Privacy policy

To run your workspace: your name, title, phone and email, your workspace or church's name, and the invitations, engagements and trips you log: hosts, dates, purposes, and any notes you add.

Passport info: if you use passport tracking, we store the number and expiry date as text. We don't collect or store a scanned image of the document itself.

Profile photo and workspace logo: if you upload one, it's stored on a public URL, not treated as sensitive, the same way a photo on any public profile wouldn't be. Deleted automatically if you remove it or delete your account.

Confidential entries: any invitation or engagement you mark Confidential is visible only to you as the workspace Owner. It is never shown to a Scheduler, Assistant, or anyone else in the workspace, on any screen.

Payment information: if your workspace subscribes to a paid plan, our payment processor (Paystack) handles your card or bank details directly; your card number never reaches Minista's own servers at all. We keep the amount, currency, and a transaction reference, not your payment method.

To operate the product: detecting scheduling conflicts, sending reminders, generating runsheets, and showing you your own calendar. To email you: signup confirmation, password resets, and (if you've opted into them) daily reminder digests. To process payment, if your workspace has a paid subscription. We don't use your data to train any model, and we don't sell it to anyone.

We use a small number of specialist services to run Minista, each handling only what it needs to do its one job:

• Cloudflare R2: stores profile photos and workspace logos, on public URLs.
• Zoho ZeptoMail: delivers the emails we send you.
• Paystack: processes payment for paid workspaces.
• Railway: hosts the app and its database, and Halom Technologies' own support desk, which receives whatever you send through "Report an issue".
• GitHub: stores the weekly database backup, in a private repository, for 90 days.
• Sentry: receives an exception message and stack trace when the app hits an unexpected error, so we can find and fix it. Never sent request bodies, cookies, or your IP address.
• YouTube: hosts the Walkthrough videos. Nothing is requested from YouTube until you press play, and it loads in its privacy-enhanced mode.
• Google: only if you choose "Continue with Google". Google confirms who you are and tells us your name, email address and a Google account ID. We don't receive your Google password or access your Gmail, Calendar or Drive.
• Cloudflare Web Analytics: counts visits to our public pages (home, pricing, FAQ and the like): which page, the site you came from, your country and type of device. It uses no cookies, doesn't identify you or follow you to other sites, and never runs inside your signed-in workspace.

None of them are permitted to use your data for their own purposes.

We don't automatically delete data when someone leaves a workspace: the product is built to keep a full history (so a minister can see years of past engagements, and a workspace has a real audit trail of who changed what). That means data isn't purged on a timer.

You can delete your own account and data at any time from Account & security in your settings, confirmed by a code sent to your email, no need to wait on a person. Deleting your data removes your profile, your login, and anything scoped only to you; it doesn't retroactively strip a Confidential flag or a note from records that belong to your workspace and aren't part of your request. If you're the only member of your workspace, the workspace and everything in it is deleted with your account. If you own a workspace with other members, you'll transfer ownership to someone else first (also self-serve) before deletion is available; otherwise ask us directly (see "Contact us" below) and we'll handle it by hand. You can also download a copy of your own data (profile, passport info, itinerary, and activity) from the same settings page at any time.

A weekly backup of the database exists for disaster recovery, stored privately on GitHub and kept for 90 days. A deletion done today may still exist in a backup for up to that long afterward, the same way it would for any product that keeps backups.

Passwords are hashed, never stored in plain text. Sessions are managed server-side. Optional two-factor authentication (an emailed code, in addition to your password) is available on any account. Confidential entries are enforced in the application itself, not just hidden by the interface.

Minista isn't directed at children and isn't knowingly used to collect their data.

If this policy changes in a way that matters, we'll update the date at the top of this page. We won't narrow your rights over data we already hold without asking first.

For anything in this policy, including asking us to delete your data, reach us through the contact form on our pricing page.