Privacy policy

Who is responsible for your data

Church records. When a church uses ChurchCore, the church decides what information it keeps about its members, visitors, children and staff, and why. The church is the data controller for that information. Inyex processes it on the church's behalf, only to provide ChurchCore, and for no other purpose.

Our own records. Inyex is the data controller for the information we hold to run our business: the details of the people who manage a church's account with us, subscription and payment records, and enquiries sent through our demo request form.

We handle personal data in line with the Data Protection Act, 2012 (Act 843) of Ghana.

What we collect

Information a church keeps in ChurchCore

• Member and visitor details, such as names, phone numbers, email addresses, dates of birth, departments and photographs where the church adds them.
• Children's profiles and their ministry, where the church keeps them.
• Attendance at services and events.
• Giving records, including cash, bank, mobile money and card contributions.
• Welfare claims, approvals and payments.
• Messages the church sends by SMS, and its message usage.

Information about the people who use ChurchCore

• Staff account details: name, phone number, email address and role. Passwords are stored only as a secure one-way hash.
• Sign-in records and an audit trail of sensitive actions (who did what, and when), which helps keep the church's records trustworthy.
• Technical information our servers record when a page or request is served, such as the IP address and time, used to keep the service secure and working.

Information you send us directly

• Demo requests: your church's name, your name, phone number, and optionally your email address and a message.
• Emails you send to hello@churchcoreapp.com.

Why we use it

• To provide ChurchCore to the church, as our agreement with the church requires.
• To secure accounts, including sending sign-in codes by SMS or email and keeping an audit trail.
• To send the messages a church asks us to send, such as announcements, birthday wishes and giving confirmations.
• To bill churches for their subscription and SMS top-ups.
• To reply to demo requests and support emails.
• To meet our legal obligations.

We do not sell personal data, we do not use it for advertising, and we do not use church records for any purpose of our own.

Who processes data for us

We use a small number of service providers, each only for the task below:

• Hetzner Online GmbH hosts ChurchCore's servers and databases in Germany.
• Africa's Talking delivers SMS messages, including sign-in codes.
• Paystack processes card and mobile money payments. Card details are entered on Paystack's own page and never reach ChurchCore. For a church that turns on automatic renewal, we keep only an encrypted payment token from Paystack, which is not a card number.
• Resend delivers email, such as sign-in codes sent by email and address confirmations.
• Anthropic, only where a church's AI-assisted insights are switched on, receives anonymised totals (for example monthly counts) to help spot unusual patterns. Names and contact details are never sent.

Where your data is stored

ChurchCore's data is stored on servers in Germany, in the European Union, operated by Hetzner Online GmbH. This means personal data is transferred outside Ghana. Our provider is bound by the European Union's data protection law, data is encrypted in transit, and access to the servers is restricted to authorised Inyex staff.

How we protect it

• Each church's records are kept apart in the database itself, so one church cannot see another's.
• Every account signs in with a password and a one-time code sent to the user's phone.
• Staff see only what their role allows. Giving records cannot be changed after the fact; corrections are added as new entries.
• Connections to ChurchCore are encrypted (HTTPS).
• Our own team has no standing access to a church's records. Support access is time-limited, the church is told, and access to giving, welfare or individual member records needs the church's approval. Any emergency access alerts the church and is permanently recorded.

Cookies and tracking

The public pages of this website set no cookies and use no analytics, advertising or tracking scripts. When you sign in to ChurchCore, your browser keeps your session and your theme preference (light or dark) in its local storage on your device, so that you stay signed in.

How long we keep it

A church's records are kept for as long as the church uses ChurchCore. When a church leaves, we provide its records on request in a standard format such as CSV, and then delete them from ChurchCore. We keep billing records for as long as the law requires. Demo enquiries are kept only as long as needed to follow up, and we delete them on request.

Your rights

Under the Data Protection Act, 2012 you can ask:

• whether we hold personal data about you, and for a copy of it;
• for inaccurate data to be corrected;
• for data to be deleted where there is no longer a reason to keep it;
• us to stop processing your data for a particular purpose.

If you are a member of a church that uses ChurchCore, please contact your church first, because it decides what is kept about you; we will help the church respond. For anything else, email hello@churchcoreapp.com. You also have the right to complain to Ghana's Data Protection Commission.

Children

Churches can keep profiles for children in their ministries. The church is responsible for having the consent of a parent or guardian, and children's profiles are visible only to the staff roles the church allows. ChurchCore is not offered to children for their own use.

If something goes wrong

If we become aware of a security incident affecting a church's records, we will tell the church promptly and help it meet its own obligations.

Changes to this policy

We will update this page when our practices change, and show the date of the latest version at the top. If a change matters for churches using ChurchCore, we will tell them directly.

Contact

Inyex Technologies Limited, Accra, Ghana. Email hello@churchcoreapp.com. See also our terms of service.