Introduction
Réseau Ta 2nde Chance Internationale ("we", "us", "the association") is a Christian non-profit organization operating in Cameroon and Canada. This Privacy Policy explains what personal data we collect through our website (lepainmatinal.com) and our mobile application "Le Pain Matinal", why we collect it, how we use it, and the rights you have over it.
This policy applies to all users, whether or not they hold an account. Signing in is optional: most of the app can be used as a guest.
Data controller
The data controller for the information collected through our services is:
- Organization : Réseau Ta 2nde Chance Internationale
- Email : contact@lepainmatinal.com
- Phone : +237 693 188 464
- Address : Douala, Cameroon (with an outreach office in Canada)
Data we collect
We only collect what is strictly necessary for the features you use.
When you create an account (optional)
- Identification data: first name, last name, username, email address.
- Authentication data: hashed password (bcrypt, we never store plaintext), password history for security.
- Session data: JWT access and refresh tokens, sign-in history (IP address, device information, approximate geolocation from IP).
When you make a donation
- Non-anonymous donations: full name, email, phone number.
- Payment metadata: amount, currency, payment method (PayPal, PayUnit or Stripe), transaction ID once processed.
- Donations can be made anonymously; in that case only the amount, currency and method are stored.
When you contact us or subscribe to the newsletter
- Contact form: first name, last name, email, optional phone, message content, technical metadata (IP, user-agent).
- Newsletter: email address and preferred language.
Technical data collected automatically
- IP address, browser type and version, operating system, device model.
- Firebase Cloud Messaging (FCM) token for push notifications on mobile, only after you accept them.
- Anonymous usage logs (request path, HTTP status, timestamp) kept for security and debugging.
Why we process your data
Your data is used only to:
- provide access to sermons, books, testimonials, conferences and other spiritual content;
- process donations and send you a confirmation;
- reply to your messages and prayer requests;
- send optional updates, newsletters and push notifications about our activities;
- keep the platform available, secure, and free of abuse;
- comply with applicable legal and accounting obligations.
Legal basis
- Consent : for newsletter subscriptions, push notifications and non-essential features.
- Contractual necessity : when you register an account, submit a donation or use paid content.
- Legitimate interest : for security logs, fraud prevention and improving the service.
- Legal obligation : for accounting records related to donations and for responding to lawful requests from authorities.
Third-party processors
We rely on a small number of trusted providers to run the service. These providers only receive the data strictly required for their task:
- MongoDB Atlas (United States and Europe) — database hosting
- Firebase Cloud Messaging (Google LLC) — push notification delivery on Android and iOS
- PayPal — processing donations paid by card or PayPal balance
- Vercel (Vercel Inc.) — hosting of the public website
- Google Maps (Google LLC) — displaying our location on the contact page
We do not sell your data. We do not run advertising, tracking or profiling for marketing purposes.
International transfers
Some processors (MongoDB Atlas, Firebase, PayPal, Vercel) are located outside your country and may store data in the United States or the European Union. In each case they either operate under Standard Contractual Clauses or under a national data protection framework recognised as adequate.
How long we keep your data
- Account data: kept as long as the account is active. Deleted (or anonymized) 30 days after account deletion.
- Donation records: kept for 10 years to comply with accounting obligations.
- Contact messages: kept for 24 months maximum after last exchange.
- Newsletter subscriptions: kept until you unsubscribe.
Your rights
Depending on where you live (GDPR in Europe, similar laws in Canada, Cameroon and elsewhere), you have the following rights:
- Right of access : obtain a copy of the personal data we hold about you.
- Right to rectification : correct data that is inaccurate or incomplete.
- Right to erasure : ask us to delete your account and associated data.
- Right to portability : receive your data in a structured, machine-readable format.
- Right to object : object to processing based on our legitimate interest.
- Right to withdraw consent : withdraw at any time any consent you have given (newsletter, push notifications, etc.).
To exercise these rights, contact us at contact@lepainmatinal.com. We reply within 30 days. If you are in the European Union you may also file a complaint with your local data protection authority.
How we protect your data
We apply reasonable technical and organizational safeguards:
- TLS/HTTPS encryption on all traffic between your device and our servers;
- bcrypt hashing of passwords and JWT with limited lifetime;
- isolation of databases, restricted admin access, activity logs;
- regular reviews of dependencies and third-party services.
Children
Our services are not directed at children under 13 (under 15 in some European countries). If you believe we hold data belonging to a child, please contact us and we will delete it as soon as possible.
Cookies and local storage
The website uses only strictly necessary cookies and local storage entries:
- authentication tokens and language preference stored in localStorage on the website;
- offline cache of published sermons, books, testimonials and conferences on the mobile app.
Push notifications
On mobile we may send push notifications for new sermons, upcoming conferences or donation confirmations. Notifications are opt-in on iOS and can be turned off at any time from your device settings or from the app profile.
Changes to this policy
We may update this policy to reflect changes in our services or in applicable law. Any material change will be announced on this page and, when appropriate, by push notification or email. The date at the top of the page is always the effective date.
Contacting us
For any question about privacy, or to exercise your rights, write to us at contact@lepainmatinal.com.