Privacy Policy
What information Qavah ChMS holds about your church and the people in it, how we use and protect it, and the choices you have.
1. Who we are
Qavah ChMS ("Qavah", "we", "us") is run by Maveec Labs, based in Ghana. This policy explains what information we hold, why we hold it, and the choices you have.
2. Who decides what is recorded
Churches use Qavah to keep records about their members, visitors and finances. Your church decides what goes into those records and why, and we handle them only on your church's instructions.
For the people who use Qavah and for billing, such as account holders' names, email addresses and payments, Maveec Labs is responsible.
3. What we collect
We collect only what we need to run Qavah:
- Account details: the name and email address of each person on your church's team, and their password, which we store in a scrambled form that can't be turned back into the password. If you sign in with Google, Google shares your name and email address with us.
- Your church's details: its name, denomination, contact details and address.
- Records your church adds: names, contact details, gender, date of birth, marital status and family links (including children), baptism and membership status, how and when people joined, ministries, attendance, gifts and pledges.
- Billing details: your plan, invoices and payment references. Card and Mobile Money details are handled by Paystack; we never see or store them.
- Sign-in and security details: IP address, browser type and sign-in times.
- Messages you send us: if you use our contact page, your name, WhatsApp number and message, plus your email address and church's name if you give them. We also check your IP address and browser to confirm the message came from a person.
4. How we use it
We use information only to run Qavah. We never sell it, never show ads, and never contact the people in your church's records.
- To run Qavah for your church and show each person only what their role allows.
- To keep accounts and records safe, including limiting repeated sign-in attempts.
- To take payments and send receipts and renewal reminders.
- To send service emails: email address checks, password resets and team invitations.
- To answer your questions when you contact us.
5. Who helps us run Qavah
We use a few trusted providers, who handle information only for us and must keep it safe. Information is stored and processed on servers in Europe and the United States, outside Ghana.
- Vercel, which hosts Qavah.
- Neon, which stores our database.
- Resend, which delivers our emails.
- Paystack, which processes payments.
- Cloudflare, which checks that messages sent from our contact page come from a person, not a computer program.
- Google, which hosts the inbox where messages from our contact page arrive, and signs you in if you choose to sign in with Google.
6. How long we keep it
We keep your church's records for as long as its account is open. If your church stops paying, it moves to the Free plan and nothing is deleted.
- If your church's account owner asks us to delete its account, we close it straight away and permanently erase its records, including backup copies, within 30 days. We keep only its invoices, for as long as tax law requires.
- Payment notifications from Paystack, which include the payer's contact details, are kept for 180 days to help resolve payment problems.
- Messages from our contact page are kept in our support inbox for as long as we need them to help you. Ask us and we delete them.
7. How we protect it
- Every connection to Qavah is encrypted.
- Passwords are stored in a scrambled form that can't be turned back into the password.
- Each church's records are kept separate, and each person sees only what their role allows.
- Repeated sign-in attempts are limited to stop guessing.
- Our own staff look at a church's records only when needed to help that church or keep Qavah safe.
9. Your rights
Under Ghana's Data Protection Act, 2012 (Act 843), you can ask to see the information held about you, have it corrected or deleted, or object to how it is used.
Account holders can email us directly. Church members should contact their church first, because the church decides what is in its records. We help churches respond to these requests.
If you are unhappy with how your information is handled, you can complain to the Data Protection Commission of Ghana.
10. Children
People in a church's records can be any age. Churches may record children's details, for example in families or the children's ministry, and must have permission from a parent or guardian to do so.
To sign in to Qavah, you must be at least 15 years old, and anyone under 18 needs a parent or guardian's permission. The person who creates a church's account must be at least 18.
11. Changes to this policy
We may update this policy. We email your church's account owner about important changes, and the date at the top shows when it last changed.
12. Contact us
Questions about your information? Email us and we reply within 3 working days.