Tech Admin, and every request and decision is recorded.
  • No card details are ever held, because no card details ever arrive.

No system is perfect, and the temple does not claim this one is. If you think an account has been used by somebody else, say so and it will be acted on. If a breach ever affects your information, you will be told, and so will the authorities the law requires.

13. Your rights

You can see and change most of what the app holds about you at any time in ProfileYour details. What you save takes effect straight away, everywhere the app shows it. Beyond that, you may ask the temple to:

Write to tech@iskconchicago.com from the address on your account. Requests are answered within 30 days. There is no charge, and asking will never affect how you are treated at the temple.

Depending on where you live you may also have the right to complain to a data protection authority. In Illinois, you may contact the Office of the Illinois Attorney General. The temple does not sell or share personal information as those words are used in California law, and never has.

14. Changes to this policy

As the app changes, this policy will be updated to match it, and the date at the top will change with it. If something significant changes — a new kind of information, or a new service handling it — the temple will say so in the app rather than quietly editing this page.

What changed on 1 September 2026. Dietary notes and health notes were removed from the app and deleted from the database. A question about ISKCON membership was added. Account deletion moved into the app itself, instead of being a request by email. The location feature was removed in full. Reporting and blocking were added.


15. Contact information

For any question about this policy, your record, a deletion request, or anything above:

Email
tech@iskconchicago.com

Post
ISKCON Chicago
1716 W Lunt Ave
Chicago, IL 60626
USA

Delete your account on the web
https://app.iskconchicago.com/delete-account

For anything urgent, please contact the temple directly rather than relying on an app message. The app is not an emergency service.