1. Who We Are
SoftKit ("we", "our", or "us") operates the KanisaManager website, mobile applications, and church management platform (collectively, the "Service"). Our mission is to simplify church administration by helping churches manage members, finances, communication, attendance, ministries, events, and reporting from one secure platform.
If you have any questions regarding this Privacy Policy or how your data is handled, please contact us at softkitke@gmail.com.
2. Information We Collect
To provide our services effectively, we collect information that churches and users voluntarily provide, information generated through use of the platform, and certain technical information required to operate and secure the Service.
- When a church registers with KanisaManager, we may collect information including the church name, denomination, physical and postal address, country, county, city, contact phone numbers, email addresses, website, church logo, and other organizational information necessary to establish and manage the church workspace.
- We collect account information for administrators and authorized staff members, including names, email addresses, phone numbers, profile photographs where provided, job titles, assigned roles, login credentials, authentication identifiers, and account preferences.
- Church administrators may store information relating to members of their congregation, including names, phone numbers, email addresses, gender, marital status, dates of birth, addresses, family relationships, ministries, fellowship groups, attendance history, baptism records, communicant records, leadership positions, emergency contacts, and other information required for church administration. The church remains responsible for ensuring it has appropriate authority to collect and manage this information.
- KanisaManager stores financial records entered by authorized church users, including offerings, tithes, pledges, donations, expenses, budgets, projects, fundraising records, payment references, and transaction histories. For payments processed through integrated providers such as M-Pesa, we store transaction references and payment status but never collect or store your M-Pesa PIN, bank PIN, card security codes, or full payment credentials.
- The Service may collect attendance records, service participation, ministry involvement, event registrations, volunteer assignments, service schedules, and other operational information required for church administration.
- When churches use SMS, email, announcements, notices, or notification features, we store message content, recipient lists, delivery status, timestamps, and communication history to facilitate reliable messaging and maintain service records.
- To improve performance and maintain security, we automatically collect technical information such as IP addresses, browser type, operating system, device identifiers, approximate location, session information, pages visited, referral URLs, timestamps, crash reports, and diagnostic logs.
- KanisaManager uses cookies and similar technologies to authenticate users, remember preferences, improve platform performance, maintain secure sessions, analyze usage trends, and enhance the overall user experience. Where required by applicable law, we request your consent before placing non-essential cookies on your device. You may modify your cookie preferences through your browser settings, although disabling certain cookies may affect platform functionality.
Church Information
Administrator and Staff Information
Member Information
Financial Information
Attendance and Ministry Records
Communication Data
Technical Information
Cookies and Similar Technologies
3. Google Sign-In and Other Authentication Providers
KanisaManager supports authentication through Google and other supported identity providers using secure authentication services such as Clerk. When you choose to sign in with Google, we request only the minimum information necessary to identify and authenticate your account, including your name, email address, profile picture, and unique authentication identifier.
We do not use Google account information for advertising purposes, do not sell Google user data, and do not access your Gmail, Google Drive, contacts, calendar, or any other Google services unless explicitly requested and authorized by you in the future. Our use of Google user information complies with Google's API Services User Data Policy, including the Limited Use requirements.
4. How We Use Your Information
We use the information collected through KanisaManager solely for legitimate business purposes related to providing and improving the Service.
This includes creating and managing church workspaces, authenticating users, assigning permissions, maintaining secure access, managing memberships, organizing family relationships, tracking attendance, recording financial information, generating reports, scheduling services and events, sending SMS and email notifications, processing subscription payments, providing customer support, monitoring system performance, detecting fraudulent activity, improving platform features, complying with legal obligations, and protecting the security of our users and infrastructure. We do not use church member information for advertising purposes.
6. Data Isolation Between Churches
KanisaManager operates using a secure multi-tenant architecture with strict logical separation between church workspaces. Each church's records including member information, financial data, attendance records, reports, communications, and uploaded documents are isolated from every other church using the platform.
Users from one church cannot access, search, export, or view data belonging to another church unless expressly authorized through supported cross-organization functionality.
7. Data Retention
We retain information only for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. Church data remains available while the church subscription is active. If a church deletes its account, personal information is generally removed from active systems within thirty (30) days, subject to reasonable backup retention periods and legal obligations.
Billing records, invoices, subscription histories, audit logs, and financial transaction records may be retained for up to seven (7) years where required for accounting, legal, fraud prevention, or regulatory purposes.
8. Data Security
Protecting church information is one of our highest priorities. KanisaManager implements industry standard administrative, technical, and physical safeguards designed to protect information against unauthorized access, disclosure, alteration, or destruction.
These safeguards include encrypted HTTPS/TLS communications, encryption of sensitive information at rest where appropriate, secure authentication, role-based access controls (RBAC), least-privilege permissions, secure cloud infrastructure, continuous monitoring, audit logging, regular software updates, vulnerability management, and periodic security reviews. While we take extensive measures to protect information, no internet-based service can guarantee absolute security.
9. Your Rights
Depending on applicable law and your location, you or your church may have the right to request access to personal information held by KanisaManager, correct inaccurate information, update church records, export church data in commonly used formats, request deletion of personal information, restrict certain processing activities, object to specific uses of personal information, withdraw previously granted consent where processing is based on consent, and lodge complaints with the appropriate regulatory authority. Church administrators can also manage staff access, deactivate users, update permissions, and export church information directly from the platform where these features are available.
10. Children's Privacy
KanisaManager is intended for use by churches and authorized adults responsible for church administration. While churches may maintain records relating to children participating in ministries such as Sunday School or youth programs, these records are entered and managed solely by authorized church personnel acting on behalf of the church. We do not knowingly permit children to create independent KanisaManager accounts.
11. International Data Transfers
KanisaManager may store and process information using secure cloud infrastructure located in different countries depending on our hosting providers. Where personal information is transferred across international borders, we implement appropriate contractual, organizational, and technical safeguards designed to protect your information in accordance with applicable privacy laws.
12. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in technology, legal requirements, business practices, or new platform features. When material changes are made, we will notify users through the Service, by email, or through other appropriate communication channels before the updated policy becomes effective. Your continued use of KanisaManager after the revised Privacy Policy becomes effective constitutes your acceptance of the updated Policy.
13. Contact Us
If you have questions about this Privacy Policy, wish to exercise your privacy rights, request access to your information, request deletion of your data, or report a privacy concern, please contact KanisaManager using the contact information provided on our website. We are committed to responding to privacy requests in a timely, transparent, and professional manner. Thank you for trusting KanisaManager with your church's information. We are committed to protecting your data while helping your church serve its congregation more effectively.
softkitke@gmail.com