Legal document
This document sets out exactly what data the platform collects, why, how long it keeps it, who can access it, and what you can require.
Version 1.0 · In force since 15 August 2026
The data controller is the La Voix de la Puissance Divine, TO BE COMPLETED (legal form, registration number and registered address to be specified).
For any question about your data, write to info@ngawalaministries.com or call +243 818 145 155.
Data protection officer: TO BE COMPLETED (to be appointed if the applicable regulation requires one).
IDENTITY AND ACCOUNT — full name, email address, password (stored encrypted, never readable), profile picture and banner if you upload one, chosen language, time zone.
PROFILE, ALWAYS OPTIONAL — biography, occupation, home town, country of origin, date of birth, gender, languages spoken, spiritual gifts, interests, phone and WhatsApp number. You choose the visibility of each of these fields.
LOCATION — country and city. Either you declare them, or they are inferred APPROXIMATELY from your network address at sign-in. No precise position is collected and no movement tracking takes place.
USAGE — content viewed, reactions, comments, saved items, event participation, last visit date.
⚠️ PRAYER REQUESTS AND TESTIMONIES — the text you write, the category chosen and the visibility selected (private, anonymous or public). Such content may reveal your health, family situation or religious beliefs: it is treated as sensitive data (see section 5).
⚠️ PASTORAL CONVERSATIONS AND MESSAGES — the content of your exchanges with the Reverend and the pastoral team, attachments, voice and video notes. Treated as sensitive data (see section 5).
APPOINTMENTS — subject, description, urgency, preferred date and time, meeting format, contact phone and email, country, city and time zone.
NOTIFICATIONS — your preferences, and your browser's technical subscription if you enable notifications outside the app.
TECHNICAL LOG — administrative actions are recorded with their author and date. The network address appears there and is readable only by the technical administrator.
BOOK ORDERS — the fact that an order exists, its amount and its status. Payment data is handled by the payment provider and never passes through our servers.
AI ASSISTANT — the text of your exchanges with the assistant, in order to keep its history and measure usage.
WE DO NOT COLLECT — your banking details, your precise GPS position, your contacts, your address book, or any data from another service. No advertising tracker is set, and no data is sold or rented.
RUNNING YOUR ACCOUNT and giving you access to the platform: necessary to perform the relationship you sought by creating an account.
SUPPORTING YOU SPIRITUALLY — prayer, pastoral exchanges, appointments: your consent, given each time you write a request or ask for an appointment. You may withdraw it by deleting the request.
KEEPING YOU INFORMED — publication notifications, appointment reminders: your consent, withdrawable at any time in your preferences.
SECURING the platform — administration log, sign-in rate limiting: the ministry's legitimate interest in protecting accounts and content.
COMPLYING WITH THE LAW — retention of administration records.
No automated decision producing legal effects is taken about you. No advertising profiling is carried out.
ACCOUNT AND PROFILE — for as long as your account exists, then thirty days after closure (cooling-off period), after which they are erased or anonymised.
PRAYER REQUESTS AND TESTIMONIES — until you delete them. A deleted request goes to the bin for thirty days, then disappears permanently.
PASTORAL CONVERSATIONS — for as long as the conversation exists. You can clear it for yourself at any time.
APPOINTMENTS — three years after the appointment date, for pastoral follow-up.
ADMINISTRATION LOG — the retention period is set by the administration; it does not exceed TO BE COMPLETED months.
REMINDER LOG — ninety days.
AI ASSISTANT EXCHANGES — until you delete the conversation.
A prayer request or a pastoral conversation may reveal your most intimate matters: an illness, a bereavement, a marital difficulty, a debt, a fear. Such content therefore receives handling distinct from everything else.
WHO CAN READ THEM — a PRIVATE request is readable only by you and by the authorised pastoral team. An ANONYMOUS request appears on the prayer wall without your name: the platform never passes your identity to the display, including technically. A PUBLIC request appears with your name, because you chose so. A pastoral conversation is readable only by its participants — neither an administrator nor headquarters has access.
WHAT NEVER TRAVELS — the subject of an appointment and the content of a request appear in NO notification sent outside the application. A notification says a message exists; it does not say what it contains, precisely because it may appear on a locked screen that other eyes can see.
WHAT REMAINS YOURS — you may change a request's visibility, delete it, or close a conversation, at any time and without having to justify yourself.
THE REVEREND AND THE PASTORAL TEAM — prayer requests addressed to them, appointments concerning them, conversations they take part in.
THE ADMINISTRATION — account management (name, email address, role, status). It has access NEITHER to pastoral conversations NOR to the content of private requests.
THE TECHNICAL ADMINISTRATOR — full technical access, necessary for maintenance, and logged.
EXTENSION LEADS — only the data of their own space. They have access neither to the appointments nor to the pastoral notes of other spaces.
OUR PROVIDERS — database hosting and authentication (Supabase, servers in Germany), site hosting (Vercel), media delivery (Bunny, servers in Germany), the conversational assistant (Anthropic, United States, for processing your exchanges with the assistant only), book payments (PayPal), and delivery of out-of-app notifications (your browser's vendor). Each acts on our instructions and does not use your data for its own purposes.
⚠️ TRANSFERS OUTSIDE EUROPE — the conversational assistant and the payment service process data in the United States. Contractual framework: TO BE COMPLETED.
ACCESS — know what data we hold about you and obtain a copy.
RECTIFICATION — correct what is inaccurate. Most fields can be edited directly from your profile, without writing to us.
ERASURE — request deletion of your account and your data. This is triggered from your profile.
PORTABILITY — receive your data in a machine-readable format, to take elsewhere.
OBJECTION AND RESTRICTION — object to processing based on our legitimate interest, or ask for it to be frozen pending a check.
WITHDRAWAL OF CONSENT — at any time, without calling into question what was done before.
TO EXERCISE THESE RIGHTS — write to info@ngawalaministries.com. We reply within thirty days. If our answer does not satisfy you, you may refer the matter to the competent data protection authority: TO BE COMPLETED.
Exchanges with the platform are encrypted end to end by the HTTPS protocol. Passwords are stored in encrypted form and are readable by no one, including us.
Access to data is partitioned row by row at the database level: it is not the interface that decides what you may read, it is the database itself, and it refuses what you are not entitled to even if the interface were bypassed.
Sensitive administrative actions require the password to be entered again and are logged.
No system is infallible. In the event of a data breach likely to create a risk to your rights, you will be informed.
This policy may be revised. Its version and effective date appear at the top. Any substantial change is announced within the application before it takes effect.