Privacy Policy

1. Who we are

miChurch App is operated by miChurch Solutions ("miChurch Solutions," "we," "us"), incorporated in Ghana. This policy explains what personal data we collect through miChurch App and our marketing site, why we collect it, and what rights you have over it. If anything here is unclear, contact us at hello@michurch.app.

2. Controller and processor roles

When an organization (a denomination, church, or branch) signs up for miChurch App, it is the data controller for the member, appointment, giving, and report data it enters and manages within its own hierarchy - it decides what data to collect from its members and how long to keep it. miChurch Solutions acts as the data processor, processing that data on the organization's behalf to provide the service. If you are a church member with a question about your data, you should generally contact your organization's administrator first; we handle requests directly where the organization can't be reached.

For visitors to our marketing site and people who submit our contact form, miChurch Solutions is the data controller.

3. Information we collect

Depending on how you use miChurch App, we (or the organization you belong to) collect:

• Account data: name, email address, phone number, and password (stored hashed) for anyone who signs in to the platform.
• Hierarchy and appointment data: the hierarchy level, position, and appointment history used to resolve what a person can access.
• Membership records: profiles maintained by an organization's administrators for their own members.
• Giving and remittance records: tithe and giving records entered by an organization's staff, and the remittance figures reconciled up its hierarchy.
• Report submissions: the reports an organization configures, and the submissions and reviews made against them.
• Branding assets: logos and images an organization uploads for its own tenant.
• Contact form submissions: name, email, organization name, and message, when you use our "Request a demo" or "Get in touch" forms. These are verified with Cloudflare Turnstile to filter automated submissions.
• Technical data: standard server logs and the cookies required to keep you signed in.

4. How we use it

We use this data to:

• operate the platform - authenticate you, resolve permissions, and run the hierarchy, reporting, and giving features you use;
• respond to demo requests and support inquiries;
• secure the platform against abuse, including verifying contact form submissions aren't automated; and
• meet our legal obligations, including under Ghana's Data Protection Act, 2012 (Act 843).

We do not sell personal data.

5. Sharing

We share data only with the infrastructure and service providers needed to run miChurch App - for example, hosting, email delivery, and Cloudflare (for DNS, and for Turnstile spam verification on our contact form) - under obligations to protect it, or when required by law. Data belonging to one organization is not shared with, or visible to, another organization.

6. Retention

We retain data for as long as an organization's account is active, or as needed to comply with our legal obligations, resolve disputes, and enforce our agreements. An organization can request deletion of its tenant's data by contacting us; some records may be retained longer where required by law (for example, financial records).

7. Security

Access within an organization is resolved automatically from a member's appointment and position in the hierarchy, so people only see what their role requires. Connections to miChurch App are encrypted in transit, and passwords are stored hashed, never in plain text. No system is completely secure, and we can't guarantee absolute security, but we take reasonable technical and organizational measures to protect the data we process.

8. Your rights

Under Ghana's Data Protection Act, 2012 (Act 843), you have the right to access, correct, and request deletion of your personal data, and to object to certain processing. Where your data is held by an organization using miChurch App, that organization is usually the right place to start; where we hold data directly (for example, contact form submissions), email hello@michurch.app and we'll respond.

9. Children's data

miChurch App is intended for use by adults acting on behalf of an organization. Organizations may record data about minors (for example, Sunday school or youth ministry members) as part of their own membership records; responsibility for obtaining any necessary parental or guardian consent for that data sits with the organization entering it.

10. International transfers

Some of our infrastructure providers may process data outside Ghana. Where that happens, we require appropriate contractual safeguards to protect it to a standard consistent with this policy.

11. Changes to this policy

We may update this policy from time to time. We'll update the date at the top of this page when we do; continued use of miChurch App after a change means you accept the updated policy.

12. Contact us

Questions about this policy or your data can be sent to hello@michurch.app.