Overview
This Privacy Policy explains how The Godhouse Centre collects, uses, and protects personal data when you use Whole Word Hub (WWH) — our church management and ministry outreach application.
By registering or using Whole Word Hub, you agree to this policy. If you do not agree, please do not use the platform. This policy applies to all versions of the application: web, mobile web, and future native apps.
Who We Are
Whole Word Hub is operated by The Godhouse Centre, a Christian ministry with centres in Nigeria, the United Kingdom, and the United States. "We," "us," and "our" refer to The Godhouse Centre and its authorised administrators.
Data We Collect
Account & Identity
- Full name, email address, and phone number (provided at registration)
- Profile photograph (optional), assigned centre, group name, and ministry role
- Date of registration and last active date
Authentication
- Email and hashed password (email/password sign-in)
- Google account ID, display name, and verified email (Google Sign-In)
- Authentication tokens managed by Supabase Auth
Ministry Activity
- Daily check-in submissions, task completions, and activity responses
- Outreach records: souls won, converts, and follow-up notes
- Discipleship task assignments and completions; badges earned; point totals
Communications
- Direct messages sent and received within the platform
- Read receipts, message timestamps, and notification status
Technical & Device
- Browser type, device type, OS, IP address, and general location (country/region)
- App usage logs for error detection and security auditing
How We Use Your Data
- Platform operation — authentication, account management, and feature delivery
- Ministry management — track outreach, compute scores/badges, generate reports
- Communication — transactional emails and in-app messaging
- Security — detect suspicious activity, enforce rate limits, protect accounts
- Administrative oversight — allow authorised pastors and admins to monitor outreach progress
- Legal compliance — meet applicable laws and regulations
We do not sell, rent, or monetise your personal data, and do not use it for advertising.
Google Sign-In
When you sign in with Google we receive: your display name, verified email, unique Google user ID, and profile picture URL. We request only the minimum OAuth scopes: openid, email, and profile.
We do not access your Google contacts, Drive, Gmail, or any other Google service.
Whole Word Hub complies with the Google API Services User Data Policy, including the Limited Use requirements. You may revoke access at any time via Google Account settings.
Data Retention
- Active accounts — data retained for the lifetime of your account
- Deleted accounts — personal data removed within 30 days; anonymised statistics may be retained
- Messages and logs — retained up to 12 months after deletion for accountability
- Legal obligations — certain data may be retained longer if required by law
Security
- All data transmitted over HTTPS (TLS 1.2 or higher)
- Passwords hashed with bcrypt via Supabase Auth — never stored in plaintext
- Row-Level Security (RLS) policies enforced at the database layer
- Sensitive operations only via SECURITY DEFINER stored procedures
- SQL-level rate limiting prevents brute force and spam attacks
- User text sanitised server-side via
sanitize_text()— HTML stripped, length capped - JWT tokens expire regularly and must be refreshed for continued access
Your Rights
- Access — request a copy of your personal data
- Correction — update your profile at any time within the app
- Deletion — delete your account from profile settings; data removed within 30 days
- Portability — request an export in machine-readable format
- Objection / Restriction — contact us to object to or restrict certain processing
We respond to all data privacy requests within 30 days.
Children's Privacy
Whole Word Hub is not directed at children under 13. We do not knowingly collect data from children under 13. Users aged 13–17 require parental consent. Contact us immediately if a child has provided personal data.
International Users
Data may be stored and processed in the EU (Supabase) and the US (Vercel). By using the platform, you consent to this transfer. We implement appropriate safeguards in compliance with applicable data protection laws.
Policy Changes
Material changes will be communicated via in-app notification and email. Continued use after the effective date constitutes acceptance. If you disagree, you may delete your account.
Contact Us
For data privacy questions or requests: