KOINOVASign in →Scope and responsibilities
This policy covers the Koinova website and services used by churches and their members. Koinova manages account access, service operation and platform support. Each church decides what church records it collects and how its authorised team uses them. Contact your church about its local membership, pastoral care and attendance practices; contact support@koinova.co for platform privacy requests.
Information we process
- Account details such as name, email address, phone number, hashed password and account verification status.
- Church profiles, membership connections, roles, departments, attendance and event responses supplied by you or your authorised church team.
- Announcements, uploaded resources, photos, social links, reactions, comments, saved resources and reports you submit.
- Visitor contact details and care records entered by authorised church teams, including contact consent and follow-up history.
- Optional birthday month and day and your choice about birthday sharing, plus notification preferences.
- Church verification submissions, reviewed bank account details, software subscription references, trial history and billing status. Paystack processes subscription payments; Koinova does not need your full card number or card security code.
- Session cookies, remember-me credentials, API/device tokens, notification registrations, security logs and technical information needed to operate the service.
Purposes and sensitive church information
We use this information to authenticate users, provide church tools, deliver selected reminders, maintain security, manage plans and respond to support requests. Church affiliation, prayer and pastoral notes can reveal sensitive information. Church teams must collect only what they need, use appropriate permission or another applicable basis, and restrict staff access. Do not put confidential counselling details in public posts or ordinary broadcasts.
Who can see your information
Approved church members can see member-facing community content and shared church resources. Public posts and church profiles can be read by visitors. Authorised church roles control administrative access; care workers are limited to assigned cases, while designated care leaders can oversee their church’s cases. Platform administrators may access information needed for verification, support, security and service operation. Church network connections show agreed church structure, location and leadership information. They do not automatically share members’ private profiles, care notes or finance records between branches. Birthday celebration uses the shared name, month and day when the member opts in.
Church-event advertising
Advertising applications store the applicant account, church/event details, flyer, destination link, chosen weeks, quoted price, payment reference and verification result, and administrator review history. Approved flyer and event information become public sponsored content during the placement. Payment processing uses Paystack; Koinova does not receive full card credentials. Marketing staff record the completed social-share link. Sponsored placement is separate from church verification and membership.
Participation insights, welfare and member suggestions
Koinova records the last authenticated app visit for an approved church membership, as well as the existing attendance, seen church updates, faith activity and quiz records. Authorised pastoral leaders can review recorded participation; departmental leaders are limited to their own departmental responsibility. Pro and Enterprise care leads can review attendance and activity signals to suggest a human care step. A missing record is not proof of absence or spiritual decline. Private Bible note contents and counselling messages are not used for these signals. Welfare requests are visible to their author, the church administrator or pastor and any authorised assigned care worker. A response and status can be shared with the author; internal care notes remain restricted to the authorised care team. Suggestions go privately to the church administrator or pastor. Choosing to hide a suggestion name removes it from the church review view, but the submission remains linked to the account for replies and platform security. These tools store the reviewer and dated action history. Do not submit unnecessary sensitive medical or financial details. Contact your church or support@koinova.co about correcting or removing records. Birthday greetings are automatically placed in the Koinova inbox when a birth month and day are set. Public church-family celebration still requires birthday sharing. External email and device alerts honour saved channel choices; device permission is required for push. You can remove a saved birthday or change birthday sharing in Notification center.
Providers, embeds and optional tools
The service uses its hosting environment, configured email service, Paystack for software subscriptions, and Firebase for device notifications where enabled. These providers process the information needed for their task and may operate outside your country. Do not include sensitive pastoral content in notification previews. Church livestreams and social highlights may load previews automatically when visible, connecting to their original social or video provider. Opening an original social link also connects you to that platform, whose own privacy and cookie rules apply. A provider may log technical information or require its own login. Koinova comments and reactions are stored in your church community and do not synchronise to those networks. Sermon Studio processes source video in your browser or supported app environment; the source is not uploaded by the trimming tool. A finished clip is uploaded only if you choose to publish it. If an AI writing service is configured and you deliberately request a draft, the text sent in that request is shared with that provider. Avoid entering private member information in AI prompts.
Church location verification and free reading tools
Church verification collects a single device location, its capture time and estimated accuracy, together with the submitter's confirmation that they are at the venue. Authorised church administrators and platform reviewers use this evidence to check the submitted church address. The verification tool does not continuously track the submitter. A venue pin is displayed publicly only after the submitter opts in and a reviewer approves publication.
The free reading assistant can process resource notes, transcripts and text supplied or extracted for a reading session. Quick summaries are processed by Koinova and are not added to the shared church resource. Optional on-device AI processes the text in a supported browser; the browser may first download an AI model. That on-device AI mode does not send the resource text to an external AI service. Reading notes deliberately saved by a church media editor are part of the resource and are visible to its authorised readers.
Choices and permissions
Manage push, email and birthday sharing in the Notification Centre. You may also change notification permission in your browser or device settings. Not enabling push does not remove your in-app inbox. Necessary security and account messages may still be required. Camera, microphone or similar permissions are requested by the feature that needs them; deny them if you do not want to use that feature.
Security and retention
We use measures including password hashing, restricted administrative access, session protections, signed payment webhook checks and upload validation. No service can promise absolute security. Keep your password private and tell us promptly about suspected unauthorised access. We keep records while needed to provide the service, meet applicable obligations, manage billing and resolve security or support issues. Retention depends on the record and purpose. Deleted data may remain in restricted backups until the normal backup cycle replaces it; retained records must stay limited to the purpose that justifies retention.
Your requests and account deletion
You can ask to access or correct your information, object to or restrict applicable processing, withdraw an optional permission, or request deletion where applicable. Use the account email to contact support@koinova.co so we can verify your identity. Never email your password, card security code or a full identity document unless a secure verification process has specifically been arranged. See Delete Account for the public deletion request route. Deletion covers the account and associated personal data, with limited retention where required for a specific lawful purpose. Explain any restriction in the response. Local church records may also require coordination with the church responsible for them. You may raise unresolved privacy concerns with the relevant data protection authority, including Nigeria’s NDPC where applicable.
Children and policy updates
Church teams must obtain appropriate parent or guardian permission for children’s records, photos and participation, and limit access to those who need it. Contact us if a child’s information has been shared improperly. This page shows when its published content was last updated; contact support for questions about a change.