Privacy Policy

This policy explains how Christ WonderFamily Ministries (“CWFM”, “we”, “us”) handles personal information on cwfm.church and in the CWFM Leadership app used by our pastors, leaders and staff.

We follow Ghana's Data Protection Act, 2012 (Act 843). We collect only what we need to care for people, run our services and keep in touch, and we never sell personal information.

You can read devotionals, see events and find a branch without giving us any personal information.

• Contact form and salvation prayer response: these open WhatsApp with your message ready to send. Nothing is saved on our website; what you send arrives in our WhatsApp like any other chat.
• Event registration (RSVP): your name, phone number and how many people are coming, so we can prepare and reach you about the event.
• Meeting check-in (cwfm.church/checkin): the meeting code and your phone number, used only to mark you present at your cell meeting. We keep a short record of attempts to stop people guessing codes.
• Sermons and maps: videos are played from YouTube (privacy-enhanced mode) and maps from Google Maps. Google may set its own cookies when you play a video or use a map.

We do not use advertising or tracking cookies.

To care for our church family, leaders keep records in the CWFM Leadership app:

• Members: name, phone, email (optional), birthday, area or address, the dates you joined, were born again and baptised, the ministries you serve in, and short pastoral notes.
• Attendance: which cell meetings and events you attended, and headcounts for services.
• Follow-up: calls, visits and prayer contacts, with brief notes.
• New converts: name, phone, the date and outreach where you gave your life to Christ, whether you are under 18, whether you agreed to receive messages, and the location where the record was made.

Only the leaders responsible for you can see your record: your cell leader sees their own cell, a bacenta leader their bacenta, a branch pastor their branch, and a small number of church-wide staff the whole church. Notes are never shown publicly.

• Account details: name, email, phone, role, branch, bacenta or cell, and when you last signed in. If you use “Continue with Google”, Google shares your name and email address with us; we receive nothing else from your Google account.
• Activity log: important changes (for example publishing a devotional or changing an account) are recorded with who made them and when, for accountability.
• Mission check-in: when you check in at a mission visit, your location, how accurate it was and the time are recorded to confirm the visit. Location is read only when you tap the check-in button; we do not track you in the background.
• Mission photos: group photos taken with the school's permission. Students are never named or tagged, and the photos are kept private to the mission team unless approved for publishing.
• SMS credits and payments: your credit balance, top-ups and messages sent. Online payments are handled by Paystack; we never see or store card or Mobile Money PINs.

• To care for members and new converts: follow-up calls, visits, prayer and welcoming them into a cell.
• To send text messages: meeting reminders, event notices, welcome messages to new converts who agreed to receive them, and replies.
• To run services, events and missions, and to understand attendance and growth across our branches.
• To let staff sign in securely and to keep the system safe.

New converts receive a welcome text only if they agreed to it when their details were recorded, and never if they are under 18. Members may receive messages from their own leaders about church life.

To stop receiving messages, tell your leader or contact us, and we will stop.

We use trusted services to run the website and app. They process information only to provide their service to us:

• Supabase: secure database, sign-in and file storage.
• Vercel: hosts the website.
• Arkesel: delivers our text messages in Ghana.
• Paystack: processes online payments for SMS credits.
• Google: “Continue with Google” sign-in, YouTube videos and Google Maps.
• OpenRouter and Google Gemini: help format the text of daily devotionals before they are published. Only the devotional text is sent, never members' information.

Some of these services store data outside Ghana. We choose providers that protect data with strong security. We share information with authorities only when the law requires it.

• Information travels over encrypted connections (HTTPS).
• Each account sees only the records its role allows; this is enforced by the database itself, not just the app.
• Accounts are created only by church leadership; nobody can sign up on their own.
• On phones, the app can be locked with a PIN or fingerprint, and signing out removes the data saved on that device.

• Member records are kept while you are part of the church. When someone leaves, their record is archived and can be deleted on request.
• Attendance, SMS credit records and the activity log are kept as church records for accountability.
• Event registrations are kept for the event and our planning, and can be deleted on request.
• Devices: the app keeps a copy of recent portal data on the phone for up to 7 days so it works offline.

Under the Data Protection Act, 2012 you can:

• ask what information we hold about you and get a copy;
• ask us to correct anything that is wrong;
• ask us to delete your information, or to stop using it for messages;
• complain to the Data Protection Commission of Ghana (dataprotection.org.gh) if you are unhappy with how we handled it.

Speak to your leader or contact us. We will respond within 21 days.

Children's church and youth activities are run with parents' knowledge. We do not send text messages to anyone recorded as under 18, and a parent or guardian can ask us at any time to see, correct or delete a child's information.

If we change how we handle personal information, we will update this page and the date at the top.