New World Scheduler takes data privacy and security very seriously. We believe that your congregation data is yours, should be available only to your congregation, and should be fully secure at all times.
We also understand we are living in critical times, and soon the Great Tribulation will arrive. (Matthew 24:21)
New World Scheduler and NW Publisher app fully comply with the European Union (EU) General Data Protection Regulation (GDPR), UK GDPR and other similar Data Protection Regulations.
Data Processing Agreement
Please see the New World Solutions Pty Ltd Data Processing Agreement
Common GDPR Questions
Yes. New World Scheduler and NW Publisher app fully comply with the European Union (EU) General Data Protection Regulation (GDPR), UK GDPR and other similar Data Protection Regulations.
Please see our Data Processing Agreement, Privacy Policy and Data Security and Privacy for more information.
New World Scheduler supports GDPR compliance by using end-to-end encryption, secure authentication, and controlled data sharing. Congregations retain full control over the information they enter and are responsible for ensuring their use complies with applicable laws.
Please see our Data Processing Agreement, Privacy Policy and Data Security and Privacy for more information.
Yes. We provide a Privacy Policy, Data Security and Privacy information, and a Data Processing Agreement (DPA). The DPA forms part of our License Agreement where applicable and explains our data processing responsibilities and security measures.
Congregation Data is stored locally on users’ devices and, if Congregation Sharing is enabled, on servers in the selected region. European servers are located in Belgium. No Congregation Data, logs or meta-data is ever transferrred outside of the selected Sharing Region.
Please see our Data Processing Agreement, Privacy Policy and Data Security and Privacy for more information.
No. For congregations selecting the European region, data is stored in Belgium. New World Solutions does not transfer any personal information or data outside Europe.
Please see our Data Processing Agreement, Privacy Policy and Data Security and Privacy for more information.
New World Scheduler takes data security and privacy extremely seriously. We use multiple layers of security to ensure Congregation Data remains secure, confidential, and under the congregation’s control.
Our security measures include:
End-to-End Encryption (E2EE). All Congregation Data is encrypted and obfuscated locally on the user’s device before transmission. We use AES-256-GCM encryption with Authenticated Additional Data (AAD), with encryption keys derived using Argon2id and SHA-256. Random, unique initialization vectors and salts are generated for encrypted data items.
Private Encryption Keys. Encryption keys are generated and stored locally on users’ devices. They are never transmitted to, stored by, or accessible to New World Solutions or our sharing servers. Therefore, our developers, administrators, and support personnel cannot decrypt or read the underlying Congregation Data, or determine whether it contains any Personal Data.
Secure Local Storage. Congregation Data is stored encrypted on users’ devices. NWS Desktop also uses Windows Cryptography, supports optional password protection, and creates encrypted, password-protected backups.
Strong Authentication and Authorization. Congregation Sharing uses OAuth 2.0 authorization, access and refresh tokens, two-factor authentication, strong passwords, and device verification. Congregation administrators control which users are approved and what permissions they receive.
Congregation Data Isolation. Each congregation has a unique, obfuscated storage location. Authentication credentials are restricted to the relevant congregation, preventing approved users from accessing another congregation’s shared data.
Secure Data Transmission. All Congregation Sharing transfers use encrypted TLS 1.2 or higher connections. Older, insecure TLS 1.0 and TLS 1.1 protocols are not used.
Secure Server Infrastructure. Congregation Sharing uses Google Firebase and Google Cloud infrastructure with physical, technical, and organisational security measures, including access restrictions, monitoring, and security controls. Google maintains internationally recognised security certifications and assessments, including ISO 27001 and SOC reports. Congregations can select their sharing server region, with European servers located in Belgium.
Data Retention and Deletion. Congregation Sharing is entirely optional. Shared data is deleted from the sharing server when the congregation disables sharing. Inactive Congregation Data is automatically deleted after 60 days, subject to the exceptions described in our DPA. New World Solutions does not maintain separate backup copies of Congregation Data, except for necessary temporary infrastructure operations.
Minimal Collection of Personal Information. NWS Desktop and NWS Mobile collect only registered users’ first names and email addresses for account purposes, separately from Congregation Data. The NW Publisher app does not collect any user data.
Most importantly, New World Solutions cannot decrypt, inspect, or read the underlying information stored through Congregation Sharing. Each congregation determines what information is entered and who is permitted to access it.
Please see our Data Processing Agreement, Privacy Policy and Data Security and Privacy for more information.
Further Information
If you require further information or have any problems or questions about your data, please Contact Us.