Ekora a product of Ecclerium

Ekora

Privacy Policy

What we collect when you use Ekora, why, who can see it, and the choices you have.

Effective 10 October 2026

1. Who we are

Ekora is an online home for churches and their people: church pages, posts, devotionals, events, questions and answers, testimonies and a Bible, and, as they become available, messages, groups, photo galleries and giving. This policy covers each feature when you use it, whether it is already available or arrives later. Ekora is a product of Ecclerium Limited (RC 1771066), a private company limited by shares incorporated in Nigeria under the Companies and Allied Matters Act 2020 ("Ecclerium", "we", "us").

Ecclerium is the data controller for the information described in this policy. Churches on Ekora also decide how they use their own members' information (see Who sees what), and are responsible for that use.

This policy covers Ekora on the web (ekoraonline.com and church addresses on it) and in the Ekora app.

2. What we collect

Your account

  • If you sign up with email: your first name, last name, email address and password. We never store your password itself, only a one-way scrambled form of it (a hash).
  • If you continue with Google: your name, email address and profile picture from your Google account, and Google's identifier for you. We never see your Google password.
  • Your profile: you can change your name and add a phone number. Your phone number is optional.

Your churches

  • The churches you follow, and when.
  • Membership requests you make: the church, any message you add, any name or phone number you give the church, and the request's outcome and history (requested, approved, declined, ended).

What you post and do

  • Comments and replies on posts, and the posts and comments you like.
  • Questions you ask, answers you give, and your votes. If you ask a question anonymously, we still store that you asked it (so you can see and manage it), but we hide your name from everyone else, including the church's leaders.
  • Testimonies you share, and the testimonies you say "Amen" to.
  • Devotionals you like, and which devotionals you have opened.
  • Reports you make about a question or answer, with the reason and any note.
  • Events you register for, and your registration status (going, on the waitlist, checked in).
  • If you use messages: the messages you send to a church, and the church's replies.
  • If you join a church's groups or forums: which groups you belong to, how you joined (openly, by invitation or with an access code), and what you post in them.

If you lead a church

  • The church's details: name, address, city, state, country, email, phone, currency and time zone, and any map position (latitude and longitude) you enter.
  • What the church publishes: posts (with photos and video links), devotionals, events, photo albums, answers, and the church's logo and cover picture.
  • If you reply to messages for the church: your replies, and which staff member sent each one.
  • A record of actions taken for the church (for example, who approved a member or hid a comment, and when), so churches can see who did what.

Location

We only use your device's location when you tap Use my location. Ekora then sends it with that request to show churches, posts or events near you. We do not store it on our servers. On the Events page, the place you choose (which can be your current location) is remembered on your device so the page opens there next time. If you type a town or city instead, that text is sent to a place-search service (see Service providers).

Notifications

  • The notifications we send you (in the app and by email), whether you have read them, and your notification settings.
  • If you use phone notifications (push): a token that identifies your device, so we can send them. You can turn them off in your notification settings or your device's settings.

Technical information

  • When you sign in or change your account's security details: the date and time, your IP address, your browser or device type, and the app you used. We keep these records to protect your account.
  • Our servers also keep routine logs (such as requests and errors) to run, secure and fix the service.
  • We do not use advertising or analytics trackers.

Giving

If you give to a church through Ekora (in Naira, when available):

  • Your gift record: who gave, the amount, the fund (for example, tithe or offering), the church, the date, how you paid, and the gift's status.
  • Card or transfer payments are processed by Monnify. Your card details go to Monnify, not to us; we receive the payment's reference and result.
  • Bank transfer with a receipt: if you pay by bank transfer and upload a receipt, we store the receipt (for example, a screenshot) so the church can confirm your gift.
  • Giving anonymously: the church's leaders do not see your name. We still keep it on record, so you can see your own giving history.

3. Why we use it, and our lawful bases

We handle personal data under Nigeria's Data Protection Act 2023 (and the Nigeria Data Protection Regulation where it still applies). We rely on these lawful bases:

  • To provide Ekora to you (contract): creating and running your account, signing you in, showing you your churches, posting what you write, delivering your messages, registering you for events, processing your gifts, and sending notifications you have asked for.
  • Your consent: using your location when you tap Use my location, and the religious information described below. You can withdraw consent at any time; this does not affect what we did before.
  • Our legitimate interests: keeping Ekora safe (preventing abuse, spam and unauthorised sign-ins), handling reports, fixing problems, and improving Ekora. We weigh these interests against your rights and do not use them to override your choices.
  • Legal obligations: where the law requires us to keep or disclose information, such as giving records under tax and accounting law.

Religious information. Following or joining a church, or what you post, can reveal your religious beliefs, which the law treats as sensitive personal data. We only use it to provide Ekora as you choose to use it, with your explicit consent, which you give when you follow, join or post. You can withdraw it by unfollowing, leaving a church, deleting what you posted or deleting your account.

We do not sell your personal data, and we do not use it for advertising.

4. Who sees what

  • Everyone, including people who are not signed in: a church's public page and what the church publishes publicly (posts, devotionals, events, approved testimonies, questions and answers), together with the name shown on public comments, questions, answers and testimonies. Anonymous questions never show your name.
  • A church's members: anything the church publishes for members only.
  • A group's members: what is posted in a church group you belong to, and that you are a member of it.
  • A church's leaders, according to the permissions the church gives them:
    • the church's followers, members and membership requests, including members' names, email addresses and phone numbers;
    • who has registered for the church's events;
    • questions to the church, how often they were reported and why (not who reported them);
    • testimonies sent to the church, before and after approval;
    • messages sent to the church, which its staff read and answer as the church;
    • the church's groups, their members and what is posted in them, so they can moderate them;
    • gifts to the church: who gave (except anonymous givers), the amount, the fund and the date, and, for leaders who review gifts, any uploaded receipt. Gifts are confirmed under the church's own approval rules;
    • the church's record of actions taken by its leaders.
    Leaders never see who asked an anonymous question. Each church decides how it uses its members' information and is responsible for using it lawfully.
  • Ekora staff: a small number of authorised staff can see account and content information when needed to run the service, review reports, investigate abuse or answer your requests.
  • Others, when required: we may share information if the law requires it, to protect people's safety, or to enforce our Terms of Service. If Ekora or Ecclerium is reorganised, merged or sold, your information may pass to the new owner under this policy.

5. Service providers

We use these providers to run Ekora. They process information only to provide their service to us:

  • Hetzner: the servers that run Ekora's backend and database.
  • Cloudflare: hosting Ekora on the web, delivering traffic to our servers, and storing and serving images.
  • Monnify: processes card and transfer payments when you give, under its own privacy policy.
  • Google: Continue with Google sign-in; database backups (Google Cloud Storage); and the web fonts Ekora displays.
  • Email delivery: our email provider sends account and notification emails.
  • SMS: BulkSMS Nigeria or eSMS Africa, only when a text-message code is needed to confirm a change to a verified phone number.
  • Open-Meteo: turns a town or city you type on the Events page into a place on the map. Only the text you type is sent.
  • YouTube, Vimeo and Facebook: when a church shares a video from one of these sites, the video's preview picture may load from that site, and the video itself loads from it when you press play. These sites have their own privacy policies.

6. On your device

Ekora keeps some information in your browser's storage or on your phone so it works properly: your sign-in session (on the web this includes cookies shared across Ekora's own addresses, so you stay signed in on church pages), your Bible reading position, downloaded Bible translations, your verse highlights and notes, your chosen place on the Events page, and display settings. Your verse highlights and notes stay on your device and are not sent to us. Bible search runs on your device. We do not use advertising or tracking cookies.

7. How long we keep it

  • Your account: while it is open. See Deleting your account for what happens after.
  • What you post (including messages and group posts): until you or the church delete it, or your account is deleted and you ask us to remove it. Deleted content is removed from Ekora straight away, but may remain in our systems for a time before it is erased.
  • Backups: our database backups are kept for 7 days.
  • Sign-in security records: 12 months.
  • Giving records and receipts: for as long as tax and accounting law requires, even after you delete your account.
  • Church records (membership history and the record of leaders' actions): while the church uses Ekora, so the church can account for what was done.

We may keep information longer where the law requires it or to deal with a dispute.

8. Deleting your account

To delete your Ekora account, email admin@ecclerium.com from the email address on your account, or delete it from your account settings, when available. When we delete it, you can no longer sign in, and we erase the name, email address, phone number and photo on your account.

Comments, questions, answers and testimonies you posted, and copies of your details in churches' membership records, are not removed automatically. Tell us when you ask to delete your account if you want them removed too, or delete your posts and leave your churches first. Giving records are kept as required by law.

9. Your rights

Under the Data Protection Act 2023 you have the right to:

  • access the personal data we hold about you;
  • correct it if it is wrong (you can change your name and phone number in your profile);
  • delete it;
  • object to, or ask us to restrict, how we use it;
  • withdraw consent where we rely on it;
  • receive it in a portable format, or have it sent to another service;
  • not be subject to decisions made only by automated means that significantly affect you (Ekora makes no such decisions).

To use these rights, email admin@ecclerium.com. We may need to confirm who you are first. We will answer within 30 days. For information a church holds about you as its member, you can also ask the church.

If you are unhappy with how we handle your data, please tell us first so we can put it right. You also have the right to complain to the Nigeria Data Protection Commission (ndpc.gov.ng).

10. Security

We protect your information with encrypted connections (HTTPS), hashed passwords, access limited to the people who need it, and records of sign-ins and church actions. No service is perfectly secure, so please use a strong password that you do not use anywhere else. If a breach puts your rights at risk, we will tell you and the Nigeria Data Protection Commission as the law requires.

11. Children

You must be at least 13 years old to create an Ekora account. If you are under 18, you need the permission of a parent or guardian. We do not knowingly collect information from children under 13. If you believe a child under 13 has an account, email admin@ecclerium.com and we will delete it.

12. International transfers

Some of our providers store or process information outside Nigeria, for example our servers with Hetzner, our backups with Google, and Cloudflare's worldwide network. When we transfer personal data out of Nigeria, we do so as the Data Protection Act 2023 allows, relying on adequate protection in the receiving country, contractual safeguards with the provider, or another lawful basis.

13. Changes to this policy

We update this page when Ekora changes; the date above shows the latest version. If a change matters, we will tell you in Ekora or by email before it takes effect.

14. Contact us

Ecclerium Limited (RC 1771066), Nigeria.
Email: admin@ecclerium.com