Privacy Policy

Effective date: 2026-10-01

This Privacy Policy explains how MyChurch Africa ("MyChurch Africa", "we", "us") collects, uses, shares and protects personal information when you use the MyChurch Africa church management platform, including our web app, mobile apps, public church websites and APIs (together, the "Platform").

1. Who is responsible for your information

MyChurch Africa is used by churches to manage their members, gatherings, giving, finances and communication. Two kinds of information are handled on the Platform, and our role differs for each:

• Account information about the people who sign in to the Platform. We decide how this information is used, so we are the controller.

• Church records that a church enters about its members, visitors, givers and contacts. The church decides why and how these records are used, so the church is the controller and we process them on the church's behalf.

If you are a member or visitor of a church and want to see, correct or remove your records, please contact that church first. We will help the church respond to your request.

2. Information we collect

Account information

Your name, email address, phone number, profile photo, language, password (stored only as a secure hash), and security details such as two-factor authentication and passkeys. We also record which churches and branches you belong to and the roles you hold.

Church information

Church name, address, branches, team members, service types, services and programs, tags, groups, departments and ministries, membership number settings, and the subscription plan the church uses.

Member and household records

Entered by a church and its authorised users: names, phone numbers, email addresses, home addresses, dates of birth, gender, marital status, occupation, photos, household relationships, membership status and number, branch, attendance and check-ins, and group, department and ministry involvement.

Giving and financial records

Offerings, tithes, pledges, dues, income and expenses recorded by a church, with amounts, dates, categories, receipts and payment references. When a payment is made online, card or mobile money details are collected and processed directly by our payment provider; we do not store full card numbers or mobile money PINs.

Communication records

SMS messages sent through the Platform, their recipients and delivery status, sender IDs, message templates, birthday messages, announcements, and the church's SMS wallet balance and top-ups.

Information from church websites

When someone uses a church's public page to send a connection request, check in, or give online, we receive the details they submit, such as name, phone number, email address, the branch they choose and, for giving, the amount and payment reference.

Technical and usage information

Device and app version, IP address, browser type, the time and result of requests, error logs, and an audit trail of important actions taken on the Platform (for example creating, changing or deleting records) so churches can see who did what.

3. How we use information

• To provide, secure and maintain the Platform, and to authenticate users and enforce roles and branch-level access.

• To process subscriptions, SMS top-ups and online giving, and to issue receipts.

• To send messages that a church asks us to send, and to send service messages to you such as verification codes, password resets and security alerts.

• To review and approve sender ID requests.

• To provide support, investigate problems, prevent fraud and abuse, and meet our legal obligations.

• To understand how the Platform is used so we can improve it, using aggregated or de-identified data wherever possible.

We do not sell personal information and we do not use church records for advertising.

4. SMS and other communications

Churches are responsible for making sure they have a proper basis, such as consent, to message the people they contact, and for honouring requests to stop receiving messages. We deliver messages through third-party SMS providers, which receive the recipient's phone number, the message text and the sender ID. We may review sender ID requests and suspend messaging that appears to be spam, fraudulent or unlawful.

5. Who we share information with

• The church you belong to. Authorised church users see records according to their role and, where limited, the branches they are assigned to.

• Service providers who help us run the Platform under written obligations to protect the data: payment processors, SMS providers, email delivery, cloud hosting and storage, and monitoring and error-reporting tools.

• Authorities and advisers where we are required by law or need to protect rights, safety and security.

• A successor in the event of a merger, acquisition or sale of our business, with notice to affected churches.

6. Access within a church

Each church controls who can sign in and what they can do. Roles decide which areas someone can view or change, and a user can be limited to particular branches so they only see that branch's members, giving, messages and finances. Church administrators are responsible for granting access only to people who need it.

7. Retention and deletion

We keep information for as long as the church's account is active and as needed to provide the Platform. When a church requests deletion of its account, it is scheduled for deletion after a 30-day grace period during which it can be reactivated. After that, the church's records are removed from our live systems and are cleared from backups in the normal backup cycle. We may keep limited information for longer where the law requires it, for example billing and transaction records, or to resolve disputes and prevent abuse.

8. Security

We use measures such as encryption in transit, hashed passwords, optional two-factor authentication and passkeys, role and branch-based access controls, and audit logging. No system is completely secure, so please use a strong, unique password and tell us straight away if you suspect unauthorised access.

9. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or object to the use of your personal information, to withdraw consent, and to receive a copy of your information. For your own account you can update many details in your profile settings or contact us. For church records, please contact your church.

10. Children

The Platform is designed for church staff and volunteers and is not directed at children. Churches may record information about children in their congregation, such as for children's ministry, and are responsible for obtaining any parental consent the law requires.

11. International transfers

Our providers may process information in countries other than your own. Where we transfer information across borders, we take steps to make sure it stays protected in line with applicable law.

12. Cookies and similar technologies

We use cookies and similar storage that are necessary to keep you signed in, protect your session and remember settings such as your appearance preference. We do not use them for third-party advertising.

13. Changes to this policy

We may update this policy from time to time. When we make material changes we will post the new version here with a new effective date and, where appropriate, notify church administrators.

14. Contact us

If you have questions or concerns regarding this Privacy Policy, please contact us at:

Email: support@mychurch.africa
Website: MyChurch Africa

Last updated: October 1st, 2026