Hopeline ID Privacy Policy

Internal accounts are created by an admin for Hope Channel Indonesia staff/team members, and can access both internal and public apps connected to Hopeline ID.

Public accounts are self-registered by anyone through the open registration page, and can only access apps an admin has marked public — not internal apps. This status ("internal" or "public") is stored in Hopeline ID solely to determine which apps you're allowed to see and access; it is not a fine-grained role/permission system, which remains managed separately by each app.

We only store the minimum information needed to recognize your identity: your name, email address, password (if you registered with email/password), and account status (internal/public, active/deactivated).

If you choose to sign in with Google, we never receive or store your Google password — Google only shares your name and email address with us to create or match your Hopeline ID account. Accounts created through Google have no local password on Hopeline ID, so they cannot be used to sign in via the email/password form.

For accounts using a local password, the password is never stored in its original form — every password is converted into a one-way hash (bcrypt) before being saved, so even we cannot see your actual password.

Your information is used solely to verify your identity when you sign in, to determine which connected apps appear for you on the dashboard (see Section 1), and to recognize your login session across those apps.

When you sign in to a connected app (e.g. Hopeline Connect or Hopeline Prayer) through Hopeline ID, we share your name and email with that app so it can recognize your account there. Your password is never shared with any other app.

Logout bekerja dua arah: jika Anda logout dari Hopeline ID, kami memberi tahu aplikasi-aplikasi yang mendukung fitur ini agar sesi login Anda di sana turut dicabut secara otomatis (single logout) — dan sebaliknya, logout dari salah satu aplikasi terhubung juga mengakhiri sesi Anda di Hopeline ID beserta seluruh aplikasi terhubung lainnya.

Aplikasi tersebut mengelola hak akses (role/izin) Anda secara terpisah, sesuai kebijakan privasinya masing-masing. Admin di Hopeline ID dapat melihat, khusus untuk keperluan dukungan pengguna, role apa yang Anda miliki di setiap aplikasi terhubung — informasi ini diminta langsung dari aplikasi tersebut setiap kali dilihat, tidak disimpan di Hopeline ID, dan tidak pernah digunakan untuk mengubah hak akses Anda di sana.

We apply industry-standard security practices, including password hashing, HMAC signing for inter-app communication (including single logout), and encrypted (HTTPS) connections in production. Only one active session is allowed per account.

Internal accounts are kept for as long as you remain part of the team that needs access. Public accounts are kept for as long as you continue using one of the connected public apps.

Admin dapat menonaktifkan akun kapan pun (baik internal maupun publik) melalui halaman Pengaturan Pengguna. Menonaktifkan akun langsung mencabut sesi login Anda di Hopeline ID dan di aplikasi terhubung yang mendukung single logout.

Akun yang sudah dinonaktifkan dapat dihapus admin secara permanen kapan pun — akun aktif tidak dapat langsung dihapus, harus dinonaktifkan terlebih dahulu. Penghapusan permanen turut menghapus sesi tersimpan, token akses OAuth, dan foto profil yang diunggah; data ini tidak dapat dipulihkan setelah dihapus. Anda juga dapat menghapus akun Anda sendiri kapan pun melalui halaman Profil, tanpa perlu menghubungi admin.

Questions about this Privacy Policy can be sent to: hopemediaindonesia@gmail.com.

This policy may be updated from time to time. Significant changes will be communicated through the relevant apps.