私隱政策
Privacy policy
草稿 Draft · 生效日期 Effective date: [DATE]
1. 我們是誰 Who we are
LemonChurch 是由 LemonGO Digital（澳洲悉尼，[ABN]）營運的教會行政平台。本政策說明我們如何處理 www.lemonchurch.com 訪客，以及教會同工和會友的個人資料。我們按澳洲《1988 年私隱法》和香港《個人資料（私隱）條例》處理個人資料。
LemonChurch is a church administration platform run by LemonGO Digital (Sydney, Australia, [ABN]). This policy explains how we handle personal information of www.lemonchurch.com visitors and of church staff and members. We handle personal information under the Australian Privacy Act 1988 and the Hong Kong Personal Data (Privacy) Ordinance.
2. 教會與 LemonChurch 的角色 Your church and LemonChurch
會友資料屬於使用 LemonChurch 的教會。教會決定收集甚麼資料和由誰查看，我們代教會保管和處理這些資料，不會用於其他目的。如對教會持有的資料有疑問，請先聯絡你的教會。預約示範的資料則由我們直接負責。
Member information belongs to the church using LemonChurch. Your church decides what it collects and who can see it; we store and process it on the church’s behalf and for no other purpose. For questions about information your church holds, please contact your church first. We are directly responsible for demo request details.
3. 我們收集的資料 What we collect
預約示範：教會名稱、聯絡人、職位、電郵、所在地、主日聚會人數和你填寫的內容。為防止濫用，我們會暫存 IP 位址的雜湊值，不保存 IP 位址本身。
教會使用者：登入資料（電郵或手機號碼）、姓名和聯絡資料、角色和事奉崗位、事奉時間、出席和簽到紀錄、代禱內容、活動和團契資料、教會上載的內容，以及用於推送通知的裝置識別碼。教會亦可能記錄奉獻資料。
Demo requests: church name, contact name, role, email, location, Sunday attendance and anything you write. To prevent abuse we briefly keep a hash of your IP address, never the address itself.
Church users: sign-in details (email or mobile number), name and contact details, roles and serving positions, serving availability, attendance and check-in records, prayer requests, event and fellowship information, content uploaded by the church, and device tokens for push notifications. Churches may also record giving information.
4. 我們如何使用資料 How we use it
我們只用這些資料來提供和維護 LemonChurch、處理登入和保安、發送事奉提醒和服務電郵、提供客戶支援，以及回覆示範預約。
We use this information only to provide and maintain LemonChurch, handle sign-in and security, send serving reminders and service emails, give support, and reply to demo requests.
5. 我們不會做的事 What we never do
我們不會出售個人資料，不會用於廣告，亦不會為會友的出席或事奉計分或排名。LemonChurch 可以提示同工哪些會友久未出現，但不會自動向這些會友發訊息。
We never sell personal information or use it for advertising, and we never score or rank members on attendance or serving. LemonChurch can tell staff who has been away for a while, but it never messages those members automatically.
6. 誰可以看到資料 Who can see it
查看範圍由教會設定的角色決定，並由伺服器檢查。奉獻紀錄只限財務同工和奉獻者本人；匿名代禱不會顯示作者；每間教會的資料互相分開。我們的人員只會在提供支援或維護服務有需要時才查閱。
Access depends on the roles your church sets and is checked on the server. Giving records are limited to finance staff and the donor; anonymous prayer requests never show the author; each church’s data is kept separate. Our own staff access data only when needed for support or maintenance.
7. 服務供應商與跨境處理 Service providers and overseas processing
我們使用 Google Cloud 和 Firebase（資料庫、登入、檔案、推送通知和短訊驗證）和 Resend（電郵）。主要資料庫位於 Google Cloud 香港區域，部分處理可能在美國及其他地區進行。LemonGO Digital 位於澳洲，因此資料亦可能從澳洲查閱。網站字型由 Google Fonts 提供，瀏覽器會把 IP 位址傳送給 Google；手機號碼登入使用 Google reCAPTCHA。
We use Google Cloud and Firebase (database, sign-in, files, push notifications and SMS verification) and Resend (email). The main database is in the Google Cloud Hong Kong region; some processing may take place in the United States and other countries. LemonGO Digital is in Australia, so data may also be accessed from Australia. Website fonts come from Google Fonts, which sends your IP address to Google; mobile sign-in uses Google reCAPTCHA.
8. 保留期限 How long we keep it
教會使用 LemonChurch 期間，我們會保留其資料。教會終止服務後，我們會按教會指示刪除或交還資料。預約示範的資料會保留 [24 個月]，除非你要求提早刪除。
We keep a church’s data while it uses LemonChurch. When a church leaves, we delete or return its data as the church instructs. Demo request details are kept for [24 months] unless you ask us to delete them sooner.
9. 保安 Security
資料以加密方式傳輸和儲存，權限由伺服器把關，機密金鑰存放在專用的密鑰管理服務。沒有系統是絕對安全的；如發生須通報的資料外洩，我們會按法例通知受影響的教會和有關機構。
Data is encrypted in transit and at rest, permissions are enforced on the server, and secrets are kept in a dedicated secret manager. No system is perfectly secure; if a notifiable data breach occurs we will tell affected churches and the relevant authorities as the law requires.
10. 你的權利 Your rights
你可以要求查閱或更正你的個人資料，或要求刪除。教會持有的資料，請向你的教會提出；其他資料請聯絡我們。如對處理結果不滿意，你可以向澳洲資訊專員辦公室（OAIC）或香港個人資料私隱專員公署（PCPD）投訴。
You can ask to access, correct or delete your personal information. For information your church holds, please ask your church; for anything else, contact us. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner (OAIC) or the Hong Kong Privacy Commissioner for Personal Data (PCPD).
11. 兒童 Children
LemonChurch 是為教會而設的服務，不是為兒童自行使用而設。教會如記錄兒童資料，須先取得家長或監護人的同意。
LemonChurch is built for churches, not for children to use on their own. A church that records children’s information must first have a parent’s or guardian’s consent.
12. Cookie 和本機儲存 Cookies and local storage
本網站不使用廣告或分析 Cookie。LemonChurch 應用程式會在你的裝置上儲存登入狀態和設定，以維持你的登入。
This website uses no advertising or analytics cookies. The LemonChurch app stores your sign-in state and settings on your device to keep you signed in.
13. 聯絡我們 Contact us
如有任何私隱問題，請電郵至 [PRIVACY EMAIL]。我們更新本政策時，會在本頁公佈新版本。
For any privacy question, email [PRIVACY EMAIL]. When we update this policy, we will post the new version on this page.