KingdomFlow legal
Privacy notice
How KingdomFlow handles personal information when churches and their people use the service.
Effective 25 September 2026
Who controls your information
The church or ministry that invited you normally decides why your member, pastoral, giving, ministry, or employment information is used. KingdomFlow processes that information to provide the service. For platform account, security, billing, and support information, KingdomFlow may act as the data controller.
Information we process
Depending on the features your church uses, this can include account and contact details, church participation, attendance, follow-up, pastoral-care records, giving records, staff and payroll records, device information, and security logs.
Why we process it
We process information to authenticate users, operate church workflows, protect the service, provide support, meet contractual and legal duties, and improve reliability. Sensitive pastoral or HR data is only exposed to authorised roles configured by the church.
Retention and sharing
Churches control their operational retention settings, subject to applicable law. Information may be shared with infrastructure, authentication, payment, email, or messaging providers only where needed to deliver configured services. KingdomFlow does not sell personal information.
Your choices and rights
Ask your church to access, correct, export, restrict, or delete church records about you. Platform privacy questions can be sent to privacy@kingdomflow.co.ke. Requests may require identity verification and may be limited by legal retention obligations.
Security and international processing
KingdomFlow uses role-based access, encrypted transport, audit trails, and service-provider controls. No system is risk-free. Where data is processed outside Kenya, appropriate contractual and technical safeguards should be used.