Privacy Policy
Last updated 28 August 2026
The two kinds of data here
There is data about you, the account holder - your email or phone number, used to sign you in - and there is data your church keeps about its members: names, phone numbers, attendance, giving records, receipt images, and messages. For member data, your church is the data controller - it decides what is collected and why - and The Lord Added (built and operated by Yconsoft Technologies) is the processor: we hold and process it only to provide the service, on the church's instructions, in line with the Nigeria Data Protection Act and comparable law where you are.
What we do with it
Run the product: store records, deliver the messages your church sends, read receipt images your church uploads so a form can be prefilled, and produce the reports your church asks for. Nothing is sold, nothing is shared for advertising, and no data is used to train AI models. Where AI processes a record (a draft, a receipt, an answer), it is sent to the AI provider only for that request and only for your church's own use of the feature.
Who else touches it
The providers it takes to deliver the service, each receiving only what their job needs: an SMS provider (the phone number and message being sent), an email provider (likewise), a payment provider (for credit purchases - we never see or store card numbers), file storage (receipt images and audio, held privately, never publicly addressable), and an AI provider (the content of the specific request). Each is bound to process the data only for that purpose.
How it is protected
Every church's data is isolated at the database level - enforced by the database itself, not by application code that could forget. Access inside a church follows the roles the church grants, permission changes are recorded in an append-only trail the application cannot edit, and passwords are stored only as strong hashes and never appear in any log. Receipt images and other files are reachable only through short-lived signed links.
The rights of the people in the records
A member's consent to being messaged is recorded per channel, honoured everywhere, and STOP always works. Somebody who asks their church to be forgotten can be erased properly: their personal details, free-text notes and receipt images are removed, and only the anonymous figures that reports count remain. Churches can export their data at any time, and a member can ask their church for what is held about them. For anything about this policy, or to reach us directly: info.yconsoft@gmail.com.
How long things are kept
For as long as your church keeps its account, because the records are the church's own register. When an account closes, its data is deleted after a wind-down period during which the church can export it. Operational logs are kept only as long as running the service requires.
Cookies
One cookie, for signing you in. No advertising cookies, no third-party trackers, and no analytics that follow you anywhere else.
Changes
If this policy changes materially, account holders are told before the change takes effect, and the date at the top always says when it last moved.