Privacy Policy

This policy covers the ALFC mobile app and this website, run by Abundant Life Family Chapel in Nairobi, Kenya (“we”, “us”). It explains what information we collect, why, who can see it, and the choices you have. If you have a question about your information, email alfc.support@gmail.com.

We only collect what the app needs to work.

• Your account. The username, email address and password you choose when you sign up. Your password is stored as a one-way hash, so nobody, including us, can read it. Your email is used only to send you password reset codes.
• Messages. Chat messages you send to other members are stored on our server so they can be delivered and shown in your conversations. While the app is open, other members can see that you are online.
• Prayer requests. The text, category, the name shown with it, and whether you shared it publicly or privately. If you post without signing in, we store a random identifier for your device instead of an account, so you can manage your own request.
• Notifications. A push notification token from Google Firebase, linked to your account, so we can tell you about new messages and church announcements.
• Password resets. A 6-digit code is emailed to you. We store only a hashed copy, and it expires after 10 minutes.
• Technical information. Like most online services, our server records basic request details such as your IP address and the time of a request. We use these to keep the service secure and working, and keep them only for a limited time.

• Notes you write in the app are saved only on your device. They are never sent to us.
• The Bible is built into the app and reads offline. We do not track what you read.
• Giving. The app shows the church’s M-PESA Paybill details for you to copy. Payments happen entirely in M-PESA; the app never sees your M-PESA PIN or payment details.
• Camera and microphone are used only by church broadcasters to stream a service live to YouTube. The app does not use them for anyone else.

• To create and secure your account, and to help you recover it.
• To deliver your messages and show the congregation directory.
• To display and moderate prayer requests.
• To send notifications you can turn off in your phone’s settings.
• To keep the service safe, fix problems and prevent abuse.

Other members can see your username in the congregation directory, whether you are online, and the messages you send them. Prayer requests you share publicly appear on the prayer wall for everyone using the app. Your email address is never shown to other members.

Church administrators can see the member list and can hide prayer requests that break community guidelines.

We do not sell your information or use it for advertising. We rely on a small number of service providers to run the app, who process data only on our behalf:

• Amazon Web Services, which hosts our servers.
• Google Firebase, which delivers push notifications.
• Google (Gmail), which delivers password reset emails.
• YouTube, which provides sermon videos and live streams. Videos you watch are played by YouTube and covered by Google’s Privacy Policy.
• OurManna, which may supply the daily verse when the church has not posted one. Your phone requests the verse directly.

We may also share information if the law requires it, or to protect the safety of our members.

All traffic between the app and our server is encrypted with HTTPS. Passwords and reset codes are stored only as hashes, and access to the server is limited to the people who maintain it. No system is perfectly secure, but we take reasonable steps to protect your information.

We keep your account information for as long as your account exists. When you ask us to delete your account, we delete it within 30 days. Copies in our backups are removed as those backups are replaced.

Under Kenya’s Data Protection Act, 2019, you can ask to see, correct or delete the information we hold about you, or object to how we use it.

To delete your account, email alfc.support@gmail.com with the subject “Delete my ALFC account” and your username, ideally from the email address on your account. We will confirm it is you, then delete your account, your messages, your prayer requests and your notification tokens within 30 days.

You can change your recovery email in the app from the profile menu, and turn off notifications at any time in your phone’s settings.

The app is not intended for children under 13, and we do not knowingly collect their information. If you believe a child has created an account, contact us and we will remove it.

If we change this policy, we will update the date at the top of this page. For significant changes, we will also let you know in the app.

Abundant Life Family Chapel
Kamiti Road, behind Northview Supermarket, Jacaranda, Nairobi, Kenya
alfc.support@gmail.com