Privacy Policy

1. Introduction

EcclesiaOne ("we," "our," or "us"), operated by SkyLution Technologies, is committed to protecting the privacy and dignity of our users, church partners, and their members. This Privacy Policy describes how we collect, use, disclose, and safeguard personal data in compliance with the Kenya Data Protection Act 2019.

2. Data We Collect

We process data on behalf of churches (acting as the Data Controller). This includes:

• Member Information: Names, contact details, dates of birth, marital status, family associations, and ministry groups.
• Financial Data: Tithes, offerings, pledges, and transaction details processed via M-Pesa or bank transfers.
• Pastoral Records: Optional counseling records or prayer requests (which are end-to-end encrypted).

3. How We Protect Your Data

We employ strict security measures including Row Level Security (RLS) at the database layer to ensure complete tenant isolation. Pastoral counseling notes are encrypted at rest using AES-256 keys. We never sell, lease, or share member information with third parties for marketing purposes.

4. Your Rights

Under the Kenya Data Protection Act 2019, individuals have the right to access, rectify, or request erasure of their personal data, as well as object to processing. To exercise these rights, please contact your church administrator or reach out to our DPO at support@ecclesiaone.co.ke.