Privacy Policy

THE CHURCH APP
Operated by ABC Digital (Pty) Ltd
(“Company”, “we”, “us”, “our”)

Effective Date: 01 June 2026
Last Updated: 08 June 2026

1. INTRODUCTION
ABC Digital (Pty) Ltd respects your privacy and is committed to protecting the personal information you share with us when using The Church App (“the App”). This Privacy Policy explains:

 

    • What personal information we collect;

    • How we use, store, and share that information;

    • Your rights regarding your personal information;

    • How we comply with South Africa’s Protection of Personal Information Act (POPIA).

 

This Policy applies to:

 

    • Churches (Subscribers) (churches that subscribe to the App);

    • Individual Users (congregants, visitors, prayer intercessors, etc.);

    • Device Users who interact with the App.

 

By downloading, registering, and using The Church App, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal information as described herein.

2. WHAT PERSONAL INFORMATION WE COLLECT
We collect different types of information depending on whether you are a Church (Subscriber) or an Individual User.

2.1 For Churches (Subscribers) (Institutional)

 

    • Church Name, Address, and Contact Details;

    • Authorised Administrators’ Names, Email Addresses, Phone Numbers;

    • Banking Details (for payouts of tithes/offerings – handled via secure payment gateway);

    • Ministry / Event Registration data (as uploaded by the church).

 

2.2 For Individual Users (Congregants/Visitors)
When you register or use the App, we may collect:

 

Category Examples
Identity Information Full name, profile photo (optional), gender, age range
Contact Information Email address, mobile phone number
Church Affiliation Church name, membership status, ministry groups, family registration links
Religious/Personal Preferences Prayer requests, sermon notes, event RSVPs, business directory listings you post
Financial Information Payment method details (processed by third-party gateway – we do not store full card details)
Technical Data Device ID, IP address, operating system, app version, crash logs
Usage Data Sermons viewed, prayer wall interactions, giving frequency, heat map data, event attendance scanning
Location Data Approximate location (only if you grant permission – used for church/event discovery)

2.3 Children’s Information
The Church App is not directed at children under 13 (or under 18 in certain contexts). If a child registers via a family account, the parent or guardian is deemed to have provided consent. We do not knowingly collect information from children without parental consent.

3. HOW WE USE YOUR PERSONAL INFORMATION
We use your personal information only for legitimate ministry and operational purposes:

 

Purpose Legal Basis (POPIA)
To create and manage your account Performance of a contract
To enable church engagement (sermons, prayer wall, events, messaging) Performance of a contract / Legitimate interest
To process tithes, offerings, and donations Performance of a contract
To personalise content (hyper-personalisation as described in our brochure) Legitimate interest / Consent
To send push notifications and announcements Consent (opt-in available)
To generate anonymised heat maps and engagement analytics Legitimate interest (church admin dashboard)
To comply with legal or regulatory obligations Legal obligation
To detect and prevent fraud or security breaches Legitimate interest

Note: We do not sell your personal information to third parties.

4. DISCLOSURE AND SHARING OF PERSONAL INFORMATION
We may share your personal information with the following parties only as necessary:

4.1 Your Church (Subscriber)

 

    • Your name, prayer requests, giving records (anonymized for reporting), event attendance, and ministry participation may be visible to your church’s administrators via their dashboard.

    • The Church is an independent responsible party under POPIA for its use of that data.

 

4.2 Service Providers (Processors)
We use third-party processors who act on our instructions, including:

 

    • Payment Gateways (e.g., Stitch, PayFast, Zapper, or similar)

    • Cloud Hosting (e.g., AWS, Google Cloud – data stored in South Africa where possible)

    • Push Notification Services

    • Analytics Tools (e.g., Firebase, Mixpanel – anonymised data only)

 

All Processors sign agreements ensuring POPIA compliance.

4.3 Legal and Regulatory Disclosures
We may disclose personal information if required by:

 

    • South African Law, court order, or POPIA enforcement;

    • To protect the rights, property, or safety of ABC Digital, Churches, or Users.

 

4.4 Business Directory
If you post a Business Listing, the information you provide (business name, contact details) becomes visible to other App users from your Church.

4.5 Prayer Wall
Prayer Requests you post may be visible to:

 

    • Your entire Church (if set to public);

    • A Prayer Team / Intercessors (if set to semi-private).

 

Do not post confidential or sensitive personal information on the Prayer Wall.

5. STORAGE AND RETENTION OF PERSONAL INFORMATION

 

    • Location: Personal information is stored on secure servers in South Africa (or another jurisdiction with equivalent data protection laws). Where international processors are used, we implement Standard Contractual Clauses or equivalent safeguards.

    • Retention Period: We retain your information for as long as your account is active or as needed to provide the App. After account deletion:

        • Individual User data is deleted within 90 days, except where the Church Subscriber requires longer retention (e.g., giving records for audit).

        • Church (Subscriber) data (member lists, giving history) is retained per the subscription agreement or legal requirements (e.g., tax records – up to 7 years).

    • Anonymised Data: Aggregated analytics (heat maps, engagement trends) may be retained indefinitely for product improvement.

 

6. YOUR RIGHTS UNDER POPIA

As a South African data subject, you have the following rights:

 

Right Description
Right of access Request a copy of the personal information we hold about you.
Right to rectification Correct inaccurate or outdated information.
Right to erasure Request deletion of your personal information (subject to legal or contractual retention requirements).
Right to object Object to processing based on legitimate interests (e.g., direct marketing or hyper-personalisation).
Right to restrict processing Temporarily limit how we use your data.
Right to data portability Request a machine-readable copy of your data to transfer elsewhere.
Right to withdraw consent Withdraw consent where processing is based on consent (e.g., push notifications).

To exercise these rights, contact our Information Officer at support@thechurchapp.co.za. We will respond within 30 days as required by POPIA.

7. SECURITY MEASURES
We implement appropriate technical and organisational measures to protect personal information, including:

 

    • Encryption: Data in transit (TLS 1.3) and at rest (AES-256);

    • Access Controls: Role-Based Access for Church Admins and ABC Digital staff;

    • Monitoring: Regular penetration testing, audit logs, and anomaly detection;

    • Breach Response: In the event of a data breach affecting your personal information, we will notify affected parties and the Information Regulator within 72 hours (as required by POPIA).

 

However, no system is 100% secure. You use the App at your own risk.

8. PUSH NOTIFICATIONS AND MARKETING

 

    • We send push notifications for announcements, prayer requests, and event reminders. You can disable these in your device settings or in-app preferences.

    • We do not send spam or third-party marketing messages. Hyper-personalised content (e.g., recommended sermons) is based on your engagement and does not constitute direct marketing under POPIA’s opt-in rules unless explicitly stated.

 

9. THIRD-PARTY LINKS AND INTEGRATIONS
The App may contain links to external websites (e.g., church social media, Bible resources). This Privacy Policy does not apply to those third parties. We are not responsible for their privacy practices.

10. TRANSFER OF PERSONAL INFORMATION OUTSIDE SOUTH AFRICA
Some service providers may process data outside South Africa (e.g., US-based push notification services). We ensure that:

 

    • The recipient country has adequate data protection laws; or

    • We have binding agreements incorporating POPIA-equivalent safeguards.

 

By using the App, you consent to such cross-border transfers.

11. COOKIES AND SIMILAR TECHNOLOGIES
The App may use local storage, analytics SDKs, and device identifiers (not traditional web cookies). These are used to remember preferences, analyse usage, and improve performance. You can reset your advertising ID on your device.

12. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time. Material changes will be notified:

 

    • Via in-app notice;

    • By email to registered users (where possible).

 

Continued use of the App after notice constitutes acceptance of the revised policy.

13. COMPLAINTS AND THE INFORMATION REGULATOR
If you believe we have violated POPIA or your privacy rights, you have the right to lodge a complaint with:

South African Information Regulator
Email: complaints@inforegulator.org.za
Website: www.inforegulator.org.za
Address: JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001

We encourage you to contact us first at support@thechurchapp.co.za so we may resolve your concern promptly.

14. CHILD SAFETY STANDARDS AND POLICY

14.1 Our Zero-Tolerance Policy
ABC Digital (Pty) Ltd and The Church App have a strict zero-tolerance policy towards child sexual abuse and exploitation (CSAE). We are committed to providing a safe and secure environment for all users and strictly prohibit the use of our App to create, share, or facilitate any content or activity that exploits, abuses, or endangers children.

14.2 Prohibited Conduct and Content
The following activities are strictly prohibited on The Church App:

  • Child Sexual Abuse Material (CSAM): Creating, uploading, sharing, or distributing any content (including text, images, videos, or links) that depicts or describes the sexual abuse or exploitation of a child.

  • Grooming: Engaging in any communication or behavior intended to build an emotional connection with a child for the purpose of sexual abuse, exploitation, or trafficking.

  • Sexual Exploitation: Soliciting or attempting to solicit a child for sexual acts, or engaging in any form of sexual extortion or coercion involving a child.

  • Sharing Personal Information: Sharing or requesting a child’s personally identifiable information (e.g., address, phone number, school name, location) for inappropriate, exploitative, or unsafe purposes.

  • Inappropriate Interaction: Any other behavior or content that could be considered harmful to, or exploitative of, a child.


15. REPORTING AND RESPONSE TO SAFETY CONCERNS

15.1 In-App Reporting
We provide a user-friendly, in-app feedback and reporting mechanism that allows all users to easily report content, users, or activity they believe violates this policy or may pose a risk to a child’s safety. Reporting options are accessible within the App’s settings or on individual content/user profiles.

15.2 Our Response to Reports
Upon receiving a report concerning child safety, we will:

  1. Acknowledge and Review: Acknowledge receipt of the report and promptly investigate the reported content or activity.

  2. Take Action: Take immediate and appropriate action, which may include:

    • Removing or restricting access to the reported content.

    • Suspending or permanently terminating the offending user’s account.

    • Taking steps to prevent the offender from creating new accounts.

    • Preserving relevant evidence.

  3. Cooperate with Authorities: Cooperate fully with law enforcement and child protection agencies, including reporting credible threats or incidents of CSAE to the appropriate authorities.

  4. Maintain Transparency: We will document our actions in accordance with our internal policies and legal requirements, while respecting user privacy.


16. CHILD SAFETY CONTACT

16.1 Dedicated Contact
ABC Digital (Pty) Ltd has appointed a dedicated contact person to handle all matters related to child safety, including reports of CSAE and compliance with this policy.

For all Child Safety concerns, reports, or inquiries, please contact us immediately at:
Email: childsafety@thechurchapp.co.za
Please direct all child safety-related communications to this specific email address to ensure they are handled with the necessary urgency and care

17. CONTACT US (INFORMATION OFFICER)
For any questions, access requests, or concerns regarding this Privacy Policy or your personal information:

ABC Digital (Pty) Ltd
Attention: Information Officer
Email: support@thechurchapp.co.za
Dedicated Child Safety Contact: childsafety@thechurchapp.co.za
Website: www.thechurchapp.co.za

BY DOWNLOADING, REGISTERING, OR USING THE CHURCH APP, YOU ACKNOWLEDGE THAT YOU HAVE READ AND UNDERSTOOD THIS PRIVACY POLICY AND CONSENT TO THE PROCESSING OF YOUR PERSONAL INFORMATION AS DESCRIBED HEREIN.

 

Start Here

Complete the Form below and we will contact you. We endeavor to answer all inquiries within 24 hours on business days.
Side Panel