Privacy Policy

This policy explains what information Atrium Gather collects, why, who can see it, how long we keep it, and the choices you have. It applies to the Atrium Gather iPhone app, the web app, and this website (together, "Gather"). Effective date: September 30, 2026.

The short version:

• Gather is free. There are no ads and no in-app purchases.
• We do not sell your personal information, and we do not share it for advertising.
• We do not track you across other companies' apps or websites, and there are no analytics or advertising SDKs in the app.
• You can delete your account inside the app at any time. What that removes, and the little we keep, is spelled out in section 10.

1. Who we are

Gather is operated by Atrium AI LLC ("Atrium," "we," "us"), 3774 Belt Line Rd, Unit #2088, Addison, TX 75001. You can reach us at [email protected].

Gather is a tool that churches use to care for their people. For the records a church keeps about the people in its community, the church's leaders decide what to record, and we process those records on the church's behalf. For your own account, and for the service as a whole, we are responsible for your information.

2. Information we collect

Account information. Your name, email address, password (stored only as a one-way hash, never in readable form), date of birth, and the date you accepted our Terms and this policy.

Date of birth. We ask for it when you create an account to enforce our minimum ages: 13 to use Gather, and 18 to create or lead a church. Your full date of birth is private to your account. Church leaders and other members never see it; Atrium staff can see it on your account record. When you join a church, the month and day (not the year) are added to your directory profile as your birthday so the church can celebrate it. You can change or remove that birthday from your profile at any time.

Church membership. Which churches you belong to and your role in each (Leader, Co-leader, Member, or Viewer), and when you joined.

Your directory profile. In each church you join you have a profile. You can add a photo, phone number, email, address, birthday, anniversary, household, spouse and children's names, occupation, life stage, a short bio, and the ways you are open to serving. All of these are optional. Photos are re-encoded on our servers when you upload them, which removes their location and camera metadata.

What you post and do in your church. Chat messages and replies, RSVPs and how many children you are bringing, food sign-ups, prayer requests, Bible reading progress, and your reminder preferences.

Records leaders keep. Church leaders can add people to the directory and record their contact details, status and group, when they joined or were baptized, where they serve, their gifts, tags, prayer requests, pastoral notes, attendance at gatherings, and follow-ups. Leaders also create gatherings (with a host and address), lesson plans, and email or text-message invitations to new members. When a Leader or Co-leader sends a text or email to a group from Gather, we store a sent-message log entry: the message text, the channel (text or email), the group, the recipients' names, who sent it and when (see section 6).

Reports and blocks. When you report a message or a profile we store the reason and any note you add. When you block someone we store that you did.

Support requests. The messages you write to us in Help & support, our replies, the church you were signed in to, and which platform (iPhone or web) and app version you used.

Collected automatically.

• Sessions: each time you sign in we create a session record holding the IP address and the browser or device description (user agent) it was created from, so we can keep you signed in and spot misuse.
• Push notification token: if you allow notifications on an iPhone, the token Apple issues for that device, and the app version.
• Activity log: a record of key account events, such as signing up, signing in, joining or creating a church, creating a gathering, sending a chat message, opening a support request, filing a report, and deleting an account, with the time, the church, and small details such as the platform used or how you joined. It never contains message text, email addresses, or dates of birth. We also note when you were last active, at most once an hour.
• Server logs: our servers log each request's time, address (URL), origin and IP address to keep the service running and secure. Passwords, sign-in tokens and cookies are removed from logs.

On your device. Your language and appearance (light or dark) preferences, and when you allowed AI lesson drafts, are stored on your device. The iPhone app keeps your sign-in tokens in the iOS Keychain.

What we do not collect. Payment information, precise or approximate location, your device's contacts or address book, health or fitness data, browsing or search history, advertising identifiers, or crash and analytics data from third-party SDKs.

Sensitive information. Because Gather is for churches, belonging to a church on it can reveal your religious beliefs, and prayer requests or notes can mention health or family matters. We use this information only to provide Gather to you and your church. We never use it for advertising, and we never sell it or share it for marketing.

3. How we use information

• To run Gather for you and your church: your account, the directory, gatherings and RSVPs, attendance, prayer, chat, reading plans, lesson plans, calendar subscriptions, and reminders.
• To enforce our age requirements: your date of birth.
• To send you email you need: password resets, church invitations, and replies to your support requests.
• To send notifications you allow: new chat messages and gathering reminders.
• To keep people safe: reviewing reports, removing content that breaks our community standards, and preventing abuse, spam and unauthorised access.
• To support you and improve Gather: answering support requests, fixing problems, and understanding in aggregate how Gather is used (for example, how many churches were created this week) from our own activity log.
• To meet legal obligations and respond to lawful requests.

We do not use your information to show ads, we do not build advertising profiles, and we do not use your information to train artificial intelligence models. AI lesson drafts send only what a Leader types or pastes into the AI form (see section 5).

4. Who can see your information

Members of your church can see your name, photo, bio, birthday, anniversary, the other profile details you add, your role, your RSVPs, and the messages you post in the church's chat. They see your phone number and email only if you choose to share them with members (you set this on your profile). Everyone in a church can see its gatherings, including the host and address.

Your church's Leaders and Co-leaders can see everything members can, plus your phone number and email, your address, prayer requests, attendance, and the notes leaders keep. They can edit directory records, remove chat messages, mute or remove members, and see message reports. A Leader can also download a copy of the church's directory, gatherings and message log. Leaders never see your date of birth.

Atrium staff sign in to a separate console with a company email address. Staff can see account records (name, email, date of birth, when you signed up and were last active, and which churches you belong to with your role), church records and their member lists, the activity log, and support requests. They can see a chat message or profile only when someone reports it: then they see the reported message's text, or the reported profile's name, bio and photo, along with the reporter's name and note. Staff do not otherwise read chat messages, prayer requests or notes. Access is limited to people who need it to support users and keep Gather safe.

Service providers process information for us, as described in section 5.

Legal and safety. We may disclose information if the law requires it, or if we believe in good faith that disclosure is needed to protect someone's safety or to investigate fraud or abuse. If Atrium is involved in a merger or sale, your information may transfer to the new owner, and we will tell you before it becomes subject to a different policy.

We do not sell personal information and we do not share it with data brokers.

5. Service providers

• Resend delivers our transactional email (password resets, invitations, support replies). It receives the recipient's email address and the content of the message.
• Apple Push Notification service delivers notifications to iPhones. It receives your device's push token and the notification itself: for chat, the sender's name and the first part of the message; for reminders, the gathering's time, host and address.
• Our servers, which we operate ourselves in the United States, store Gather's database and uploaded photos in the United States.
• DeepSeek writes AI lesson drafts. It receives only what a Leader types or pastes into the AI form: the Bible passage, book or topic, the audience and guidance, and any source material. It does not receive the Leader's account, the church's members or any other Gather data. It is used only when a Leader chooses to generate drafts, after agreeing in the app, and it processes that text on its own servers in China.
• bible-api.com returns public-domain World English Bible text for AI lesson drafts. It receives only the Bible reference.
• TextBee sends text-message invites. It receives the phone numbers a Leader chooses and the invite text (the Leader's name, the church's name, the join link and any note), sent from an Android phone Atrium operates.
• Mapbox powers address and place search in gathering and location forms. It receives the search text and the church's city or address, to rank nearby results, and no account details.
• Google Fonts serves the fonts this website uses. When a page loads, Google receives your IP address and browser details as part of that request.

These providers may use the information only to provide their service to us. We do not use any advertising, analytics or tracking services.

6. Sending messages from the app

Leaders can write a text or email to a group in their church. Gather does not send these messages itself: it opens your own Messages or Mail app with the recipients and text filled in, and you send it from there under your own phone number or email address, at your carrier's usual rates. Gather keeps a copy of the text, the group and the recipients' names in the church's Sent messages log, which Leaders and Co-leaders can see.

Text-message invites are different: when a Leader invites people by text, Gather sends the invite itself through TextBee (see section 5). We do not keep a record of the phone numbers an invite was sent to.

7. Notifications and calendar subscriptions

Push notifications are optional. You can turn them off in your iPhone's Settings, and you can change or turn off gathering reminders in the app under Notifications.

If you subscribe to your church's calendar, Gather gives you a private link that lets your calendar app (for example Apple Calendar or Google Calendar) fetch the church's gatherings, including dates, hosts and addresses. The service that runs your calendar receives that information when it fetches the link. Anyone who has the link can read the feed, so keep it private. You can revoke it, or replace it with a new one, at any time on the Calendar screen, and it stops working if you leave the church.

8. Cookies and local storage

The web app uses one cookie, which keeps you signed in. It is marked HttpOnly, so scripts on the page cannot read it. It also stores your language and appearance preferences, and when you allowed AI lesson drafts, in your browser's local storage. There are no advertising or analytics cookies, and no third-party trackers. Blocking cookies will sign you out of the web app, but this website still works.

9. How long we keep information

• Your account and profile: for as long as your account exists. You can edit or remove profile details at any time.
• Church records: for as long as the church uses Gather. Leaders can edit or delete records at any time. When a church closes, it disappears for all its members at once and all of its data (people, gatherings, chat, photos, prayer requests, plans) is permanently deleted 30 days later.
• Sent-message log: each entry (message text and recipients' names) is kept until a Leader deletes it or the church is deleted. It is not removed when the sender or a recipient deletes their account.
• Deleted chat messages: when a message is deleted by its author or a moderator it disappears from the chat, but its text is kept so a report about it can still be reviewed. It is erased when the author deletes their account or the church is deleted.
• Activity log entries: deleted automatically after 180 days.
• Server logs: kept for 30 days, then deleted.
• Backups: encrypted database backups are kept for 30 days, then deleted; a deleted account can persist in a backup for up to that long.
• Support requests: kept as our record of the conversation, including after you delete your account (see below).

10. Deleting your account

You can delete your account in the app at any time:

• iPhone: open More, tap your name to open Account, then tap Delete account.
• Web: open More, then Delete account.

You confirm with your password. If you cannot sign in, email [email protected] from the address on your account and we will delete it for you within 30 days. Deletion is permanent and cannot be undone.

Deleted immediately: your name, email address and date of birth; your directory profile in every church, including your photo, contact details, bio and the notes and attendance recorded for you; the other photos you uploaded (a photo you uploaded as someone else's picture stays with that person); your church memberships; your sessions, push tokens, password reset links and calendar links; your reminder settings, reading progress, and the blocks you made.

Erased but left in place: each chat message you posted stays in its conversation so replies still make sense, but its text is replaced with "[deleted]" and it shows as from "Deleted account".

Kept: a bare account record with no name, email address or date of birth, so the messages and reports that point to it still work; your support requests and our replies, shown as from "Deleted account"; reports you filed; entries in a church's sent-message log; activity log entries, until they expire after 180 days; and the text of prayer requests recorded for you, with your name replaced by "Deleted account".

Churches you lead. If you are a Leader, the app shows you before you confirm what will happen to each church you lead. If another Leader remains, the church continues. If not, your longest-serving adult Co-leader becomes the Leader. If there is nobody to hand the church to, the app warns you that it will close, and closes it only if you confirm. A closed church is deleted 30 days later, as described in section 9.

Deleting the app from your phone does not delete your account. Uninstalling the app removes the preferences stored on that device, and signing out removes its sign-in tokens.

11. Children

You must be at least 13 to use Gather, and at least 18 to create a church or become its Leader. Every new account confirms a date of birth, and if it shows someone is under 13 we refuse to create the account and do not store what they entered. We do not knowingly collect personal information from children under 13.

Church leaders may record basic details about children in their community, such as a child's name on a family's profile or a child's attendance. A parent or guardian can ask the church's leaders to change or remove this, or contact us. If you believe a child under 13 has created an account or given us personal information, email [email protected] and we will delete it.

12. Your rights and choices

Wherever you live, you can:

• see and correct your account and profile in the app;
• delete your account in the app (section 10);
• ask us for a copy of your personal information, to correct something you cannot change yourself (such as your date of birth), or to delete it, by emailing [email protected];
• turn off notifications and revoke calendar links at any time.

We will answer within 30 days, and may need to confirm your identity first, usually by replying from the email address on your account. For records a church keeps about you, we may ask the church's leaders to act on your request. We will not treat you differently for exercising any of these rights.

California residents. You have the right to know what personal information we collect, use and disclose, to access and delete it, to correct it, and to limit the use of sensitive personal information. We do not sell or share personal information for cross-context behavioural advertising, and we use sensitive personal information only to provide Gather. The categories we collect are set out in section 2, their sources are you, your church's leaders and your devices, and the purposes are in section 3. You may use an authorised agent to make a request.

EU, EEA and UK residents. We process your information to provide the service you asked for (contract); for security, abuse prevention, support and improving Gather (our legitimate interests); where you choose to share optional or sensitive information such as your church membership and profile details (your consent, which you can withdraw by removing it or deleting your account); and to meet legal obligations. You also have the right to restrict or object to processing, to data portability, and to complain to your local data protection authority.

13. International transfers

Gather is operated from and hosted in the United States. If you use it from another country, your information is transferred to and processed in the United States, where data protection law may differ from yours. Where the law requires, we rely on appropriate safeguards such as standard contractual clauses for these transfers. When a Leader chooses to generate AI lesson drafts, what they enter in the AI form is processed by DeepSeek in China (see section 5).

14. Security

• Passwords are hashed with argon2id; we never store or see them in readable form.
• Connections to Gather are encrypted with TLS (HTTPS).
• On the web, your long-lived sign-in lives in an HttpOnly cookie that page scripts cannot read; on iPhone it is kept in the iOS Keychain. The short-lived access token expires after 15 minutes.
• Sign-in refresh tokens, password reset links and staff sign-in links are stored only as hashes, and reset and staff links expire and work once.
• Profile photos have no public web address: they are served only to signed-in members of your church.
• Staff console access is limited to Atrium company email addresses, using single-use sign-in links, and sign-in attempts are rate limited.

No system is perfectly secure. Please use a strong password that you do not use elsewhere, and tell us at [email protected] if you think your account has been compromised. If a breach affects your information, we will notify you as the law requires.

15. Changes to this policy

We will post any change on this page with a new "Last updated" date. If a change is material, we will also tell you in the app or by email before it takes effect.

16. Contact

Questions or requests about privacy: [email protected], or Help & support in the app.
Atrium AI LLC, 3774 Belt Line Rd, Unit #2088, Addison, TX 75001.