Privacy Policy

StGatherly (“StGatherly”, “we”, “us”, or “our”) is a church communications platform operated by Appnable Ltd, trading as Kokoodi. This Privacy Policy explains what personal data we collect, why we collect it, and the choices you have. It applies to our website, our web application, and the member portal we provide to churches.

We take the trust churches place in us seriously. Congregational data is often sensitive, and we treat it that way.

When you visit our marketing site or sign up for an account, we act as a data controller for your account information.

When a church uploads its contacts, members, and communications into StGatherly, that church is the data controller for its congregation’s data, and we act as a data processor on the church’s behalf. We only process that data to provide the service, following the church’s documented instructions.

Some of this data may be sensitive. Church membership can reveal religious belief, and children’s ministry records may include health, dietary, or safeguarding information. We treat such data as special category data and process it only on the church’s documented instructions, as its processor. Where we process personal data on a church’s behalf, that processing is also governed by our Data Processing Addendum.

Depending on how you use StGatherly, we may collect:

• Account data: name, email address, password (stored hashed), organisation name, and role.
• Congregation data: contact details, tags, giving records, attendance and check-in records, rota assignments, and other information a church chooses to store.
• Communications data: email campaigns, message content, templates, and delivery and engagement metrics.
• Usage data: how you interact with the app, device and browser information, and log data used to keep the service secure and reliable.
• Payment data: StGatherly is currently invitation only and we do not charge fees. If we introduce paid plans in the future, billing details will be processed by our payment provider and we will not store full card numbers.

We use personal data to:

• Provide, maintain, and improve the StGatherly platform.
• Send campaigns and notifications on behalf of a church to its contacts.
• Process payments and manage subscriptions.
• Provide support, respond to enquiries, and communicate service updates.
• Detect, prevent, and address fraud, abuse, and security incidents.
• Comply with our legal obligations.

Our lawful bases for processing include performance of a contract, our legitimate interests in operating the service, your consent (for example, cookies and marketing), and compliance with legal obligations.

Some features use AI to help you draft messages, generate content, and answer questions. When you use these features, the relevant content is sent to our AI providers solely to return a result to you. Our AI providers are contractually prohibited from using your data to train their models, though they may retain content briefly (typically up to 30 days) for security and abuse monitoring before deleting it. AI features are optional, the results are yours to review before use, and we recommend not submitting particularly sensitive information to them.

We do not sell personal data. We share it only with trusted service providers who help us run StGatherly, including hosting and infrastructure, email delivery, and AI providers. These providers are bound by contract to protect your data and use it only to provide their services to us. You can see the current list on our sub-processor page.

We may also disclose data where required by law, or to protect the rights, safety, and property of StGatherly, our users, or the public.

We retain personal data for as long as your account is active or as needed to provide the service. When a church closes its account, we delete or anonymise its data within a reasonable period, unless we are required to retain it to meet legal or accounting obligations.

We use technical and organisational measures designed to protect personal data, including encryption in transit, access controls, and logical separation between church accounts so that one church’s data is not accessible to another. No system is perfectly secure, but we work continuously to safeguard the information you entrust to us. You can read more on our Security & Trust page.

Depending on where you live, you may have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent at any time.

If a church holds your data as a member of its congregation, please contact that church directly, as it controls that data. For account data we control, contact us using the details below.

Our application runs in the United Kingdom and church data is stored in the United Kingdom. Some of our providers (for example, AI and messaging services) are based elsewhere, including the United States. Where we transfer data internationally, we use appropriate safeguards, such as the UK International Data Transfer Agreement or standard contractual clauses, to ensure your data remains protected. See our sub-processor page for where each provider is located.

We use cookies and similar technologies to keep you signed in, remember your preferences, and understand how the service is used. You can accept or decline non-essential cookies through the banner shown when you first visit, and manage cookies through your browser settings. For full details, see our Cookie Policy.

StGatherly supports children’s ministry features, including check-in, which may involve health, dietary, and safeguarding information. Where a church stores information about children, it does so as the controller and is responsible for establishing a lawful basis for that processing and for obtaining any necessary consent from parents or guardians. We process this data only on the church’s documented instructions, to provide the service.

We may update this Privacy Policy from time to time. When we make material changes, we will update the “last updated” date and, where appropriate, notify you within the app or by email.

If you have questions about this Privacy Policy or how we handle your data, please contact us:

• Email: hello@stgatherly.com
• Appnable Ltd (trading as Kokoodi), United Kingdom.