Privacy policy
Last updated 15 October 2026
ChurchStack is provided by NULIFE MULTIMEDIA LTD (“we”, “us”), a company registered in England and Wales. This policy explains what personal data we handle, why, and the choices you have. If you have a question, email support@churchstackapp.com.
Who is responsible for your data
If you are a member of a church that uses ChurchStack, your church decides what information it keeps about you and why. Your church is the data controller, and we process that data on its behalf. Questions about what your church holds, or requests to see, correct or delete it, are best sent to your church first; we will help them answer.
If you run a church account (staff and volunteers who sign in to the admin app), and for visitors to this website, we are the data controller for your account and usage data.
What we collect
Information churches store
Churches may record names, contact details, birthdays and anniversaries, photos, group memberships, attendance, notes, serving rotas and giving records. A church chooses what to record.
Information from the member app
When you use the member app we process your email address to send sign-in codes, your RSVPs and check-ins, messages you post in group chats, gifts you declare or make, your notification choices and, if you allow notifications, a device token so we can deliver them.
Payments
Card details are entered on Stripe’s or Paystack’s secure pages and are never seen or stored by us. Gifts are paid directly into the church’s own payment account; we receive a record that the gift was made (amount, fund, date) so the church can thank you and issue statements.
Account and usage data
For people who sign in to the admin app: name, email, role, and records of important actions (for example, changes to bank details) kept for security. For everyone: basic technical logs such as IP address and browser type, used to keep the service secure and working.
How we use it
- To provide the service the church has asked for: storing records, sending its emails, texts and notifications, and processing its gifts.
- To keep accounts secure, for example with sign-in codes and audit records.
- To bill churches for their subscription.
- To answer support requests.
We do not sell personal data, and we do not use church members’ data for advertising.
Barnabas AI
When a church staff member asks Barnabas a question, the question and the summary figures needed to answer it (such as membership counts or attendance totals) are sent to our AI provider to generate the reply. Barnabas is read-only and cannot change any records.
Who we share data with
We use these service providers to run ChurchStack. Each only receives what it needs for its task.
| Provider | What for | Where |
|---|---|---|
| Render | Hosting the ChurchStack app and website | Frankfurt, Germany |
| Supabase | Database and file storage | Dublin, Ireland |
| Resend | Sending email | United States |
| Twilio | Sending SMS in the UK | United States |
| Termii | Sending SMS in Nigeria | Nigeria |
| Stripe | Card payments for subscriptions and for gifts in the UK | United States and EU |
| Paystack | Card payments for subscriptions and for gifts in Nigeria | Nigeria |
| Google (Gemini) | Answering questions and drafting text in Barnabas AI | United States |
| Apple and Google (Firebase) | Delivering push notifications to phones | United States |
| Cloudflare | Domain names and routing email to our support address | Global |
Where data is transferred outside the UK or EEA, we rely on appropriate safeguards such as the UK International Data Transfer Addendum or the EU Standard Contractual Clauses.
The member app can show videos from a church’s YouTube channel and episodes from its podcast feed. Playing them is subject to YouTube’s and the podcast host’s own terms.
How long we keep it
Church records are kept for as long as the church keeps its account. If a church deletes its account, its data is permanently deleted after a 14-day grace period. A member can delete their own member app account from the app at any time; their church may keep its own record of them.
Your rights
Under UK and EU data protection law, and the Nigeria Data Protection Act, you can ask to see, correct or delete your data, to restrict or object to how it is used, and to receive a copy of it. Contact your church, or us at support@churchstackapp.com. You can also complain to the Information Commissioner’s Office (ico.org.uk) or the Nigeria Data Protection Commission.
Security
Data is stored in the EU (Ireland and Germany), encrypted in transit and at rest; access is limited by role, and files are stored privately per church. No system is perfectly secure, but we take care to protect yours.
Children
Churches may keep records about children, for example in children’s ministry. The member app is intended for people aged 13 and over.
Changes
We will update this page when our practices change, and show the date above.