Privacy Policy

About This Application

This application is operated by Westlands Seventh-day Adventist Church. It provides church members and visitors with a platform for giving (tithes and offerings), managing pledges, sharing church requests, and church administration.

Information We Collect

When you use this application, we may collect:

• Account information: name, email address, and phone number when you register or give.
• Giving and payment records: transaction amounts, payment categories, bank references, and M-Pesa payment details.
• Church requests: contact messages, prayer requests, visitation details, membership transfer information, and related follow-up notes you choose to submit.
• Verification and security data: one-time-code delivery details, email verification results, Turnstile challenge results, rate-limit counters, anti-abuse checks, and basic technical information needed to protect the forms.

How We Use Your Information

• To process your giving transactions via M-Pesa.
• To maintain accurate giving and pledge records.
• To send you transaction confirmations and reminders via SMS.
• To respond to contact messages, prayer requests, visit requests, and membership transfer requests.
• To authenticate and secure your account.
• To provide church administration and reporting.

Third-Party Services

We use the following third-party services:

• Safaricom M-Pesa: for mobile money payments. Your phone number is shared with Safaricom to process transactions.
• Convex: for secure application data storage, public forms, giving, pledges, membership transfers, and related church records.
• Cloudflare: for hosting, form handoff protection, and anti-abuse services such as Turnstile.
• Activepieces: for delivering contact, prayer, and visit requests to the appropriate church team. These handoffs are authenticated from our server-side infrastructure.
• Email and SMS providers: for confirmations, one-time codes, reminders, and follow-up messages when needed.

Pastoral Care and Prayer Requests

Prayer and visitation requests may include sensitive personal, family, health, or pastoral-care details. Please share only what you are comfortable sharing. We use these details to pray, arrange care, and follow up through the prayer ministry, elders, pastoral team, or church office as appropriate.

Data Security

We take reasonable measures to protect your personal information. All data is transmitted over encrypted connections (HTTPS) and stored securely. Access to personal data is restricted to authorized church administrators.

Data Retention

We retain your giving records and account information for as long as your account is active or as needed for church record-keeping purposes. Prayer, care, contact, and transfer records are kept only as long as reasonably needed for ministry follow-up, administration, safeguarding, and legal or church record-keeping obligations. You may request deletion of your account or associated personal data by contacting the church office.

Your Rights

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and associated data.

Contact Us

If you have questions about this privacy policy or your data, please reach us through our contact page.