Last updated: April 4, 2026
ChurchKoala ("ChurchKoala," "we," "us," or "our") provides software and related services that help churches manage people, teams, groups, communications, and public-facing websites across web and mobile experiences (collectively, the "Services"). This Privacy Policy explains how we collect, use, disclose, retain, and protect information when you access or use the Services.
When a church, ministry, or its administrators upload or manage member, visitor, team, or website data in the Services ("Customer Data"), that organization generally decides what data to collect and how to use it. In those cases, the church or organization is generally the controller or business, and ChurchKoala acts as its processor or service provider. For information we collect directly about our own relationship with you, such as account, support, billing, security, and product-usage information, ChurchKoala acts as the controller or business.
We use information to:
Where applicable law requires a legal basis for processing, we rely on one or more of the following: your consent, performance of a contract, compliance with legal obligations, and our legitimate interests in operating, securing, supporting, and improving the Services. Churches and organizations that use ChurchKoala remain responsible for their own legal bases and notices for Customer Data they submit to the Services.
We do not sell personal information for money. We may disclose information in the following circumstances:
We use cookies and similar technologies for login sessions, security, remembering preferences, and product analytics. We may use analytics tools that measure page usage, clicks, navigation flow, and feature engagement. We may also use session-replay or performance tools that help us diagnose bugs and usability issues. Those tools may capture interaction patterns such as page views, clicks, scrolling, and approximate session timing, and we may configure masking for certain sensitive fields.
You can control some browser-level cookies through your browser settings, but disabling them may impair functionality such as login, saved preferences, or workspace continuity.
Some features may use third-party AI providers to analyze text, transform content, suggest labels, summarize materials, or generate draft outputs. When you use those features, the data you submit for that feature may be shared with those providers as necessary to return the requested result. You should not submit sensitive personal information to AI-assisted features unless doing so is necessary, lawful, and permitted by your organization and applicable law.
Where churches use email announcement features, ChurchKoala sends those messages on behalf of the church from the platform’s mail-sending domain. You may sign up only through a church-provided signup link, and you can unsubscribe using the link in each email or as instructed in the product. Subscription state, delivery events (including bounces), and unsubscribe records are used to operate these features and honor opt-out requests.
Churches and administrators remain responsible for obtaining appropriate consent, providing any required notices, and complying with applicable laws for their messaging practices.
We retain information for as long as reasonably necessary to provide the Services, maintain business and tax records, resolve disputes, enforce our agreements, support security and fraud prevention, and comply with law. Retention periods vary based on the data type, the role the data plays in the Services, legal requirements, and whether a church or user continues to maintain an active account. We may also retain copies in backups and archives for a limited period after deletion.
We use reasonable administrative, technical, and organizational safeguards designed to protect information. No method of transmission, storage, or security control is completely secure, and we cannot guarantee absolute security. Churches and users are responsible for maintaining the confidentiality of their credentials, limiting admin access appropriately, and using the Services in a manner consistent with their own security obligations.
You may be able to update certain account information through the Services. You can opt out of non-essential promotional emails by using the unsubscribe link in those emails or by managing your subscription preferences in your account.
If your information was provided to ChurchKoala by a church or organization, you should direct most privacy requests to that church first because it often controls the Customer Data in the workspace. We may still assist where legally required or contractually appropriate.
Depending on where you live, you may have rights to request access to, correction of, deletion of, or restriction of certain personal information, or to object to or limit certain processing. We may need to verify your identity and authority before acting on a request.
If you are a California resident, you may have additional rights under the CCPA/CPRA, including rights to know, delete, and correct personal information, and to opt out of certain data sharing practices where applicable. ChurchKoala does not sell personal information for money, and we do not use customer directory data for third-party behavioral advertising.
ChurchKoala is based in the United States, and we or our service providers may process information in the United States and other countries where we or they operate. Those countries may have data protection laws that differ from the laws of your jurisdiction.
The Services are not directed to children under 13, and we do not knowingly collect personal information directly from children under 13 for our own purposes. If you believe we have done so, contact us and we will take appropriate steps.
Churches may choose to store information about minors, families, or other sensitive contexts in Customer Data. Those organizations are responsible for providing any required notices, permissions, and lawful basis for that processing. Unless we expressly agree otherwise in writing, the Services are not intended for storing highly sensitive data such as government identification numbers, payment card data, full bank account data, or protected health information subject to HIPAA.
We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the Last updated date above. If we make material changes, we may provide additional notice where required or appropriate.
Questions about this Privacy Policy or our privacy practices can be sent to support@churchkoala.com.