GRM app

Privacy policy

Effective October 19, 2026

Global Revival Missions ("GRM," "we") runs the GRM app at mygrm.org and in the App Store and Google Play. This policy explains what we collect, why and the choices you have. We do not sell your information, show ads or track you across other apps or websites.

What we collect

• Account details: your name, mobile number, optional email address, birth month and day (never the year), home branch and your choice about text messages. Your password and recovery code are stored only as secure one-way hashes.
• Home address: asked for when you request care or services, so a leader can visit or send help. Your mobile number, email, birthday and address are shown only to your branch pastor and the leaders your pastor or the administrator appoints to see member details.
• What you send us: care and counseling requests, class sign-ups, requests to serve and prayer wall requests.
• Your activity in the app: Amens, event RSVPs, poll votes, fasts you join, word quiz scores and the days you read or prayed (for your streak and milestones). Poll votes are shown only as totals. Your "How is your heart today?" choice is not saved. Private reflections you write are visible only to you. Leaders see only who said they are coming to an event.
• Giving: the amount, date and fund of each gift so we can send giving statements. Card and bank-debit payments are handled by Stripe; we never see or store your card number, bank login or account number. If you give straight from your bank (Zelle, transfer or check) and tell us in the app, we keep only what you enter: amount, fund, date, method and an optional reference. The ministry's own giving details are shown only to signed-in members.
• Notifications: if you turn them on, a device token from your phone's push service and the types of reminders you chose.
• Study companion questions: your question is sent to our AI provider (Anthropic) to write an answer. We don't save your questions or the answers, only a daily count so we can apply a fair limit. Anthropic does not use these questions to train its models.
• Basic technical data: standard server logs (such as time and type of request) kept for a short time to keep the service secure.

How we use it

To run your account, deliver the app's content, respond to care requests, enroll you in classes and teams, send reminders you asked for, keep giving records and protect the service from misuse.

Who can see it

• Care requests are seen only by the leaders responsible for that kind of care (your branch pastor and the care team they or the administrator appointed), following GRM's confidential pastoral care policy. Counseling requests are restricted further. After you send a request the app sends you automatic replies (an acknowledgement, scripture and check-ins until a leader makes contact); these are generated from the kind of request you chose, are visible only to you and your request's leaders and stop when you tell us a leader reached you.
• Language. If you choose a language other than English under Me, the text shown to you (GRM's words, devotions, stories, news, care replies, Study companion answers and prayer wall posts) is translated for you by a translation provider (Anthropic when GRM has connected it, otherwise a general translation service). GRM keeps translations of its own content so they are only translated once; personal text such as care replies and prayer wall posts is translated on the fly and not kept. Your own messages in Messages are never sent for translation.
• Read-aloud voice. The Listen button plays either a recording made by one of our pastors or audio generated from the text. When generated audio uses an AI model of a pastor's voice, the player says so ("Voice of … (AI)"); a real recording is labelled "Read by …". That voice model is built from recordings the pastor provided, is held in GRM's own account and is used only for GRM content. Nothing about you is sent to the voice provider; only the text being read.
• Care conversations and in-app calls. When you send a care request, the leader assigned to it can reply to you inside the app and you can write back. That conversation is seen only by your branch pastor and the leaders your pastor or the administrator has appointed to that kind of care; a leader never sees a request they sent themselves. Photos you or a leader add to a conversation are shrunk on the phone before upload and are kept with the conversation under the same access rules. Leaders may add private notes for one another that you do not see. A leader can also open a prayer room for a call with a third person (for example a counselor or your spouse); these rooms run on Jitsi Meet (meet.jit.si unless GRM configures its own server) and are not recorded by GRM. Voice and video calls started from a conversation go directly between the two phones using WebRTC and are encrypted end to end; they are never recorded and GRM does not hear or store them. Our server only rings the other person and passes the connection details. When a direct connection is not possible (for example on some mobile networks) the encrypted call is relayed through a TURN server (Metered Open Relay unless GRM configures its own), which cannot decrypt it. We keep a log of when a call happened, who was on it and how long it lasted, shown in the conversation, and leaders can set quiet hours during which members are asked to write instead of calling.
• Prayer wall requests are reviewed by a leader before anyone else sees them. Approved requests show only your first name or "A GRM member," never your surname, email or phone. They come down after 30 days.
• Giving records are seen only by authorized finance leaders.
• Service providers that help us run the app: Render (hosting), Stripe (payments), Anthropic (study companion), ElevenLabs or OpenAI (read-aloud audio) and Apple, Google or Mozilla push services (notifications). They may use the data only to provide their service to us.
• YouTube (Google) plays the short films, worship songs and sermon videos in the app through its privacy-enhanced player (youtube-nocookie.com). YouTube sets no cookies until you press play; once you do, Google's privacy policy applies to the playback.
• Ask anything (Next Gen) questions are shown to GRM youth leaders and, once answered, to all members without your name. Your account is linked to the question only so that you can see the answer; no leader or administrator screen shows who asked.
• Next Gen mode and age range. Switching on Next Gen mode is optional. We ask for an age range (13 to 17, 18 to 30 or over 30), not a birth date. It is used only to open the youth portal, to add you to the moderated Next Gen room and to protect members under 18: a teen can be found in the directory or messaged first only by other teens and GRM youth leaders. The age range is visible to you and to GRM administrators, not to other members.
• Next Gen stories, wins, reactions and XP. Stories (a photo or short text) and wins you post in Next Gen are reviewed by a GRM youth leader before anyone else sees them, show only your first name and last initial (or Anonymous for wins, if you choose) and stories are removed after 24 hours. Photos are stored in our database behind an unguessable link that appears only inside signed-in member screens. Reactions are shown as anonymous counts. Your XP, streak and badges are visible only to you; leaders see totals, never names, and there is no leaderboard.
• Small groups and serving. In a group, other members see your first name and last initial only. Attendance at a group meeting is seen by the group leader and your branch pastor. Serving sign-ups are seen by the team leader and your branch pastor.
• Reading plans, streaks and what you use. Your reading progress and which parts of the app you open are private to you and are used only to order your Today screen and to count how many members are active. Leaders see totals for a branch, never your personal list.
• Milestones. Your birthday, baptism date and the day you joined GRM are seen by your branch pastor and the leaders your pastor or the administrator has appointed to see member details, so they can celebrate them with you. You can leave them blank.
• Notes from leaders. When a leader prays for one of your requests, logs a check-in or sends you a greeting, a short note appears in your app. These notes come from the leaders who already have access to your request or your branch.
• Responding in service. If you tap Respond on a Sunday (salvation, rededication, baptism, prayer), your response goes to your branch pastor as a confidential care report. It is never shown to other members.
• Monthly pulse. The two-question pulse is anonymous. Leaders see scores and comments for a branch, never who answered.
• Giving. Your giving history is private to you. The Today screen may remind you of your own last gift; no other member sees it.
• We may share information if the law requires it or if someone is in danger.

Members directory and messages

• Opt-in only. You appear in the members directory only after you turn on "Let other members find me." You can turn it off at any time and you disappear immediately.
• What others see: your first name and last initial, your branch and a short line you write about yourself. Never your phone number, email, address or birthday.
• Who can find you: by default only members of your own branch. You can open this to all of GRM.
• Your photo (optional). You may add a headshot under Me. Your phone crops and shrinks it before upload; the original never leaves your device. It appears only where your name already appears to other members (the directory and chats) and you can change or remove it at any time. Photos are checked against the community standards below, automatically when an AI service is configured and by a few cleared leaders, who may remove a photo that does not fit and tell you privately. Members can report a photo. Deleting your account deletes it.
• Consent before contact. The first message from another member arrives as a request that you accept or decline. Group invitations also wait for your yes. Declining is silent.
• Private by design. Message text is encrypted where it is stored, with the key kept separately from the database. GRM leaders and staff cannot browse or open conversations. There are no read receipts and no online status. Notifications on your lock screen do not include message text unless you turn previews on.
• Automatic screening. Every message is checked automatically, by software, against the community standards below. Only a message the screen flags, or a message a member reports, is shown to a small group of cleared leaders (administrators and leaders given the Chat moderation role), together with the sender's name, the chat it was sent in and the reason it was flagged. Nothing else from the conversation is shown. Cleared leaders may remove the message, send the sender a private reminder of the standards or pause the sender's messaging. When an AI service is used to confirm a flag, the message text is sent to that service for the check only and is not used to train it.
• Reports. If you report a message, that message and your note go privately to your branch pastor under GRM's confidential pastoral care policy. Nothing else from the conversation is shared.
• Blocking stops a member from messaging or finding you. They are not told.
• Retention. Messages are deleted automatically after 180 days. You can remove your own messages at any time, delete a private conversation or leave a group. Deleting your account removes your messages' content.

Community standards for member chat

1. Speak with love and respect. No insults, mockery, bullying or harassment.
2. Keep it pure. No sexual content, flirting that crosses lines or requests for photos.
3. No profanity, slurs or hateful words about any person or group.
4. No threats, violence or intimidation.
5. No asking members for money, loans, investments, gift cards or crypto, and no selling.
6. No promotion of drugs, drunkenness, gambling or occult practices.
7. Protect privacy. Don't share another member's personal information.

Your choices

• Edit your profile or change your password in the app under Me.
• Turn notifications on or off, or choose which ones you get, under Me.
• Stay signed in. By default the app keeps you signed in on your device for 30 days after your last visit, using a secure sign-in cookie and the device's storage that only the GRM app can read. Turn this off under Me on a shared device; you are then signed out when you close the app. Signing out removes the cookie. We use no advertising or tracking cookies.
• Remove your own prayer wall requests at any time.
• Choose whether you appear in the members directory, who can find you and whether notifications show message text, under Me.
• Delete your account in the app under Me, then Delete my account. This removes your sign-in, profile, reflections, streak, prayer wall requests, sign-ups and notification settings right away. Giving records are kept for tax purposes without the account link, and care requests already sent stay in the confidential care record.

Children

The GRM app is meant for people 13 and older. Children under 13 should use the app with a parent or guardian.

Security

All traffic is encrypted with HTTPS. Access for leaders is limited by role and branch, and sensitive records need extra permission.

Changes and contact

If we change this policy we'll update the date above and let members know in the app. Questions? Call the GRM information line at 610-659-7898 or send a request in the app under Connect.