I would perhaps ignore the question and carry on the relationship as if the question had never been asked.
Then if she asks again in the future, you know your friend has some sort of agenda.
If like myself you have never signed the contact form asking permission to store your personal details (around 2018??) I'm not sure what the congregation could do about you anyway?