AfterMass — Walking with you after you enter the Church
AfterMass is operated by Ana Munley.
This Privacy Notice explains how AfterMass, operated by Ana Munley ("AfterMass," "we," "us," or "our"), collects, uses, shares, and protects your personal information when you create an account and use AfterMass (the "Service"). Ana Munley is the business owner and the person responsible for your personal information. Please read this notice alongside our Terms of Service.
AfterMass is a Catholic membership service, led by Ana Munley — a Catholic laywoman moved to serve the Church through her various channels — from her home in St. Cloud, Florida, USA. AfterMass is hers: she is the person you are joining, the one who stands behind every payment, and the one responsible for how and why your personal information is used and looked after. When you join, you become part of the AfterMass community — and your membership is what allows Ana and her small team to devote themselves ever more fully to this apostolate.
The technology, hosting, and day-to-day running of the Service are provided for us by ProgTrack, LLC (a company organized in Texas, USA), which acts as our service provider. ProgTrack handles your information only to operate the Service on our documented instructions, and never for its own purposes.
You can reach us about anything in this notice, including any request about your personal information, at [email protected].
AfterMass is offered from the United States and is directed to users in the United States. It is intended for adults in the U.S. who want Catholic formation, prayer, and community after entering the Church. We do not market or direct the Service to people in the European Union, the United Kingdom, or elsewhere outside the United States. If that changes in the future, we will update this notice first.
Our free email newsletter is the one narrow exception. Anyone may ask for AfterMass Monthly, wherever they live, and we send it to people outside the United States who have asked us to. It is the only thing we offer beyond the United States. Everything else here — the membership, its content and its billing — remains directed to people in the United States. If you are in the European Economic Area or the United Kingdom and you subscribe to the newsletter, Section 11 sets out the rights that come with that.
We keep the information we collect deliberately small. We collect only what we need to run your membership and, where you choose it, to send you optional updates.
Your name, your email address, and a password (which we store in a scrambled, one-way form — we never keep your password in readable text). We use this to create your account, sign you in, control which parts of AfterMass you can reach, and contact you about your account and the Service.
Whether your membership is active, which plan you are on, and references that let our payment processor connect your subscription to your account. If we grant a complimentary membership, we record that status. We never see or store your card number. Card details are entered directly with our payment processor, which handles the payment; we receive only the confirmation and references we need to manage your subscription.
Which lessons or sessions you have marked complete, so we can remember your place and show you how far you have come.
When you reserve a seat in an AfterMass Live session, we record that reservation so we can hold your place and let you join.
If — and only if — you choose to join our email list on this website, we record your name, your email address, how you signed up, and the date and time you gave consent. Signing up here is never automatic: the box is separate and unticked, joining the list is never required to use AfterMass, and creating an account does not add you to it. You can unsubscribe at any time using the link in any of those emails.
There is one other way a person can be on our email list, and it is described in Section 3(f) below.
Some people on our email list did not sign up on this website. They asked to be kept informed about Ana Munley's initiatives when they bought something from shopaftermass.com, Ana’s own merchandise shop. For those people we hold only the name and email address given at that purchase, together with a note recording that the shop is where the address came from.
We use it for one purpose: to send AfterMass Monthly and occasional notes from Ana. We do not use it to create an account for you, we do not add it to anything else, and it is not combined with membership information unless you join AfterMass yourself. Every email carries a one-click unsubscribe link, and unsubscribing removes you for good.
If you would rather we did not hold your address at all, write to [email protected] and we will delete it — you do not need to give a reason.
If you send Ana a question through the question form, we keep the question itself. Your first name and your email address are optional — you can ask without giving either, and many people do. We also record which country your browser reports and that the message arrived through the question form.
We use it for one thing: so Ana can read your question and answer it — in the newsletter, on the site, or in a talk — never using your name. Giving an email address is not a subscription and it is not a reply address; Ana answers publicly, not privately. Our basis is our legitimate interest in answering the questions our readers send us.
Please leave out names and anything you would not want quoted in a public answer. If a question does arrive carrying details that identify someone, we remove those details when we read it.
To keep accounts safe and prevent abuse, our systems keep limited technical records connected with signing in and using the Service. We do not build behavioral profiles of you, and we do not track you across other websites.
What we do not collect. We do not use advertising trackers, marketing pixels, or third-party analytics that identify you. We do not ask for your denomination, parish, sacramental history, health, or confessional matters. We do not sell your information.
AfterMass exists to walk with people after they enter the Catholic Church. Because of that, simply being an AfterMass member says something about your religious beliefs. United States state privacy laws treat information that reveals a person's religious or philosophical beliefs as sensitive personal information that deserves extra protection.
Several state laws — including those of Virginia, Colorado, and Connecticut — ask for your clear, affirmative opt-in consent before a business may process sensitive information, and California law requires clear notice when it is collected. To meet this standard, when you create your account we ask you to tick a clear, separate box that says: "I understand AfterMass is a Catholic service and consent to it processing information about my faith to provide it." The box is unticked to start, and giving this consent is a genuine condition of joining, because we cannot deliver a Catholic service without processing the fact that you are seeking one.
This explicit consent is completely separate from our optional email updates (Section 3(e)). Agreeing to one does not sign you up for the other, and you can decline the email updates while remaining a member.
The newsletter has its own, separate acknowledgement. Asking for a Catholic newsletter also says something about your faith, so the subscription box carries its own short acknowledgement to that effect and we record the exact wording you agreed to. We keep it separate from the membership consent above on purpose: neither one signs you up for the other, and you can have either without the other.
A question you send is a third, separate case. A question written to a Catholic apostolate can carry a great deal — a bereavement, a marriage in trouble, a faith that has gone quiet. Where you give your name or email address alongside it, that content is sensitive information about you, and our basis for holding it is your explicit consent, given by choosing to write and send it after the form tells you plainly what will happen to it. There is deliberately no tick-box: you are writing a letter, not entering a transaction, and asking you to certify the act of asking would add ceremony to something already unmistakable. Where you give neither a name nor an email, there is nothing connecting the question to you and it is not information about you at all.
We use information about your faith only to provide the Service you signed up for. We never use it to guess or infer other things about you, and never for advertising. (This is the same explicit-consent standard applied to religious data elsewhere — for example, under the European Union's General Data Protection Regulation, Article 9 — which we follow as good practice for any visitor outside the United States.)
Withdrawing this consent. You can withdraw your consent at any time. Because processing the fact that you are seeking a Catholic service is essential to providing AfterMass, there is no way to keep your membership while withdrawing this consent — so withdrawing it means closing your account. You can do that yourself at any time in your account settings, and we will then delete your information as described in Section 9. Withdrawing consent does not affect anything we lawfully did before you withdrew it.
AfterMass uses only strictly necessary cookies — small files that keep you signed in during your visit and protect the security of the forms you submit. They do nothing else. We do not use advertising, tracking, or analytics cookies, so no cookie consent banner is required. For the full picture, see our Cookie Notice.
We do not sell your personal information and we do not share it for advertising. We share it only with service providers that help us operate AfterMass on our behalf, and only as far as each one needs to do its job. We describe them by their role:
These providers are bound by contract to protect your information and to use it only to provide their service to us — that is a service arrangement, not a sale of your information. We may also disclose information where required by valid legal process, to protect the rights or safety of members or others, or to a successor in the event of a sale or transfer of the business, subject to confidentiality.
We do not sell your personal information, and we do not share it for cross-context behavioral advertising (sometimes called "targeted advertising"). Sharing your information with the service providers in Section 6, who act on our behalf under contract, is not a sale or a share for advertising. Because we do neither, there is no "Do Not Sell or Share My Personal Information" choice for you to make here — there is nothing to opt out of. If this ever changed, we would update this notice and provide the required choices first.
Your core account and membership information is hosted and backed up within the European Economic Area (EEA): it is processed on servers in Germany and backed up in Finland. Storing your data in these strong-privacy locations is a security and residency benefit for you. Administration and support of the Service take place from the United States, limited to what is necessary to operate, secure, and support it.
Some of the service providers in Section 6 — for example our payment processor and our live-session provider — operate in the United States and receive only the limited information they need to do their part. This is simply how the Service runs; it does not change how we protect your information.
| Information | How long we keep it |
|---|---|
| Account and service information (name, email, password, progress, reservations, consent records) | For as long as your membership is active, plus a short wind-down period of up to 90 days after your account closes (to handle support and any reversals), after which it is deleted or anonymized |
| Optional email-list information | Until you unsubscribe or withdraw your consent |
| A record that you unsubscribed | Kept for as long as we run the list. Unsubscribing does not erase you from our systems, and we would rather say so than let you discover it: we keep your email address marked as unsubscribed, and if we later delete the rest of your record we keep the address by itself. It is used for one purpose only — making sure you are not added back, whether by us or by a later import of an older list. We rely on our legitimate interest in continuing to honour the choice you already made |
| Questions you send through the question form | If you gave your name or email address, we remove it once your question has been answered or set aside. What is left is a question with nothing to connect it to you, and we keep those — together they tell us what readers are asking about, which is how Ana decides what to write. If a question happens to contain details that identify you, we remove those details when we read it |
| Payment and transaction records | Only as long as U.S. and Florida tax and financial record-keeping law requires, limited to the fields the law requires |
Because a payment record for a Catholic membership still reflects your religious interest, we keep those legally required records to the minimum needed and treat them with the same protection as the rest of your information.
You have rights over your personal information. Whatever state you live in, you can always:
You can do much of this yourself: update your account details in your settings, cancel your membership and close your account in your account settings (closing your account also ends the sensitive-data processing described in Section 4), and unsubscribe from email updates using the link in any of those emails.
For any other request — including a copy of your information, a portable export, or deletion of your account and data — email us at [email protected]. We will respond within the time the law allows, and we will not charge you or treat you differently for exercising your rights.
If you live in a state with a comprehensive privacy law — including California, Colorado, Connecticut, Virginia, and a growing number of others — you have rights to know about and access the personal information we hold, to correct it, to delete it, and to obtain a portable copy. In several of these states you may also appeal if we decline a request. To use any of these rights, contact [email protected].
We do not sell or share your information. As explained in Section 7, we do not sell your personal information and do not share it for targeted advertising, so there is no opt-out for you to exercise.
California — sensitive personal information. California law lets residents limit how a business uses sensitive personal information, such as information that reveals religious beliefs. We already limit our use of your faith information to one thing — providing the AfterMass service you asked for — and we never use it to infer characteristics about you or for advertising. Because our use already stays within that narrow purpose, there is nothing further to restrict; if you no longer want us to process this information at all, you can withdraw your consent by closing your account (Section 4).
This section applies to you if you are in the EEA or the UK and you subscribe to our newsletter. It does not apply to the membership, which we do not offer in those regions.
Who is responsible. Ana Munley is the controller of your information, at the contact details in Section 1.
Our representative in the European Union. Because we are established in the United States, we have designated a representative in the Union under Article 27 GDPR: Danburite House CB, Travesía de Téllez 5, 28007 Madrid, Spain — [email protected]. You may contact our representative about anything to do with your information, instead of or as well as contacting us.
Why we may send you the newsletter. Your consent, and nothing else. You gave it by ticking the box on the subscription form, and we keep a record of when you did and of the exact wording you agreed to. Because a Catholic newsletter says something about your faith, that consent also covers the special-category information involved.
Withdrawing it is as easy as giving it. Every email has a one-click unsubscribe link, and you can write to us instead if you prefer. Withdrawing does not affect anything we did before you withdrew.
Your rights. You may ask us for a copy of your information, to correct it, to delete it, to restrict or object to what we do with it, and to receive it in a portable form. Ask at the address in Section 1 and we will respond within one month.
If you want to complain. You can complain to the data protection authority where you live or work. In the United Kingdom that is the Information Commissioner's Office (ico.org.uk); in Spain, the Agencia Española de Protección de Datos (aepd.es). We would rather you came to us first, but you do not have to.
Where your information goes. As Section 8 explains, our systems are hosted in Europe. Where a supplier is outside the EEA or the UK, that transfer is covered by the European Commission's Standard Contractual Clauses or another lawful transfer mechanism.
AfterMass is intended for adults. You must be 18 or older to create an account. The Service is not directed to children or to anyone under 18, and we do not knowingly collect information from anyone under 18. If you believe someone under 18 has provided us with personal information, contact [email protected] and we will take appropriate steps to remove it.
We use reasonable administrative, technical, and physical measures designed to protect your personal information, including encrypted connections, one-way scrambling of passwords, checks on information submitted to the Service, and access controls that limit who can see your data. No method of transmission or storage is completely secure, so we also ask you to choose a strong password and keep it private.
We may update this Privacy Notice from time to time. This notice takes effect on first publication of the Service. If we make a material change, we will update the version above and give you reasonable notice through the Service or by email before the change takes effect.