AfterMass — Walking with you after you enter the Church
AfterMass is operated by Ana Munley.
This Privacy Notice explains how AfterMass, operated by Ana Munley ("AfterMass," "we," "us," or "our"), collects, uses, shares, and protects your personal information when you create an account and use AfterMass (the "Service"). Ana Munley is the business owner and the person responsible for your personal information. Please read this notice alongside our Terms of Service.
AfterMass is a Catholic membership service, led by Ana Munley — a Catholic laywoman moved to serve the Church through her various channels — from her home in St. Cloud, Florida, USA. AfterMass is hers: she is the person you are joining, the one who stands behind every payment, and the one responsible for how and why your personal information is used and looked after. When you join, you become part of the AfterMass community — and your membership is what allows Ana and her small team to devote themselves ever more fully to this apostolate.
The technology, hosting, and day-to-day running of the Service are provided for us by ProgTrack, LLC (a company organized in Texas, USA), which acts as our service provider. ProgTrack handles your information only to operate the Service on our documented instructions, and never for its own purposes.
You can reach us about anything in this notice, including any request about your personal information, at [email protected].
AfterMass is offered from the United States and is directed to users in the United States. It is intended for adults in the U.S. who want Catholic formation, prayer, and community after entering the Church. We do not market or direct the Service to people in the European Union, the United Kingdom, or elsewhere outside the United States. If that changes in the future, we will update this notice first.
We keep the information we collect deliberately small. We collect only what we need to run your membership and, where you choose it, to send you optional updates.
Your name, your email address, and a password (which we store in a scrambled, one-way form — we never keep your password in readable text). We use this to create your account, sign you in, control which parts of AfterMass you can reach, and contact you about your account and the Service.
Whether your membership is active, which plan you are on, and references that let our payment processor connect your subscription to your account. If we grant a complimentary membership, we record that status. We never see or store your card number. Card details are entered directly with our payment processor, which handles the payment; we receive only the confirmation and references we need to manage your subscription.
Which lessons or sessions you have marked complete, so we can remember your place and show you how far you have come.
When you reserve a seat in an AfterMass Live session, we record that reservation so we can hold your place and let you join.
If — and only if — you choose to join our email list on this website, we record your name, your email address, how you signed up, and the date and time you gave consent. Signing up here is never automatic: the box is separate and unticked, joining the list is never required to use AfterMass, and creating an account does not add you to it. You can unsubscribe at any time using the link in any of those emails.
There is one other way a person can be on our email list, and it is described in Section 3(f) below.
Some people on our email list did not sign up on this website. They asked to be kept informed about Ana Munley's initiatives when they bought something from shopaftermass.com, the merchandise shop Ana co-owns. For those people we hold only the name and email address given at that purchase, together with a note recording that the shop is where the address came from.
We use it for one purpose: to send AfterMass Monthly and occasional notes from Ana. We do not use it to create an account for you, we do not add it to anything else, and it is not combined with membership information unless you join AfterMass yourself. Every email carries a one-click unsubscribe link, and unsubscribing removes you for good.
If you would rather we did not hold your address at all, write to [email protected] and we will delete it — you do not need to give a reason.
To keep accounts safe and prevent abuse, our systems keep limited technical records connected with signing in and using the Service. We do not build behavioral profiles of you, and we do not track you across other websites.
What we do not collect. We do not use advertising trackers, marketing pixels, or third-party analytics that identify you. We do not ask for your denomination, parish, sacramental history, health, or confessional matters. We do not sell your information.
AfterMass exists to walk with people after they enter the Catholic Church. Because of that, simply being an AfterMass member says something about your religious beliefs. United States state privacy laws treat information that reveals a person's religious or philosophical beliefs as sensitive personal information that deserves extra protection.
Several state laws — including those of Virginia, Colorado, and Connecticut — ask for your clear, affirmative opt-in consent before a business may process sensitive information, and California law requires clear notice when it is collected. To meet this standard, when you create your account we ask you to tick a clear, separate box that says: "I understand AfterMass is a Catholic service and consent to it processing information about my faith to provide it." The box is unticked to start, and giving this consent is a genuine condition of joining, because we cannot deliver a Catholic service without processing the fact that you are seeking one.
This explicit consent is completely separate from our optional email updates (Section 3(e)). Agreeing to one does not sign you up for the other, and you can decline the email updates while remaining a member.
We use information about your faith only to provide the Service you signed up for. We never use it to guess or infer other things about you, and never for advertising. (This is the same explicit-consent standard applied to religious data elsewhere — for example, under the European Union's General Data Protection Regulation, Article 9 — which we follow as good practice for any visitor outside the United States.)
Withdrawing this consent. You can withdraw your consent at any time. Because processing the fact that you are seeking a Catholic service is essential to providing AfterMass, there is no way to keep your membership while withdrawing this consent — so withdrawing it means closing your account. You can do that yourself at any time in your account settings, and we will then delete your information as described in Section 9. Withdrawing consent does not affect anything we lawfully did before you withdrew it.
AfterMass uses only strictly necessary cookies — small files that keep you signed in during your visit and protect the security of the forms you submit. They do nothing else. We do not use advertising, tracking, or analytics cookies, so no cookie consent banner is required. For the full picture, see our Cookie Notice.
We do not sell your personal information and we do not share it for advertising. We share it only with service providers that help us operate AfterMass on our behalf, and only as far as each one needs to do its job. We describe them by their role:
These providers are bound by contract to protect your information and to use it only to provide their service to us — that is a service arrangement, not a sale of your information. We may also disclose information where required by valid legal process, to protect the rights or safety of members or others, or to a successor in the event of a sale or transfer of the business, subject to confidentiality.
We do not sell your personal information, and we do not share it for cross-context behavioral advertising (sometimes called "targeted advertising"). Sharing your information with the service providers in Section 6, who act on our behalf under contract, is not a sale or a share for advertising. Because we do neither, there is no "Do Not Sell or Share My Personal Information" choice for you to make here — there is nothing to opt out of. If this ever changed, we would update this notice and provide the required choices first.
Your core account and membership information is hosted and backed up within the European Economic Area (EEA): it is processed on servers in Germany and backed up in Finland. Storing your data in these strong-privacy locations is a security and residency benefit for you. Administration and support of the Service take place from the United States, limited to what is necessary to operate, secure, and support it.
Some of the service providers in Section 6 — for example our payment processor and our live-session provider — operate in the United States and receive only the limited information they need to do their part. This is simply how the Service runs; it does not change how we protect your information.
| Information | How long we keep it |
|---|---|
| Account and service information (name, email, password, progress, reservations, consent records) | For as long as your membership is active, plus a short wind-down period of up to 90 days after your account closes (to handle support and any reversals), after which it is deleted or anonymized |
| Optional email-list information | Until you unsubscribe or withdraw your consent |
| Payment and transaction records | Only as long as U.S. and Florida tax and financial record-keeping law requires, limited to the fields the law requires |
Because a payment record for a Catholic membership still reflects your religious interest, we keep those legally required records to the minimum needed and treat them with the same protection as the rest of your information.
You have rights over your personal information. Whatever state you live in, you can always:
You can do much of this yourself: update your account details in your settings, cancel your membership and close your account in your account settings (closing your account also ends the sensitive-data processing described in Section 4), and unsubscribe from email updates using the link in any of those emails.
For any other request — including a copy of your information, a portable export, or deletion of your account and data — email us at [email protected]. We will respond within the time the law allows, and we will not charge you or treat you differently for exercising your rights.
If you live in a state with a comprehensive privacy law — including California, Colorado, Connecticut, Virginia, and a growing number of others — you have rights to know about and access the personal information we hold, to correct it, to delete it, and to obtain a portable copy. In several of these states you may also appeal if we decline a request. To use any of these rights, contact [email protected].
We do not sell or share your information. As explained in Section 7, we do not sell your personal information and do not share it for targeted advertising, so there is no opt-out for you to exercise.
California — sensitive personal information. California law lets residents limit how a business uses sensitive personal information, such as information that reveals religious beliefs. We already limit our use of your faith information to one thing — providing the AfterMass service you asked for — and we never use it to infer characteristics about you or for advertising. Because our use already stays within that narrow purpose, there is nothing further to restrict; if you no longer want us to process this information at all, you can withdraw your consent by closing your account (Section 4).
AfterMass is intended for adults. You must be 18 or older to create an account. The Service is not directed to children or to anyone under 18, and we do not knowingly collect information from anyone under 18. If you believe someone under 18 has provided us with personal information, contact [email protected] and we will take appropriate steps to remove it.
We use reasonable administrative, technical, and physical measures designed to protect your personal information, including encrypted connections, one-way scrambling of passwords, checks on information submitted to the Service, and access controls that limit who can see your data. No method of transmission or storage is completely secure, so we also ask you to choose a strong password and keep it private.
We may update this Privacy Notice from time to time. This notice takes effect on first publication of the Service. If we make a material change, we will update the version above and give you reasonable notice through the Service or by email before the change takes effect.