Privacy policy
Last updated 31 October 2026
1. Who we are
Koinelo is run by Godfred Antwi, a sole trader trading as Koinelo, 124 Carlton Avenue, Feltham, TW14 0EH, United Kingdom. Contact: hello@koinelo.co.uk.
2. Two kinds of information, two responsibilities
- Your account (sign-in, name, settings): we decide how this is used — we are the controller.
- What happens inside a church (its members, meetings, chat, prayer requests, recordings, check-ins): the church decides — the church is the controller and we process it on the church's behalf. Questions about a church's use of your information go to that church; we'll help them answer.
3. What we collect and why
| Information | Why | Legal basis (UK GDPR) |
|---|---|---|
| Email, password (stored only as a secure hash), display name | Your account and signing in | Contract |
| Churches you belong to and your role | Showing your churches and what you may do | Contract |
| Meetings you join (when, how long), raised hands, reactions | Running meetings; attendance for the church; fair-use limits | Contract / the church's legitimate interests |
| Video and audio in meetings | Sent live between people in the meeting. Not stored unless a host records the meeting — everyone is told, before and while joining. | Contract / the church's legitimate interests |
| Recordings (only when a host records) | So the church can watch services back; kept 30, 90 or 365 days as the church chooses, then deleted | The church's legitimate interests |
| Chat, questions, poll votes, quiz answers, testimonies, feedback | The features you use. Votes are anonymous to everyone — only totals are shown | Contract |
| Prayer requests | Shared with your church's pastoral team (private) or the meeting (only after approval). They can reveal health and beliefs, so they are deleted after 7, 30 or 90 days as the church chooses, and you can delete yours at any time | Your explicit consent when you send one |
| Guest check-in: first name, and email only if you tick to agree | So the church knows who came; removed after 90 days | Consent (email); the church's legitimate interests (name) |
| Technical error reports | Finding and fixing problems. They don't include chat, prayers or meeting content | Legitimate interests |
| Usage counts (e.g. meetings this month) | For the church and for running the service. No advertising, tracking cookies or third-party analytics | Legitimate interests |
Payments: Koinelo is free during early access. When paid plans open, card details will be handled by Stripe — we will never see or store them — and we'll update this policy first.
4. Who else handles it
| Service | What for | Where |
|---|---|---|
| Supabase | Database, sign-in, file storage, server functions | Ireland (EU) |
| Vercel | Hosts the website | Dublin (EU), delivered through Vercel's worldwide network |
| LiveKit | Live video and audio; recordings while they are made | EU |
| Resend | Sign-in and account emails | Ireland (EU) |
| Sentry | Error reports | Germany (EU) |
| Apple, Google | Phone app delivery | USA |
Several of these companies are based in the USA. Where information is handled outside the UK, it is protected by UK adequacy rules or standard contractual clauses. We don't sell your information or use it for advertising.
5. How long we keep it
- Your account: until you delete it.
- Prayer requests: 7, 30 or 90 days (the church's choice), or sooner if you delete them.
- Recordings: 30, 90 or 365 days (the church's choice), or sooner if the church deletes them.
- Guest check-ins: 90 days.
- Chat and other meeting content: until the church deletes it, or the church. If you delete your account, your chat messages stay but show "Former member".
- Our current hosting plan doesn't include daily backups, so deleted information is gone straight away.
6. Your rights
- Download your data: Your account → Download my data.
- Delete your account: Your account → Delete my account (website or phone). If you're a church's only owner, hand it over or delete the church first.
- Correct your name in Your account; ask us about anything else at hello@koinelo.co.uk.
- Object, restrict, or withdraw consent (for example, delete a prayer request).
- Complain to the Information Commissioner's Office (ICO): ico.org.uk, 0303 123 1113.
We answer requests within one month.
7. Children
Koinelo accounts are for people aged 13 and over. Churches that run youth meetings are responsible for getting consent from parents or guardians where needed.
8. Security
Encrypted connections everywhere; database rules that let each person see only what they're allowed to; private storage for recordings; staff need a second sign-in step and can't see prayer requests, chat or recordings. Video is encrypted on its way to LiveKit's servers and decrypted there to reach everyone else — it is not end-to-end encrypted.
9. Changes
If we change this policy in a way that matters, we'll tell account holders by email or in the app before it applies.