myGC App Privacy

Effective Date: September 18, 2026
Last Updated: September 18, 2026

The General Conference of Seventh-day Adventists (“GC,” “we,” “us,” or “our”) respects the privacy of employees and other authorized users of the myGC mobile application (“myGC” or the “App”).

myGC is an internal employee application designed to provide authorized users with convenient access to certain employment, payroll, travel, support, directory, and other GC services and information.

This Privacy Policy explains what information myGC accesses or processes, why it is processed, how it is protected, when it may be shared, how long it is retained, and the privacy choices and rights available to users.

1. Scope

This Privacy Policy applies specifically to personal information processed through the myGC mobile application and the systems used to operate the App.

myGC provides access to information that may already be maintained in GC or authorized third-party business systems. The App may retrieve, display, temporarily cache, or transmit information from these systems in order to provide its functions.

This policy supplements other GC employee privacy notices, policies, and legal obligations that may apply to employment records maintained by GC.

2. Information We Process

Depending upon the functions used and the information associated with an employee, myGC may process the following categories of information.

Identity and Employment Information

This may include:

Name
Employee identifier
Job title
Department
Organizational information
Employment status
Work contact information
Profile photograph

Contact Information

This may include:

Work email address
Personal email address when maintained in an authorized GC system
Work or personal telephone number
Home or mailing address

Payroll and Compensation Information

The App may provide authorized employees access to payroll-related information such as:

Salary or compensation information
Pay statements
Earnings
Deductions
Taxes and employer contributions
Payroll classifications
Limited banking information, such as the last four digits of an account number

myGC is designed not to store or display full Social Security numbers or full bank account numbers.

Leave and Employment Benefit Information

The App may display employment-related information such as:

Available leave balances
Leave categories
Leave history
Sick or extended sick leave information
Other employment benefit information

myGC is not intended to collect medical diagnoses or medical records.

Emergency Contact Information

Where available from authorized GC employment systems, myGC may display emergency contact information supplied by an employee.

Emergency contacts may include information about individuals who are not GC employees.

Travel Information

Where applicable, myGC may process employment-related travel information such as:

Travel destination
Travel dates
Business purpose
Travel costs
Approval status
Information concerning authorized dependent or spouse travel where applicable

IT Support and Asset Information

The App may process or display information associated with GC technology services, including:

Assigned devices or technology assets
Help desk requests
Support ticket status
Information submitted in connection with a support request
Attachments associated with support requests, where supported

Users should avoid including unnecessary sensitive personal information in support requests.

Authentication and Security Information

To authenticate users and protect GC systems, myGC may process:

GC account identifiers
Authentication information
Session and security tokens
IP address
Device and application information
Login activity
Security events
Audit information

myGC does not maintain a separate database of employee passwords. Authentication is performed using GC-authorized identity services.

Application and Diagnostic Information

We may collect limited technical information necessary to operate, secure, troubleshoot, and improve the App, such as:

App version
Operating system or device type
Error and crash information
Performance information
Security events
API activity
Diagnostic information

Diagnostic systems are configured to minimize the inclusion of personal information.

3. Information We Do Not Intentionally Collect

myGC is not designed to collect:

Precise GPS location
Advertising identifiers for behavioral advertising
Browsing history unrelated to the App
Contacts stored on the user’s personal device
Photos or videos stored on the device unless the user intentionally selects information for a supported App function
Full Social Security numbers
Full bank account numbers
Biometric templates
Information for behavioral advertising or cross-app tracking

myGC does not sell employee personal information or use employee information for third-party behavioral advertising.

4. How We Obtain Information

Information available through myGC may come from:

The employee
GC employment and administrative systems
UKG and related human-resource or payroll systems
GC directory and identity systems
GC Graph and related internal services
IT service-management systems
GC travel or administrative systems
Microsoft identity services
The user’s device when necessary to operate the App

Information may be retrieved from authoritative systems and displayed through myGC without becoming the authoritative record itself.

5. How We Use Information

GC processes information through myGC to:

Authenticate authorized users
Provide employee self-service functions
Display employee and organizational information
Provide access to payroll and compensation information
Provide access to leave and employment information
Support authorized business travel
Provide IT support and asset information
Maintain and secure the App
Prevent and investigate unauthorized access
Maintain security and audit records
Troubleshoot technical problems
Comply with applicable employment, accounting, legal, security, privacy, and regulatory requirements
Protect GC, its employees, systems, and information

We do not use myGC information for behavioral advertising or sell personal information obtained through the App.

6. Legal Basis for Processing

Where applicable law requires a legal basis for processing personal information, GC processes information based on one or more appropriate legal bases, which may include:

Administration of the employment relationship
Performance of obligations associated with employment
Compliance with legal obligations
GC’s legitimate interests in administering its workforce, providing employee services, securing its systems, preventing fraud and misuse, and maintaining business operations
Protection of the rights and security of GC and its employees
Consent where consent is appropriate and legally required for a specific optional activity

GC does not rely upon employee consent where another legal basis is more appropriate for processing necessary to administer the employment relationship.

7. Sensitive Information

Some information accessible through myGC may be considered sensitive or subject to additional legal protections in certain jurisdictions.

For example, leave information may indirectly reveal health-related information. Certain employment or payroll classifications may also reveal or permit an inference concerning an employee’s ministerial or religious role.

GC applies additional protections to such information and limits its processing to authorized employment, administrative, security, or legal purposes.

8. How Information Is Shared

GC does not sell personal information processed through myGC.

Information may be accessible to authorized GC personnel or service providers where necessary to operate the App, administer employment services, provide technical support, maintain security, or satisfy legal requirements.

Service providers supporting myGC may include providers of:

Cloud infrastructure
Identity and authentication services
Human-resource and payroll systems
Content delivery and application security services
Push-notification services
Error and diagnostic services
Application development and technical support

These providers are permitted to process information only as appropriate for the services they provide and are expected to protect personal information in accordance with applicable contractual and legal requirements.

9. Apple and Google Services

Depending upon the device used, myGC may use services provided by Apple or Google to distribute the App, deliver push notifications, or provide operating-system functionality.

Push notifications are designed to minimize sensitive information displayed outside the App. Where practical, notifications use general messages directing users to open myGC rather than displaying confidential payroll, leave, or other sensitive employment information on a device lock screen.

Apple and Google may independently process certain device, App Store, Google Play, or platform information under their own privacy policies.

10. International Processing

GC is a global organization, and some technology providers or authorized support personnel may operate from different countries.

As a result, personal information may be processed or accessed from countries other than the country in which the employee works or resides.

Where required by applicable law, GC uses appropriate contractual, organizational, and technical safeguards for international transfers and access to personal information.

11. Security

GC uses administrative, technical, and organizational safeguards designed to protect information processed through myGC.

These measures may include:

Encryption during transmission
Encryption of protected stored information
Microsoft-based authentication
Role-based access controls
Short-lived authentication tokens
Secure mobile credential storage
Network and application security controls
Audit logging
Security monitoring
Access restrictions
Vulnerability management
Secure software-development practices

No information system can be guaranteed to be completely secure. Users should protect their devices, GC credentials, and authentication methods and promptly report suspected unauthorized access.

12. Information Stored on the Mobile Device

myGC may temporarily store limited information on the user’s device to support App functionality and performance.

Sensitive authentication credentials are stored using security mechanisms provided by the device operating system, such as Apple’s Keychain or the Android Keystore, as applicable.

GC limits local storage of sensitive information where reasonably possible and applies technical protections appropriate to the sensitivity of the information.

Users should use device security controls such as a passcode, password, or supported biometric device-unlock mechanism.

13. Data Retention

GC retains information processed through myGC only for as long as reasonably necessary for the purpose for which it is processed, to meet legal or employment-record obligations, or to protect the security and integrity of GC systems.

Some information displayed by myGC remains part of an authoritative GC employment, payroll, financial, or administrative system and is retained according to the retention requirements applicable to that system.

Temporary or cached App data may have a shorter retention period.

Security and audit records may be retained for a defined period to investigate security events, demonstrate accountability, and protect GC systems.

Backup copies may remain for a limited period following deletion until the applicable backup retention cycle expires.

Termination of access to myGC does not necessarily result in deletion of employment, payroll, financial, legal, or other records that GC is required or permitted to retain.

14. Access, Correction, and Privacy Requests

Depending upon applicable law and the nature of the information, individuals may have rights concerning their personal information, including rights to:

Request access to personal information
Request correction of inaccurate information
Request deletion where applicable
Request restriction of certain processing
Object to certain processing where applicable
Ask questions about how their information is used
Exercise other rights provided by applicable privacy law

Some employment records cannot be deleted upon request because GC may be required or permitted to retain them for employment, payroll, accounting, legal, security, or regulatory purposes.

Where information displayed through myGC originates from another GC system, correction or deletion may need to occur in the authoritative system.

15. Account and App Data Deletion

myGC access is associated with an authorized GC employee account rather than a separate consumer account created solely through the App.

Employees and former employees may contact GC regarding deletion of personal information associated specifically with myGC.

Deleting the App from a device does not delete employment records maintained by GC or its authorized systems.

When an employee’s authorization to use myGC ends, access to the App may be disabled and App-specific information may be deleted according to GC’s retention procedures.

Underlying employment, payroll, financial, legal, security, and administrative records may continue to be retained where required or permitted by applicable law or GC’s legitimate recordkeeping obligations.

16. Push Notifications

If push notifications are enabled, myGC may use a device notification token supplied through Apple or Google’s notification services.

GC does not use push-notification tokens for advertising or cross-app tracking.

Users may disable notifications through their device settings. Disabling notifications does not prevent employees from accessing available information directly through the App.

17. Analytics, Advertising, and Tracking

myGC is an internal employee application.

GC does not use myGC to:

Serve third-party behavioral advertising
Sell personal information
Create advertising profiles
Track employees across unrelated third-party applications or websites for advertising purposes

Limited technical diagnostics may be used to identify crashes, troubleshoot problems, maintain security, and improve reliability.

18. Employee Monitoring

Security and audit information generated through myGC may be used for legitimate security, fraud-prevention, troubleshooting, compliance, and accountability purposes.

myGC is not designed as an employee location-tracking system and does not intentionally collect precise GPS location.

GC will not expand the App into new forms of employee monitoring or materially different processing without appropriate privacy, legal, and security review.

19. Changes to This Privacy Policy

We may update this Privacy Policy when myGC functionality, data practices, legal requirements, or supporting services change.

Material changes will be reflected by updating the “Last Updated” date and, where appropriate, providing additional notice.

20. Contact Us

Questions or requests concerning privacy or personal information processed through myGC may be directed to:

General Conference of Seventh-day Adventists
Data Protection / Privacy Office
12501 Old Columbia Pike
Silver Spring, Maryland 20904
United States

Privacy/DPO Email: privacy@gc.adventist.org

Employees may also use established GC privacy or employee-service channels to request assistance concerning their information.