Privacy Policy

Each church is the controller of the records it captures in ChERP. Appetite Technology operates the platform as a processor and only handles church data to run the service, provide support, and meet legal obligations.

• Account details for staff users: name, email address, role and sign-in activity.
• Member records your church captures: contact details, family links, group membership and attendance.
• Pastoral notes and counselling requests, which are restricted to pastoral roles.
• Financial records: giving, pledges, expenses and supporting documents.
• Technical logs needed to keep the service secure and available.

Pastoral notes, counselling records and background-check outcomes are never visible to finance-only roles. Access rules are enforced in the database itself, not just in the interface, and sensitive views are recorded in the audit log.

Data is stored in managed cloud infrastructure with encryption in transit and at rest. Churches set their own audit-log retention window in Settings. When a church closes its account we delete or return its records within 30 days, except where South African law requires us to retain financial records for longer.

We do not sell personal information. We share data only with the service providers needed to operate ChERP, such as our cloud hosting and database provider, payment processors for giving and subscriptions, and messaging providers where your church enables WhatsApp or email sending.

Members may ask their church for a copy of their record, request corrections, or ask to be removed. Church administrators can action these directly in ChERP. If you need our help, email admin@cherp.co.za and we will respond within 30 days.

Email admin@cherp.co.za with the details. Please do not include member personal information in your first message.