Privacy Policy

Dviidea Technologies is a software company founded in Lagos, Nigeria, with users across Nigeria, Ghana, Tanzania, the United States, and other countries. We operate Church Manager by Dviidea, a multi-tenant church administration platform available at church.dviidea.com.

For data protection purposes, Dviidea Technologies is the data processor. Each church organisation using Church Manager is the data controller for their own congregation's data. We act only on the instructions of the church admin who manages each account.

Contact us at any time: info@dviidea.com or via WhatsApp at +234 915 171 1333.

We collect data in two contexts: church administrators who register and manage the platform, and church members whose records are entered by their church admin.

Church administrator accounts:

• Name and email address
• Church name and subdomain
• Login credentials (hashed passwords, JWT tokens)
• Audit log of administrative actions

Church member records (entered by admin or submitted via the public signup form):

• Full name, phone number, email address
• Date of birth, gender, home address
• Department, role, membership status, join date
• Custom fields configured by the church
• Profile photo (hosted via Cloudinary)

Children's ministry data:

• Child's name and age
• Parent or guardian name and phone number
• Pickup authorisation codes
• Check-in and check-out timestamps

Attendance and programme data:

• Service dates, programme names, attendance status per member
• QR code check-in records

Follow-up and pastoral care data:

• Worker assignment records
• Contact logs including method, outcome, and notes
• One-time passcodes for worker portal access, which expire within 10 minutes

Data is used solely to provide the Church Manager service to the church that controls it. Specific uses include:

• Member directory: to display, search, and manage congregation records
• Attendance tracking: to record and report service attendance
• Birthday wishes: automated WhatsApp message sent to members on their birthday, on behalf of their church
• Staff birthday reminders: WhatsApp notification sent to designated internal staff when a member's birthday occurs
• Follow-up notifications: email sent to assigned workers when a pastoral care task is created
• New month messages: optional monthly email sent to active members, if enabled by the church admin
• AI-powered reports: aggregated congregation data is sent to an AI model to generate an executive summary report for church leadership. Phone numbers and email addresses are never included in AI prompts
• Authentication: one-time passcodes sent by email for worker portal access

We do not use member data for advertising, profiling, or any purpose not listed above. We do not sell data to any third party.

Church Manager sends WhatsApp messages via the Meta WhatsApp Business Cloud API using pre-approved message templates. Messages are only sent:

• On a member's birthday (one message per year, sent at 8:00 AM church local time)
• To designated internal staff as a birthday reminder

Members' phone numbers are stored by the church admin and used solely for these purposes. We do not send unsolicited marketing messages. All WhatsApp templates used by this platform are reviewed and approved by Meta before use.

SMS messages are sent via Termii for churches that enable this feature. Member phone numbers are transmitted to Termii solely to deliver church-initiated messages.

Email is sent via Resend from the domain dviidea.com. Members may receive emails if their church admin enables the new month message feature, or if they are assigned as a follow-up worker.

We use the following third-party infrastructure providers. Each is engaged under a data processing agreement and handles data only as instructed:

Dviidea Technologies is based in Nigeria. When you use Church Manager from outside Nigeria, your data is transferred to and processed in countries where our infrastructure providers operate, including the United States and the European Union.

These transfers are made on the basis of contractual necessity and for the purposes described in this policy. We take reasonable steps to protect transferred data in line with applicable data protection requirements.

Our infrastructure providers, including Supabase, Render, and Resend, maintain their own privacy and data security commitments as described in Section 5. If you have specific questions about data transfer arrangements applicable to your jurisdiction, please contact us at info@dviidea.com.

Church Manager is a multi-tenant platform. Each church operates under its own unique identifier within the platform (for example, church.dviidea.com/c/grace-assembly/checkin). Data is strictly isolated at the database level. No church can access, view, or affect another church's data under any circumstances.

Church data is not accessed or shared outside of what is necessary to operate and maintain the platform.

• Active accounts: data is retained for as long as the church's account remains active
• Deleted members: member records deleted by an admin are removed from the active database. Audit logs referencing that member may persist for up to 12 months
• One-time passcodes: expire after 10 minutes and are marked as used after verification
• Kids check-in records: retained for the church's operational use and are deletable by the admin
• Account closure: upon request to close a church account, all associated data is permanently deleted within 30 days

Depending on your location, you may have the following rights in relation to personal data we hold about you:

• Right to access: you may request a copy of the personal data we hold about you
• Right to correction: you may request that inaccurate or incomplete data is corrected
• Right to deletion: you may request that your data is deleted, subject to legitimate retention obligations
• Right to restrict processing: you may request that we limit how we use your data in certain circumstances
• Right to data portability: you may request a copy of your data in a structured, machine-readable format
• Right to object: you may object to certain types of processing, including automated decision-making

These rights are recognised regardless of your jurisdiction. We will respond to any verified request within 30 days.

If your data is held by a church that uses Church Manager, the church admin is the primary data controller for your record. Please contact your church admin first for requests relating to data correction or deletion. For anything you cannot resolve with your church, or for requests relating to data held directly by Dviidea, contact us at info@dviidea.com.

The Children's Ministry module stores basic information about minors including name, age, and pickup authorisation, for the sole purpose of secure check-in and check-out at church events. This data is:

• Entered and controlled exclusively by the church admin
• Never used for marketing, and only shared with third parties where necessary for the services described in Section 5
• Accessible only to authorised church staff and the child's registered parent or guardian

Dviidea Technologies does not knowingly collect children's data independently of a church's use of this feature.

Church Manager uses browser localStorage to store your session token, church name, logo, and theme preference locally on your device. This data never leaves your browser except as part of authenticated API requests to our servers.

We do not use advertising cookies, third-party tracking cookies, or analytics cookies of any kind. No cookie consent banner is required under our current usage.

We may update this policy as the platform evolves. When we do, the date at the top of this page will be updated. For material changes that affect how your data is processed, we will notify church admins directly by email before the change takes effect.

Continued use of Church Manager after any update constitutes acceptance of the revised policy.

For any privacy-related questions, data requests, or concerns, reach us through any of the following:

We aim to respond to all privacy enquiries within 5 business days.