Privacy policy

Version 2026-10 · Draft pending legal review (NDPA 2023 / GDPR). Do not treat as final legal text.

What we collect

Account details (name, email, optional phone), church application data, verification documents, identity-verification results from Didit (status and verified name only — we do not store your ID images), giving records, item offers, event registrations and private messages you send to churches.

Why

To operate the service, verify churches, process and reconcile payments with Flutterwave, prevent fraud, meet legal obligations and keep audit trails.

Who can see it

Churches see only their own data and only by role. Pastoral and assistance messages are visible only to the lead pastor and assigned pastoral team. Verification documents are visible only to that church's authorised reviewers and Helpr verification administrators, and every access is logged.

Processors

Flutterwave (payments), Didit (identity verification), our hosting provider (Render), and our email provider.

Retention

Financial and audit records are retained as required by law (typically 6+ years). You can deactivate your account at any time from your profile; records we must keep are retained but no longer used for engagement.

Your rights

Access, correction, deletion (subject to legal retention), objection and complaint to the Nigeria Data Protection Commission or your local regulator. Contact privacy@gospelhelpr.org.