Folloow ("Folloow", "we", "us") provides church membership, attendance, and pastoral-care management software to churches and religious organisations ("Customers"). This policy explains what personal data we collect, how it is used, and the choices available to you.

Controller and processor roles

When a church signs up for Folloow, that church is the data controller for the information it holds about its own congregants (members, visitors, guardians of minors, prayer requests, attendance records, and similar). Folloow acts as a data processor, storing and handling that data only as instructed by the church, to provide the service. For the church administrator's own account details (name, login email, billing information), Folloow is the data controller.

Information we collect

• Account data — administrator name, email, phone number, and church details provided at registration.
• Congregation data — entered by the church into Folloow: member names, contact details, birth dates, household and group membership, attendance records, follow-up notes, and prayer requests.
• Billing data — subscription plan, billing cycle, and transaction history. Card details are collected and stored directly by our payment processors (Paystack, Stripe) — Folloow does not store full card numbers.
• Usage data — log data, device/browser information, and general analytics about how the service is used.
• Advertising data — when you visit our public marketing pages, a Meta (Facebook) Pixel may record that a page was viewed and whether you started registration, to measure the effectiveness of our advertising. See "Cookies and tracking" below.

How we use information

• To provide, maintain, and support the Folloow service for the church that entered the data.
• To process subscription payments and communicate about billing.
• To send transactional email, SMS, or WhatsApp messages that a church configures (e.g. attendance reminders, celebration greetings) to its own members, on the church's instruction.
• To generate AI-assisted content, such as celebration card messages, using the details a church has entered about its members — sent to our configured AI provider solely to produce that content.
• To monitor, secure, and improve the platform, and to measure the performance of our own marketing.

Third-party service providers

We rely on third parties to operate the service, including payment processing (Paystack, Stripe), messaging delivery (Africa's Talking, Termii, Twilio, and other SMS gateways; WhatsApp Business API), email delivery, AI providers for generated content, and infrastructure/hosting providers. Each is bound to handle data only as needed to provide their service to us.

Data retention

Congregation data is retained for as long as the church's account remains active, and for a reasonable period afterward to allow for account recovery, unless the church requests earlier deletion or applicable law requires a different retention period.

Your rights

Depending on your location, you may have rights to access, correct, export, or request deletion of your personal data, and to object to certain processing — including under the Nigeria Data Protection Act 2023 and, where applicable, the EU/UK GDPR. If you are a church member and want to exercise these rights, please contact your church administrator directly, as they control your record. Church administrators can contact us at the address below for help fulfilling such requests.

Children's data

Churches may record information about minors (e.g. youth ministry members) as part of normal congregational record-keeping. Churches are responsible for ensuring they have appropriate authority — such as parental or guardian consent — to hold that data under applicable law.

Cookies and tracking

Our public marketing pages may use the Meta (Facebook) Pixel to measure ad performance and understand which visitors go on to register. This is only active on our public, logged-out pages and is not used inside the church dashboard. You can control ad tracking through your browser or ad platform privacy settings.

Security

We use industry-standard safeguards — including encrypted connections, access controls, and password hashing — to protect data against unauthorised access, loss, or misuse. No system is completely secure, and we encourage churches to use strong, unique passwords for their accounts.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

Contact

Questions about this policy can be sent to support@folloow.app.