CenáculoPeople's data is serious.
Who missed, who asked for prayer, who is a minor: church software holds delicate things. Here, everyone sees only their part, and who read what is on record.
The principles
One church never sees another
All data carries an automatic filter for the church of whoever signed in.
Running is not reading
IT runs the system, but does not read pastoral notes.
The server decides
Each screen and action is checked on the server, even if someone tries the address directly.
Rules with tests
Automated tests check every role, every screen and every action.
Signing in
Two-step verification by email code, required for pastors and IT, or by an authenticator app. A temporary password changed on first sign-in, and limits on attempts.
Privacy in practice
Removal on request
On the record, only the pastor, confirming with the full name.
Minors
A linked guardian and recorded consent, with who authorised it and when.
Export the data
Your church takes its own data whenever it wants.
Terms and privacy
Public, in three languages, with acceptance recorded by version.
Private photos
The system decides on each request who may see them.
Everyone controls their own
The device list shows where the account is signed in, and "End all sessions" signs them all out. Changing the password ends the other sessions.
Logs and backups
Reading is logged too
Who read a care note or opened a minor's record is on file.
Backups
Automatic and encrypted, with restores rehearsed to prove they work.
Notifications without content
Nothing pastoral ever reaches the lock screen.
Encrypted journal
In the members app, only the person can read it.
Who can do what
Pastor
Sees what is pastoral and decides on data removal.
Admin / IT
Runs the system and grants access, without reading pastoral notes.
Media
Opens only Communication.
Project operators
Named one by one, because projects touch people's data.
Questions leaders ask
Who owns the data?
The church. It can export at any time, and each person can ask for their data to be removed.
Can another church see our data?
No. All data carries the filter of the church of whoever signed in, and automated tests check this.
What if someone loses their phone?
Whoever runs the system resets the two-step verification and password, and open sessions are ended.
Shall we talk?
You talk to a salesperson on WhatsApp and get your questions answered: +55 17 99154-6181.