Privacy Policy

1. What we collect

• Account details: your name, phone number, optional email, language preference and password (stored hashed).
• Church and district records you enter: member names and contacts, offerings and receipts, expenses and attachments, leaders and departments.
• Billing records: plan, payment references, amounts, the phone number used for mobile money, and the payment provider's status. We never receive card numbers or PINs.
• Usage logs: actions taken in the app (audit trail), login times, IP address and device information for security.
• Messages: a log of SMS sent by Ghala, with one-time codes masked.

2. Why we use it

• to run the service for your church or district and show data only to authorised people;
• to send login codes, onboarding and billing notices, and member confirmations your church enables;
• to process subscriptions through Snippe;
• to keep the service secure and investigate misuse;
• to meet legal obligations.

3. Who can see your data

Your church's records are visible to the users your church or district administrators approve, to administrators of the district a church belongs to, and to Ghala's system administrators for support and operations.

We share data with service providers only as needed to operate Ghala: our SMS provider (message content and phone numbers), our payment provider Snippe (payer name, phone, email and amount), and our hosting providers. We do not sell personal data.

4. Retention

Records stay for as long as your church or district uses Ghala. If a unit leaves, its administrators may request an export and deletion. Audit and billing logs may be kept longer where the law requires.

5. Security

Data is encrypted in transit, passwords are hashed, logins require a one-time SMS code, and access is scoped so users only see their own church or district. No system is perfectly secure; report concerns to the contact below.

6. Your rights

You may ask to see, correct or delete personal data we hold about you, and to receive a copy of your church's records. Members whose details are recorded by a church should contact that church first; we will assist where needed.

7. Changes

We will post updates here and, for material changes, notify administrators by SMS or in the app.