Privacy Policy

1. Who we are

ChurchQ is operated by MaveriQ Technologies. In data-protection terms, your Church is typically the data controller for member and giving data, and ChurchQ acts as a data processor handling that data on the Church's instructions, in line with the Kenya Data Protection Act, 2019.

2. Data we process

• Member data: names, contact details, family links, groups, attendance and pastoral notes.
• Giving data: contributions, funds and references needed to record and reconcile giving.
• Account data: roles and logins for pastors, administrators and members.

3. Sensitive information

Pastoral notes and giving records can be deeply personal. We treat them as confidential, restrict access by role, and process them only to deliver the Services the Church has engaged us for — never sold, never used for advertising.

4. How data is used

To provide and secure the Services, record and reconcile giving, generate statements, communicate on the Church's behalf, and meet legal obligations.

5. Sharing

We share data only with service providers needed to run the Services (such as SMS and payment partners), within the MaveriQ group under safeguards, and with authorities where required by law. We do not sell personal data.

6. Security & retention

Data is encrypted in transit and at rest, with role-based access controls. We retain data for as long as the Church requires the Services and as needed to meet legal and financial record-keeping obligations, then delete or anonymise it.

7. Rights

• Members may request access to or correction of their data via the Church.
• Complaints may be raised with the Office of the Data Protection Commissioner.

8. Contact

For privacy questions, email privacy@churchq.com.