Hopeline ID Privacy Policy

Internal accounts are created by an admin for Hope Channel Indonesia staff/team members, and can access both internal and public apps connected to Hopeline ID.

Public accounts are self-registered by anyone through the open registration page, and can only access apps an admin has marked public — not internal apps. This status ("internal" or "public") is stored in Hopeline ID solely to determine which apps you're allowed to see and access; it is not a fine-grained role/permission system, which remains managed separately by each app.

We only store the minimum information needed to recognize your identity: your name, email address, password (if you registered with email/password), and account status (internal/public, active/deactivated).

If you choose to sign in with Google, we never receive or store your Google password — Google only shares your name and email address with us to create or match your Hopeline ID account. Accounts created through Google have no local password on Hopeline ID, so they cannot be used to sign in via the email/password form.

For accounts using a local password, the password is never stored in its original form — every password is converted into a one-way hash (bcrypt) before being saved, so even we cannot see your actual password.

Your information is used solely to verify your identity when you sign in, to determine which connected apps appear for you on the dashboard (see Section 1), and to recognize your login session across those apps.

When you sign in to a connected app (e.g. Hopeline Connect or Hopeline Prayer) through Hopeline ID, we share your name and email with that app so it can recognize your account there. Your password is never shared with any other app.

If you log out of Hopeline ID, we notify the apps that support this feature so your session there is also automatically revoked (single logout). Conversely, logging out of one connected app does not affect your session in Hopeline ID or in any other app.

That app manages your access rights (roles/permissions) separately, according to its own privacy policy.

We apply industry-standard security practices, including password hashing, HMAC signing for inter-app communication (including single logout), and encrypted (HTTPS) connections in production. Only one active session is allowed per account.

Internal accounts are kept for as long as you remain part of the team that needs access. Public accounts are kept for as long as you continue using one of the connected public apps.

An admin can deactivate an account at any time (internal or public) from the User Management page. Deactivating an account immediately revokes your login session in Hopeline ID and in connected apps that support single logout. To request account deletion, contact an admin using the details in Section 7.

Questions about this Privacy Policy can be sent to: hopemediaindonesia@gmail.com.

This policy may be updated from time to time. Significant changes will be communicated through the relevant apps.