J Platform

J Platform — Privacy Policy

Effective date: 19th September 2026 Last updated: 19th September 2026

1. Who we are

J Platform ("J," "we," "us") is a church management and discipleship platform operated by JPlatform Ecosystems Ltd, a company registered in Nigeria (RC 9817155), with its registered office at 57 Jubril Martins, Surulere, Lagos, Nigeria. J provides software that churches ("Church Partners," "tenants") use to manage membership, attendance, giving, pastoral care, and discipleship for their own congregations.

2. How J and your church share responsibility for your data

There are three distinct relationships in how your information is handled, and they matter because they determine who you should contact for what.

Your church and its members. Your church decides why it collects and uses information about its own congregation — membership records, attendance, pastoral care, giving, and communications. Your church is the data controller for this congregation data; J is the data processor, providing the technology your church uses, acting on your church's instructions.

J and your church. J processes congregation data on behalf of and under the instruction of your church, subject to the terms of our agreement with your church.

J acting independently. For a narrower set of purposes, J determines its own purposes for processing and acts as the controller directly — specifically: your J account credentials and login security, platform security logs, support communications you have directly with J, and payment transaction records necessary for J's own billing and compliance obligations.

3. Information we collect

From church administrators and leaders

Name, email, phone number, role/rank within the church hierarchy, and login credentials.

From congregation members (entered by church administrators or cell leaders)

cell/zone/branch assignment, and membership status.

including QR check-in data (which section you checked into and when).

giving fund selected. See Section 7 for how the payment itself is handled.

a new birth) logged by a cell leader after a personal conversation with the member — never entered by the member themselves, and visible only to the pastoral roles the church configures.

tracking, used to help churches follow up with members who may be disengaging.

From use of the mobile app and member portal

Device and app usage information, IP address, and standard technical logs needed to operate the service securely.

From the website

J's marketing website does not use analytics, tracking scripts, or third-party cookies of any kind. The only cookie J sets is described in Section 15.

4. Sensitive personal information

Some information processed through J may be considered sensitive (or "special category") personal data under applicable data protection law. Depending on how your church uses J, this can include information revealing religious belief or affiliation (implicit in membership at a church) and health information contained in pastoral-care records (such as an illness noted in a pastoral care entry) or, where used, in WordLight conversations.

J applies access controls designed to limit this information to the roles your church configures, and processes it only for the purposes described in this policy and, where J acts as a processor, under your church's instructions. See Section 8 for how access is restricted, and Section 6 for WordLight specifically.

5. How we use information

We use the information described above to:

WhatsApp where your church has configured that channel

We do not use member data to serve advertising, and we do not sell personal data to third parties.

6. WordLight and AI processing

WordLight is J's AI-assisted Bible study and discipleship companion.

What happens to your WordLight conversations. Your messages and WordLight's responses are stored, in full, so that your conversation history is available to you across sessions.

Who can see them. Only you. Church administrators and pastoral leaders cannot read the content of your WordLight conversations — they can see only aggregate usage information (for example, that WordLight is being used, and by roughly how many members), never what was said.

How long conversations are kept. For as long as your account is active. If you delete your J account, your WordLight conversation history is permanently deleted as part of that process — not merely disconnected from your name.

Sent to our AI provider. To generate a response, your message, your recent conversation history, and a system prompt (built from your church's own doctrinal statement and approved teaching materials) are sent to Anthropic, the AI provider J uses. We do not send your name, member ID, or email address as part of this request. What we can state directly: J does not use your WordLight conversations to train or fine-tune any AI model. Our AI features are built by giving the AI relevant context at the time of your question (your church's approved materials), not by training on member conversations.

If a conversation suggests you may be in genuine personal distress, WordLight responds by showing you local crisis-support resources directly. A church leader is only ever notified if you choose to share that with them — never automatically, and never based on what you said. If you do choose to notify a leader, only the fact that you asked for support and when is shared — not the content of your conversation.

Sermon and teaching content. Audio and video sermon uploads are transcribed using OpenAI, and text is processed for search and retrieval using Voyage AI.

7. Giving and payment processing

Giving and offerings made through J are processed by Paystack, a licensed Nigerian payment service provider.

When you make a payment, you enter your payment details (card or bank transfer information) directly on Paystack's own hosted payment page or secure in-app component — this information is never entered into, or stored by, J's own servers. We verified this directly: no J system, frontend or backend, collects or transmits raw card or bank account details anywhere in the platform.

What J retains is the transaction record: the amount, date, fund designation, payment status, and Paystack's own transaction reference — necessary for your church's financial records.

8. Who can access your information

J is built so that visibility follows your church's actual leadership structure:

finance-cleared leadership roles your church designates. Pastors can see that a member has given, but not the amount. Cell leaders cannot see giving information.

church's structure grants access to.

Section 6).

of other churches through the J Platform. J maintains technical controls designed to enforce this separation at the data-access layer — each church's data is scoped at the database level on every request.

9. Service providers and subprocessors

J uses the following trusted service providers to operate the platform. Each processes personal data only as necessary to provide their service to J.

| Provider | Purpose | |---|---| | Hetzner Online GmbH | Hosting, compute, and storage (Nuremberg, Germany) | | Anthropic | WordLight AI tutor, crisis-support detection, sermon and devotional drafting assistance | | OpenAI | Audio/video transcription for sermon and teaching content | | Voyage AI | Text search/retrieval for teaching materials | | Paystack | Payment processing | | Resend | Transactional email (password resets, invitations, giving confirmations, account deletion) | | Meta / WhatsApp Business Platform | Messaging, where your church has enabled WhatsApp communication |

10. International data transfers

J is based in Nigeria. Our production systems — including the database holding your information and its backups — are hosted in Nuremberg, Germany, within the European Union.

J's services are built for, and marketed toward, Nigerian churches and their diaspora communities. J does not currently market or specifically offer its services to individuals in the United Kingdom or European Union. Members of Nigerian churches who happen to live in the UK, US, EU, or Canada may still use J as part of their church's community, in the same way any global product may have some users anywhere.

Our other service providers (Section 9) may process data in their own jurisdictions; each publishes its own data processing and transfer terms.

11. Data retention

| Data | Retention | |---|---| | J account (credentials) | Until you request deletion (Section 12) | | Membership, attendance, pastoral care records | Determined by your Church Partner | | Giving transaction records | Retained for church financial/legal record-keeping | | WordLight conversations | Until you request account deletion, at which point they are permanently deleted | | Discipleship journey / pastoral progression records | Retained as part of your church's pastoral record | | Security and support logs | Retained for a limited operational period | | Database backups | Retained on a rolling basis, described in our internal backup procedures |

12. Requesting deletion

You can request deletion of your J account in two ways:

email associated with your account and follow the confirmation link sent to you.

Once confirmed, your account is scheduled for deletion 30 days later. You can cancel using the link in the confirmation email during this window.

What deletion actually does. After the 30-day window:

fields) is permanently removed.

attendance, giving transactions, and pastoral care history — are retained by your church as part of its own records, with your personal identifiers removed from them where technically possible. This is because your church, not J, is generally the controller of its own congregational records — deleting your J account does not require your church to delete its own historical records of your membership, in the same way leaving a church doesn't erase that you were once a member of its community.

you) rather than removed, since it may already have been seen and engaged with by other members.

If you are a founding administrator of a church account, you'll need to transfer that role to another administrator first (Settings → Account Administrators → Transfer founding role), or contact support@contact.jplatform.church for help.

If you created a separate, self-service Bible-reading account (for saving highlights and reading progress, not a church account), it can be deleted immediately and permanently — including all reading progress, highlights, and notes — either in the app (Account → Delete my account) or at jplatform.church/delete-account; as with any deletion under this section, a copy may briefly persist in rolling database backups (Section 11) until it ages out.

13. Your privacy rights

If you are in Nigeria, you have rights under the Nigeria Data Protection Act 2023, including rights to access, correct, and request deletion of your personal information, and to object to certain processing.

If you are in the UK or EU and use J as a member of a Nigerian church's community, you may have rights under UK GDPR / EU GDPR, including the right to access, correct, erase, restrict, or port your data, and to object to processing. Contact us using the details below and we will address your request under the applicable framework.

For information your church controls (membership, attendance, pastoral care, giving records), contact your church administrator first — they are best positioned to act on the request and are the data controller for this information.

For information J controls directly (your account credentials, security logs, WordLight data, or support interactions), contact support@contact.jplatform.church.

14. Children's data

J's system does not currently include an age-verification step on account creation. We are working to add one. As of the date of this policy, no account in J's core church-management system is linked to a member record indicating an age under 18 (verified against production data). J also offers a separate, self-service Bible-reading account that lets someone save highlights and reading progress; this account type requires a date of birth at signup and does not permit self-service creation of an account for anyone under 13. Reading Scripture itself never requires an account, of any age.

Church Partners may, in the ordinary course of maintaining their membership records, include information about minors as part of family or household records (for example, noting that a member has children). Responsibility for obtaining any legally required parental or guardian consent for recording a minor's information rests with the Church Partner, as the controller of its own congregation records.

If you believe a minor has created an account, or if you are a parent or guardian with a concern about a child's account, please contact support@contact.jplatform.church and we will address it promptly.

We are actively reviewing whether and how to support children's/youth ministry data more directly, and this section will be updated once that decision is finalized.

15. Cookies and analytics

J's website and admin platform do not use analytics, advertising, or tracking cookies of any kind. We verified this directly: no third-party scripts, tracking pixels, or analytics tools are loaded anywhere on our website or admin platform.

The only cookie J sets is a single, strictly necessary session cookie (jp_refresh) used to keep you signed in to the web admin platform. It is httpOnly (not readable by any script), secure (only sent over an encrypted connection), and used solely to maintain your login session — never for tracking or advertising. The J mobile app does not use cookies at all.

16. Automated decision-making

J does not make decisions that produce legal or similarly significant effects on you solely through automated processing. Engagement information (such as attendance or WordLight usage patterns) is used to support your church's own follow-up decisions by human leaders — it does not automatically determine your access to, or status within, the platform or your church.

17. Security and data breaches

We use technical and organizational measures designed to protect your information, including encryption of data in transit and database-level isolation between churches (Section 8).

No system is completely secure, and we cannot guarantee absolute security. If J becomes aware of a security incident affecting your personal data, we will investigate, take reasonable steps to contain and remediate it, and provide notifications required by applicable law and our agreements with Church Partners.

18. Changes to this policy

We may update this policy from time to time. If we make material changes, we will post the updated policy here with a new effective date.

19. Contact us

Email: support@contact.jplatform.church Registered office: JPlatform Ecosystems Ltd, 57 Jubril Martins, Surulere, Lagos, Nigeria (RC 9817155)