Privacy Policy

Account information. When you register, we collect your name, email address, phone number (optional), and the church or organization you are affiliated with. Church administrators additionally provide church name, address, and tax identification information.

Profile information. Members may optionally provide a profile photo, date of birth (for birthday features), ministry role, and spiritual gifts.

Transaction data. When you process online tithes or donations through Kaleio, payment information (card details, bank account details) is submitted directly to Stripe. We do not store full card or bank account numbers. We do retain transaction records including amounts, dates, fund designations, and donor identifiers for giving history, receipts, and annual statements.

Ministry activity. We collect data generated through your use of Kaleio features, including prayer requests, testimonies, event RSVPs, attendance check-in records, sermon notes, devotional progress, Bible reading plan progress, group memberships, and points activity.

Communications. If you contact our support team, we retain the contents of that correspondence.

Device and usage data. We automatically collect certain technical information including IP address, browser type, device identifiers, pages visited, and session duration. This is used for security, analytics, and platform improvement.

Push notification tokens. If you enable push notifications on your device, we store your device token to deliver notifications. You may revoke notification permissions at any time in your device settings or notification preferences within the app.

We use collected information to:

• Operate, maintain, and improve the Kaleio platform
• Facilitate communication within your church community (prayer requests, announcements, group messages)
• Process online giving and deliver giving receipts and annual tax statements
• Send push notifications, emails, and SMS messages you have opted into
• Enable attendance tracking, check-in, and volunteer scheduling
• Provide pastoral care tools and private care request routing to your church leaders
• Administer the points and leaderboard system
• Respond to support inquiries and scholarship applications
• Detect and prevent fraud, abuse, or unauthorized access
• Comply with applicable law, including financial reporting obligations

We do not use your information to serve you third-party advertisements. We do not sell your personal data to any third party.

Within your church. Church administrators and designated leaders can access member profile data, attendance records, giving summaries (amounts, not card details), care request content, and ministry activity within their organization. This access is a core function of the platform and is disclosed at onboarding.

Service providers. We share data with trusted third-party vendors who process it only on our behalf, under contract, and only as necessary to provide services. These include:

• Stripe — payment processing (subject to Stripe's own privacy policy)
• Google Firebase / Firestore — database and real-time infrastructure
• Twilio — SMS messaging
• Google FCM — push notifications
• Vercel — web hosting and edge delivery

Legal obligations. We may disclose information if required by applicable law, subpoena, court order, or to protect the rights and safety of Kaleio, its users, or the public.

Business transfers. If Kaleio is acquired, merged, or its assets are transferred, member data may be transferred as part of that transaction. We will notify affected users before any such transfer and give them the opportunity to delete their account.

We do not share personal data with third parties for their own marketing or advertising purposes.

The child check-in feature of Kaleio is designed for use by church administrators and authorized parents or guardians to manage child attendance during services. We collect limited information about children (name, date of birth, guardian information, allergies or medical notes where entered) strictly for the purpose of safe child care and check-in.

Kaleio does not create accounts for children under the age of 13, does not knowingly collect personal information from children under 13 without verifiable parental consent, and does not use child data for any purpose other than the immediate check-in and safety functions. If you believe we have collected information about a child under 13 improperly, please contact us immediately at support@kaleio.app.

Youth ministry accounts for teens (ages 13–17) may be created with parental consent. Account creation for minors requires a parent or guardian to agree to these terms on the minor's behalf.

We retain your personal data for as long as your account is active or as needed to provide you services. Church administrators may delete member records within the platform at any time.

Financial records (giving history, transaction records) are retained for a minimum of 7 years for tax and legal compliance purposes, even after account closure.

When you delete your account, we will delete or anonymize your personal profile, prayer requests, testimonies, and activity data within 30 days. Financial transaction records will be retained for the legally required period.

Depending on your location, you may have the following rights regarding your personal information:

• Access. Request a copy of the personal data we hold about you.
• Correction. Request correction of inaccurate data.
• Deletion. Request deletion of your account and associated personal data, subject to legal retention requirements.
• Portability. Request an export of your data in a structured format.
• Objection. Object to certain processing activities.
• Opt-out of communications. Unsubscribe from email communications at any time using the unsubscribe link in any email we send, or by adjusting notification preferences in the app.

To exercise any of these rights, email us at privacy@kaleio.app or through the contact form at kaleio.app/contact. We will respond within 30 days.

California residents have additional rights under the California Consumer Privacy Act (CCPA). EU/EEA residents have rights under the General Data Protection Regulation (GDPR). We honor these rights globally.

We use session cookies and local storage to maintain your authenticated session. We use analytics cookies to understand how the platform is used in aggregate. We do not use third-party advertising cookies or cross-site tracking.

You may disable cookies in your browser settings. Disabling essential session cookies will prevent you from logging in to the platform.

We take reasonable technical and organizational measures to protect your information against unauthorized access, loss, or misuse. These measures include encryption in transit (TLS), Firebase security rules enforcing data access controls, role-based access control (RBAC) for administrator functions, and regular security reviews.

No system is perfectly secure. If you believe your account has been compromised, change your password immediately and contact support@kaleio.app.

Our platform may link to external sites (e.g., streaming platforms, book vendors, Amazon affiliate links). These third parties have their own privacy policies. We are not responsible for their practices.

The Kaleio Books feature may include Amazon affiliate links. When you click these links, Amazon may set cookies. We earn a small commission on qualifying purchases at no additional cost to you.

Kaleio is headquartered in Dallas, Texas, United States. Your data is processed and stored on servers in the United States. If you are accessing Kaleio from outside the United States, your information may be transferred to and processed in the US, which may have different data protection laws than your home country. By using Kaleio, you consent to this transfer.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by displaying a notice within the platform at least 14 days before the changes take effect. The "Last updated" date at the top of this page reflects the most recent revision. Your continued use of Kaleio after the effective date constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or our privacy practices, please contact us: