Privacy Policy

Every church using Mene:Log is the absolute Data Controller of its own congregation's information. You decide what information to collect, how long to retain it, and how to communicate with your members.

Prime Haven IT Solutions & Consultancy ('Prime Haven') acts exclusively as a Data Processor. We store, calculate, and transmit data solely on your explicit instructions to deliver the attendance, membership, leadership, and communication features of the platform.

We adhere to the provisions of the Data Protection Act 2012 (Act 843) of Ghana, as well as recognized global data protection and privacy standards.

Our system is architected with a strict technical zero-access boundary: the platform operator console (used by Prime Haven administrators) can only ever inspect institutional account metadata.

This includes: registered church name, subdomain handle, package tier (Free, Standard, Pro, Premium), account status (active, grace, suspended, closed), primary administrator contact info, and aggregate counts (e.g. total attendance count over 30 days, billing health).

The platform operator never sees and cannot access: individual member names, phone numbers, email addresses, dates of birth, marital status, residential areas, occupations, educational backgrounds, who invited them, individual attendance check-in timestamps, member codes, or church message contents.

This separation is enforced at the database level via PostgreSQL Row Level Security (RLS) and cryptographic access functions, not merely client-side hiding.

From Church Administrators & Staff: Name, email address, phone number, designated church role, and hashed login credentials.

From Church Leaders: Full name, phone, email, date of birth, residential location, leader type/title, church access code, and optional profile photograph.

From Members & Attendees at Check-in: Name, mobile number, optional email address, date of birth, gender, marital status, residential location, occupation, educational level, inviting leader, and attendance records.

Technical & Safety Telemetry: Anonymized IP addresses, rate-limiting tokens, check-in timestamps, and browser user-agent tokens utilized strictly to prevent fraudulent check-ins and denial-of-service abuse.

Every query executed on Mene:Log is strictly scoped to the authenticated user's church tenant identifier. Church A can never inspect, query, or infer records belonging to Church B.

Database connections use Transport Layer Security (TLS 1.3) in transit. Static assets and databases are encrypted at rest with industry-standard AES-256 encryption.

Member attendance codes are stored as cryptographically salted one-way hashes, preventing token enumeration or unauthorized code generation.

Internal church access strictly follows administrative assignment:

• Ushers can only scan member QR codes and view the attendee's name and check-in confirmation.

• Leaders can only view attendees who specifically selected them as their leader or were assigned to their specific ministry unit or cell group. Leaders cannot view the global church directory.

• Administrators and Owners retain full visibility over church-wide membership, pastoral follow-up logs, and reporting analytics.

We partner with trusted enterprise service providers strictly to perform essential platform functions:

• Payment Infrastructure: Paystack (PCI-DSS Level 1 certified) for processing card transactions and Mobile Money payments in Ghana and internationally.

• Cloud Infrastructure & Hosting: Supabase and Cloudflare for managed database replication, serverless edge routing, and file asset storage.

• Messaging Gateways: Telecommunications gateways for delivering one-way transactional SMS and email broadcasts initiated by your church.

Our sub-processors are legally prohibited from utilizing church data for any secondary purpose, machine learning training, or independent commercialization.

Attendees and members whose records are stored on Mene:Log retain full rights under applicable data protection law:

• Right of Access: Members may request a complete copy of their personal attendance history directly from their church administration.

• Right to Rectification: Members may update inaccurate contact details upon subsequent check-ins or by notifying church leadership.

• Right to Erasure / Anonymization: Churches can delete or irreversibly anonymize any member record at any time, instantly wiping personal identifiers while preserving aggregate historical service tallies.

• Right to Opt-Out: Members may unsubscribe from non-essential church messaging broadcasts at any time.

Congregation data is retained throughout the active term of your church subscription.

Upon account termination or cancellation, your database records enter a 90-day grace retention period to safeguard against accidental loss and permit complete data exports.

Following the 90th day, all database records, member rows, attendance stamps, and uploaded media assets are irrevocably purged from active production databases in accordance with DoD 5220.22-M sanitization practices.

For questions regarding our privacy architecture, multi-tenant isolation, or data processor obligations, contact our Data Protection Team at Prime Haven IT Solutions & Consultancy via legal@menelog.site or through the support channels in your church console.