Privacy Policy

The Exchange is operated by Figures Solutions LLC, based in Detroit, Michigan, United States (“The Exchange,” “we,” “us,” “our”). The Exchange is a giving and community platform for churches, ministries, nonprofits, missionaries and the businesses that support them. We run the website at www.theexchangeapp.church and the companion mobile app called “The Exchange” on the App Store and Google Play (together, the “Service”).

This policy explains what information we collect when you use the Service, how we use it, who we share it with, and what you can do about it. It applies to members, to the organizations that use The Exchange, and to people whose information an organization stores with us.

Questions, requests, or concerns about privacy go to support@theexchangeapp.church. A person reads that inbox.

In short: we keep what you type into The Exchange, a record of how you use it, and your giving records. Card numbers never touch us. Churches and organizations also keep records about their own people here, and those records belong to the organization.

Most of what we hold is information you or your organization typed into The Exchange on purpose. Some is created while you use the Service. Here it is by category.

Your account and profile

Your name, display name, username, email address, headline, bio, profile photo, cover image or video, website link, city and state, your role in your church or organization, and the organizations you belong to. During onboarding we also ask about your spiritual gifts, the tools you want, whether you own a business, whether you plan to serve as a missionary, and a short set of preference questions that shape your feed. We do not ask for your birthdate to open an account.

Other members can see the public parts of your profile: your name, username, photo, headline, bio, city and state, role, verification badges, spiritual gifts, story highlights, and your follower and following counts. Only people whose connection request you have accepted can send you direct messages.

Your request for access

New accounts are created by invitation after you apply at Request access. That application asks for your full name, email, phone number, country and mailing address, your organization and role, why you want to join, and your spiritual gift. Only our staff can read applications. Your phone number from this form is used to set up text-message sign-in codes if you choose that option; it is not shown on your profile.

Sign-in and security records

You sign in with an email and password, or with Google or Microsoft. Supabase, the company that handles sign-in for us, scrambles your password so it cannot be read back, not even by us. Every account must use a second sign-in step. Depending on which one you choose, that means a phone number for text codes, an authenticator app, or a backup code sent to your email. When you use email codes or backup codes, we record your IP address (the number that identifies your internet connection) and the browser you used so we can spot misuse. We also record the IP address and browser of our own administrators when they take sensitive actions, and we keep a log of any time a platform administrator views your account as you for support purposes.

Giving and payments

When you give, we store the amount, currency, date, the organization and campaign you gave to, your name and email as the donor, and Stripe’s reference numbers for the payment. For recurring gifts we store the schedule and the Stripe subscription reference. Card numbers never touch our servers. You type them into a Stripe form that talks directly to Stripe; we keep only Stripe’s customer and payment-method reference numbers. When a business saves a card for advertising, the same is true, and we ask Stripe for the card brand and last four digits only when we need to show them to you.

Organizations that receive gifts through The Exchange set up a Stripe Connect account. Their bank details go to Stripe; we see only the bank name and last four digits.

Benevolence requests

If you ask an organization for help through a benevolence request, we store your answers to that organization’s hardship questions, any documents you attach (kept in private storage and shown only through short-lived links), messages between you and the organization, the organization’s decision and internal notes, and payout records. The organization you asked, and any organization your request is escalated to, can read it. This is sensitive information and we treat it that way.

What you post and send

Posts, comments, likes, saves, stories, story highlights, reels, notes, the people you follow and connect with, direct messages, group and team chat, live-broadcast chat, and attachments. Direct-message attachments live in private storage. Photos you attach to posts, your profile photo, and organization images are stored in public storage, which means anyone with the file’s address can open it. Videos are stored with and played from our video provider, Bunny.net (see section 4).

Live broadcasts, rooms, recordings and transcripts

When you broadcast or join an audio room in The Exchange, your audio and video pass through our own media servers. Every broadcast and audio room is captured to disk as it happens and the file is kept for replay by the organization. The host chooses whether a transcript is made; when transcription is on, the room shows a “Transcribing” badge, and the transcript is saved as a note for the organization. Transcripts are made by transcription software running on our own server. We record who joined a broadcast and when.

How you use The Exchange

We keep track of how you use The Exchange: what you viewed and for how long, what you liked, commented on, shared, saved, hid, reported or muted, whom you followed, gifts you gave, rooms you joined, products you looked at, and whether you were on the web, iPhone or Android. From that we work out what you seem interested in and put you in broad groups such as “giver,” “live attender,” “commenter,” or “church admin.” These shape your feed, recommendations, and the ads from organizations on The Exchange described in section 3. We count views of organization pages.

Location

The Discover map and the mobile app ask for your device location so we can show believers and churches near you. If you allow it, we save only a rough location, accurate to about three miles; your exact coordinates are never saved. You control whether you appear on the map at all, how far away you can be discovered, and what shows with your pin, at Map settings. Posts may carry a place name and coordinates only if you tag one. We turn organization addresses into map points so they appear on the map.

Devices and notifications

The mobile app saves a code that lets us send notifications to your phone, what kind of device it is (iPhone, Android or web), and an ID number for the device. A device is tied to one account at a time. The code is deleted when you sign out, when the device stops accepting notifications, or when your account is deleted.

Connected services

If you connect Google or Microsoft, we store the keys Google or Microsoft gives us so the connection keeps working, and your connected email address. What we ask for: Google Calendar (to read and create events for scheduling), Google Drive access limited to files we create (to export notes as Google Docs), read-only Google Sheets (to import a contact list you choose), and your email address. From Microsoft: your profile and calendar. Organizations can also connect YouTube, and we store that key on the organization. See section 4 for our Google Limited Use commitment.

Store, events, tickets and ventures

If you buy from a member business, we store your name, email, phone, shipping and billing address, the items, and Stripe references. For event tickets we store the buyer and attendee names and emails and whether you checked in. If you back a venture we store the amount, your message, and whether you chose to be anonymous.

Surveys and forms

Answers you give to a platform survey or an organization’s survey, along with the name and email you enter. Public website forms and connect cards run by an organization save what you typed, including a birthday if the card asks for one, and any email replies you send to that thread.

Advertising accounts

Organizations and businesses that advertise have an ad account with a balance, spending caps, a Stripe billing reference, and a record of every charge and top-up, and which staff member made it.

The visitor chatbot on public pages

The help chatbot on our public pages sends what you type, and the page you are on, to OpenAI to generate an answer. If you use the voice option, your microphone audio streams directly from your browser to OpenAI. We do not store those conversations. The chatbot is not connected to your account and is not shown inside the signed-in product.

Data organizations store about other people

Churches and organizations use The Exchange to keep records about their own people. That can include people who are not members of The Exchange. An organization may enter or import: contact names, emails and phone numbers; household addresses and who lives together; birthdate, gender, marital status, employment, occupation, income bracket, giving pledge, number of children, skills, causes and spiritual gifts; where someone is in a follow-up process and how involved they are; pastoral notes; prayer requests and who prayed; prophetic words and attachments; text messages and emails exchanged with the contact; internal form submissions; and volunteer status. Contacts come from manual entry, spreadsheet uploads, Google Sheets imports, connect cards, event orders and inbound text messages.

The organization decides what to collect and is responsible for having a good reason, and any permission the law requires, to keep it. We keep and handle that information on the organization’s behalf and do only what the organization tells us to with it. Only that organization’s staff and our own systems can read it. If you are in an organization’s records and want something changed or removed, ask that organization first; you can also write to us and we will pass your request along.

Things we do not collect

We do not collect your birthdate for your account, do not let outside advertising companies track you, do not read your phone’s contacts, and do not store card or bank account numbers.

• To run the Service. Sign you in, show your feed and profile, process gifts and orders, deliver receipts and notifications, run broadcasts and rooms, sync calendars, and keep organization records where their staff can use them.
• To personalize. How you use the app, the interests you told us about, the broad groups described in section 2, and your rough location shape your feed, the people and organizations we suggest, and the ads you see.
• To show ads from organizations on The Exchange. Organizations and businesses on The Exchange can pay to reach members. Targeting uses only information from inside the platform: the broad groups above, interests, city and state, and pages or organizations you follow. No outside advertising company or data seller is involved, and we never give an advertiser your identity. You can see why any ad was shown, turn off use of your activity, stop organizations you follow from reaching you, opt out of topics, and hide advertisers at Settings → Ads.
• To keep people safe. Every post, story, message, ad and broadcast frame is checked by automated screening software that we run ourselves. Flags, review notes and reports you file are kept so our team can act on them. We also use IP addresses to slow down or block anyone flooding the Service.
• To secure accounts. The second sign-in step, security logs, and records of what our administrators did.
• To communicate with you. Emails about things you did (receipts, security codes, replies) and push notifications about your account, gifts, messages and organization activity. You choose which notifications you get at Settings → Notifications.
• To understand usage. Google Analytics page views and a handful of events such as sign-in, donation completed and search, as described in section 6.
• To meet legal duties. Tax, accounting, and answering requests from courts or the government that we are legally required to answer.

We do not sell personal information. We do not share it with advertisers or data sellers for their own use.

In short: Supabase holds the data, Stripe holds the money, Vercel serves the website, and our own media servers carry live video and audio. The rest are smaller helpers, each getting only what it needs for its job.

We use other companies to run parts of the Service. Here is the full list as of the date above.

• Supabase — our database, sign-in and file storage. Hosted in the United States (Amazon’s Ohio region). Holds nearly everything described in section 2. Supabase also delivers text-message sign-in codes through the text-message provider it is set up with.
• Vercel — hosts the website and its server code. Every web request, including your IP address, passes through it.
• Stripe — all card payments, recurring gifts, organization payout accounts (Stripe Connect), store checkout and sales-tax calculation. Receives donor and buyer names, emails, amounts and shipping addresses, plus the organization’s business and owner details during Stripe’s own onboarding.
• Resend — sends our platform email (receipts, invites, notifications, security codes) and receives replies to organization form threads.
• Amazon Web Services — sends email an organization addresses from its own domain, stores audio-room recordings, hosts organization websites built on The Exchange, runs our timed background tasks and receives payment updates from Stripe. Those background tasks carry only record numbers, never your profile or personal details.
• Twilio — sends and receives text messages for organizations that turn on SMS. Receives the recipient phone numbers and message text.
• Our own media servers — live broadcasts and audio rooms come into servers we run ourselves, rented from OVH in the United States. Broadcaster and speaker audio and video, and viewer IP addresses, pass through them. Our transcription software runs on our own servers as well, and our automated screening software runs on a server we operate.
• Bunny.net — stores and plays uploaded videos and finished recordings, and delivers live video to viewers. When you watch, Bunny.net sees your IP address and browser.
• Expo — delivers push notifications to the mobile app. Receives your notification code, the notification title, a short preview and the record numbers it links to.
• Sentry — error reporting in the mobile app only. Set to not send personal information; it gets device and app details and error messages.
• Google — Google Analytics on the website; sign in with Google; Calendar, Drive and Sheets when you connect them; YouTube when an organization connects a channel; turning organization addresses into map points; Google Fonts on some pages; and Google Play to verify Android subscriptions.
• Microsoft — sign in with Microsoft and Microsoft 365 calendar when you connect it.
• Apple — verifies App Store subscriptions using transaction reference numbers.
• OpenAI — powers the visitor chatbot and its voice option on public pages only. Receives what you type or say to that chatbot. Nothing from your signed-in account is sent to OpenAI by us.
• Upstash — keeps a short-lived count of how many requests each internet address or account sends, so we can stop someone flooding the Service. The counts are deleted within minutes.
• Airtable, Slack, Webflow and web addresses an organization chooses — only when an organization sets up an automatic rule that sends records (for example a new donor’s name and amount) to that destination.
• GoDaddy — web-address search and setup for organization websites; receives the web address, not personal data.
• Pexels and OpenStreetMap — stock photos and the map images. Loading the map shows your IP address to OpenStreetMap.
• jsDelivr — a code library loaded by the website builder’s editor. Only the IP address of the staff member editing a website reaches it.

Beyond these providers, we share information with the organization you interact with (they see your gifts, requests, orders, form answers and the records they keep about you), with other members as described in section 2, when the law requires it, to protect people or the Service, and with a successor if The Exchange is ever sold or merged, under this same policy.

Google Limited Use

In plain words: anything we get from your Google or Microsoft account is used only for the feature you connected, and for nothing else.

Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. Data from Google or Microsoft connections is used only to provide the feature you connected it for. It is not sold, not used for advertising, and not read by our staff except with your permission, for security, or as the law requires. You can disconnect at any time from your account settings, or revoke access in your Google or Microsoft account.

The Exchange has no built-in AI features. We removed them on September 15, 2026. The only exception is the visitor chatbot on our public pages, described above.

Instead, you can connect an AI you already use, such as Claude (Anthropic) or ChatGPT (OpenAI), to your account from Connect to AI in your dashboard. When you do, your AI comes to The Exchange and asks for what you request; we never send anything to it on our own. We never send your data to Anthropic or OpenAI ourselves. Whatever your AI reads goes to the AI company under your own account with them and their privacy terms.

What you should know about the connection:

• It acts as you, inside one organization at a time. You choose the organization when you connect, and the connection stays in it: to use your AI in another organization you belong to, you connect it there too. It always has exactly the permissions your role holds in that organization, and never more. It cannot do anything you could not do yourself, and it cannot change your password, sign-in methods, billing or payouts.
• Depending on your role, it can: read and change your to-do list and week plans, hand a to-do to a team member or mark one done (which notifies them exactly as if you had), and read your goals; read the team roster and post messages to your team chat as you; read, write and update notes; read and change the budget's lines and transactions; read giving records: totals, campaigns and single gifts (with the givers' names for staff who may see them); read people's records (contact details, stage, tags, household and giving history) for staff who may see them; import a member list into People and, when you say so, email invitations to join; read the calendar and events with who registered, and create events; read surveys and their answers, and create and publish surveys; see the organizations you belong to and your role in each, and search and fetch anything in the areas above that you could open yourself. It never moves money. Every result is labeled with your name and organization so the AI knows whose data it is.
• You approve the connection on a permission screen, the same way you would connect an app to Google. That permission lasts 30 days and is extended automatically while you keep using it; the renewal itself lasts 90 days and is replaced each time it is used, so a connection stays alive as long as it is used at least every 90 days. You can also create a personal link that keeps working until you cancel it. To make the sign-in work we also store the AI app’s registration (its name and return address), a sign-in code that expires in ten minutes, and a renewal key that expires in 90 days.
• We do not receive or store your AI conversation. The only thing saved in The Exchange is what you ask the AI to create, such as a note or a to-do. For each change an AI makes we keep a short record of who, which connection, which organization, which tool and when, never what was written; and we record when each connection was last used. Our hosting provider sees each AI request as it does every other web request (see Vercel in section 4), and we note failed connection attempts in our error logs.
• Disconnect any time from Connect to AI. The AI is cut off immediately. Leaving an organization also ends the AI’s access to it. Removing The Exchange inside Claude or ChatGPT stops that app from calling us; to be sure the connection itself is dead, also disconnect it here.

We set a small number of cookies, for signing in, protecting the sign-in process, and remembering the pre-launch site password. None are used for advertising.

• Session cookie (name begins with sb-) — keeps you signed in. Set by Supabase.
• site_lock_access — remembers that you entered the pre-launch site password. 30 days.
• admin_elevation — an extra 30-minute sign-in used only by our own administrators; members never see it.
• Short-lived sign-in cookies — make sure it is really you connecting Google, Microsoft or YouTube. They last ten minutes, except the request-access identity cookie, which lasts fifteen (their names are auth_oauth_state, ar_oauth_state, ar_identity, ab_oauth, ab_oauth_popup, eb_oauth_nonce and yt_oauth_nonce).
• Google Analytics (_ga and _ga_*) — set by Google on every page of the website, including signed-in pages. We send page views and a few events such as sign-in, donation completed (with the organization’s name, not the amount), contact-form submissions and search terms. We do not show a cookie banner and there is no in-app switch for analytics today; you can block it with your browser’s tracking protection or Google’s opt-out add-on.

View preferences such as list-versus-grid are saved inside your browser on your own device, not in cookies, and never leave your device.

We keep your account information for as long as you have an account. Here is what has a fixed lifetime and what does not.

• Stories disappear from view after their expiry time, but the photo or video itself stays on our storage for now.
• Security codes and sign-in cookies — email sign-in codes and sign-in cookies expire after ten minutes. We remember a browser you confirmed with an email code for 30 days. Our own administrators’ extra sign-in lasts 30 minutes. Links to private attachments stop working after five minutes.
• Notification codes for your phone are removed at sign-out or when the device stops accepting notifications.
• Giving records are kept for as long as the receiving organization needs them for its own books and tax reporting. They survive account deletion.
• Orders and tickets are kept for the seller’s records and, if you delete your account, are kept but no longer tied to your name.
• Direct messages you sent to others stay in their inbox after you delete your account, with your name removed. Group and team chat messages you sent are deleted with your account.
• Organization records about you (contacts, households, pastoral notes, prayer requests, benevolence decisions) belong to the organization and are kept until it removes them.
• Usage records, ad views, page-view counts, security sign-in records (the IP address and browser noted when you use an email or backup code), recordings, transcripts, screening records, reports and administrator logs currently have no automatic deletion schedule. We are telling you that plainly rather than promising a schedule we do not run yet.
• AI connection keys are marked cancelled rather than erased, and are removed when your account or the organization is deleted. The key itself is never saved anywhere; we keep only a scrambled fingerprint of it.

See and correct your information

Your profile, sign-in methods, notification settings, map settings, ad settings and connected services are all editable from your dashboard. Organization staff can edit the records their organization keeps.

Get a copy

There is no self-serve download in the app today. Email support@theexchangeapp.church from your account address and we will send you the personal information we hold about you.

Delete your account

On the web, go to Dashboard → Settings → Security & Data, choose “Delete account,” and type the confirmation phrase. This removes your sign-in immediately and, with it, your profile, posts, stories, comments, follows, notes you authored, calendar connections, map settings, notification codes, ad preferences, intent scores and segments, benevolence requests you submitted, and your AI connections. There is no waiting period and no undo.

Some records are kept, or kept but no longer tied to your name, rather than erased: gifts you gave (kept for the organization’s books), orders and tickets you bought, direct messages you sent to other people, and records an organization keeps about you as a contact. Files you uploaded to public storage and your Stripe customer record are not removed by the in-app button today; email us and we will remove them by hand. Usage records and interest scores are not removed by the in-app button today either; email us and we will clear them by hand.

If you have ever given while signed in, hosted a broadcast, or been added to an organization’s team, the in-app deletion may not be able to finish on its own because those records are attached to your account. If that happens you will see an error; email support@theexchangeapp.church from your account address and we will complete the deletion within 30 days, keeping only the giving records the organization must retain.

In the mobile app, the “Delete account” row opens an email to support@theexchange.app, and a person completes the deletion for you.

Notifications and email

Choose which in-app, push and email notifications you receive at Settings → Notifications. Emails we must send to run your account (receipts, security codes) cannot be turned off.

Ads

Turn off use of your activity for ads, opt out of topics, hide advertisers, and see why an ad was shown at Settings → Ads.

Location and discoverability

Deny location permission in your browser or phone, or turn off discoverability at Map settings.

Disconnect services and AI

Remove Google or Microsoft from your account settings, and remove any AI connection from Connect to AI.

California and other US state rights

If you live in California or another state with a privacy law, you have the right to know what personal information we hold about you, to correct it, to delete it, and to not be treated differently for asking. We do not sell personal information and we do not share it for cross-context behavioral advertising (ads that follow you from other websites); the ads on The Exchange use only information from inside the platform, and you can turn that use off in Settings → Ads. To exercise a right, email support@theexchangeapp.church. We may ask you to confirm the request from the email address on your account. You may have someone make the request for you if they can show you authorized it.

If you are in an organization’s records

Ask the organization first; it controls those records. If you cannot reach them, write to us and we will help.

• Every account must use a second sign-in step.
• Everything sent between your device and our servers is encrypted (the padlock in your browser).
• Passwords are scrambled by Supabase so they cannot be read back. Card and bank numbers are held by Stripe, not us.
• Our database is set up so that members see only their own data and organization staff see only their organization’s.
• Hardship documents, chat attachments and prophetic-word attachments are stored privately and opened only through links that expire in minutes.
• Platform administrators must enter an extra code before sensitive actions, and every such action is logged with the administrator’s IP address.

Two things we want to be honest about. Profile photos, post photos, organization images and broadcast recordings are served from public storage, so anyone who has a file’s address can open it even without an account. And no system is perfectly secure; if we learn of a breach that affects your information, we will notify you and the relevant authorities as the law requires.

The Exchange is for adults. You must be 18 or older to hold an account, and we do not knowingly collect personal information from anyone under 13. If we learn that a child under 13 has created an account or given us information directly, we will delete it. Tell us at support@theexchangeapp.church.

Organizations sometimes keep records that include children, for example a family’s household or a birthday on a connect card. The organization is responsible for having a parent’s or guardian’s permission where the law requires it; we hold those records for the organization as described in section 2.

The Exchange is operated from the United States and our primary providers store data in the United States. If you use the Service from elsewhere, your information will be transferred to and processed in the United States, where privacy laws may differ from those where you live.

When we change this policy we update the date at the top. If a change meaningfully affects how we use your information, we will also tell you by email or a notice in the Service before it takes effect.

Figures Solutions LLC (The Exchange)
Detroit, Michigan, United States
support@theexchangeapp.church
www.theexchangeapp.church