KavLyfe Privacy Policy

This Privacy Policy explains what personal data KavLyfe collects, how we use it, who we share it with, and the choices you have. It applies to the KavLyfe website, mobile app, search engine, and APIs, and to the family of first-party apps offered under the KavLyfe name (video, music, events, devotional, and short-form video).

This Privacy Policy is governed by:

• Nigeria Data Protection Regulation (NDPR), 2019
• NITDA Guidelines for Data Protection Compliance
• Applicable Nigerian laws relating to electronic transactions and consumer protection

NDPR Core Principles (Part 2, NDPR). Under the NDPR, personal data must be:

• Collected lawfully, fairly, and transparently
• Used only for specific, legitimate purposes
• Adequate, relevant, and limited to what is necessary
• Accurate and up to date
• Stored securely
• Retained only as long as necessary

We structure our systems and policies to comply with these principles.

This Policy applies to:

• Anyone searching or browsing content on the Platform, whether or not they create an account
• Registered users of the Platform and its first-party apps
• Visitors to our website or app
• Anyone interacting with our services, including submitting a content report

2.1 Account and identity data

• Name, email address, and authentication credentials, collected through third-party authentication service providers (email/password, Google, or Apple sign-in).
• Basic profile information you choose to provide.

2.2 Search and usage data

• Search queries you submit, and which results you click on, used to operate and improve search ranking.
• Device, browser, and IP address information, collected automatically.
• App usage analytics collected through third-party analytics service providers (e.g. searches performed, content viewed, whether a redirect to a third-party app succeeded).

2.3 Content reports

If you report or flag a piece of indexed content, we collect the content identifier, your reason for the report, and, if you are signed in, your account identifier, in order to review the report.

2.4 Third-party indexed content

KavLyfe operates a search engine that indexes publicly available gospel-related content from across the web, in addition to content from our own first-party apps. Indexed third-party content (titles, descriptions, thumbnails, and links back to the original source) is not personal data belonging to our users, and is processed solely to provide search functionality. See Section 5 for more on how we handle third-party content.

• To provide, operate, and maintain the Platform, including search, ranking, and content indexing.
• To detect, prevent, and investigate fraud, abuse, spam reports, and security incidents.
• To comply with legal obligations, including responding to copyright takedown notices.
• To communicate with you about your account, service changes, and (where you've opted in) product updates.

Legal Basis (NDPR Part 2.2): Processing is based on:

• User consent
• Contractual necessity
• Legal obligation
• Legitimate business interests

We share data only as necessary to operate the Platform:

• Third-party service providers: hosting, search, caching, content delivery, email, analytics, and related infrastructure vendors that host and process data on our behalf under their own data-processing terms.
• Legal and safety: where required by law, legal process, or to protect the rights, property, or safety of KavLyfe, our users, or the public.

KavLyfe does not sell personal data.

KavLyfe's search results include content hosted by third parties across the open web. When you click a third-party result, depending on whether the corresponding app is installed on your device, you may be redirected to that third-party app, or the content may load within an in-app browser inside KavLyfe. KavLyfe does not control, and is not responsible for, the privacy practices of third-party websites or apps you visit through search results. We encourage you to review the privacy policy of any third-party site or app before providing it with personal data.

We retain account data for as long as your account is active and as needed to comply with legal obligations thereafter. Search logs and analytics are retained for a limited period to support ranking and product improvement, then deleted or anonymized, unless a longer period is required for a specific legal, security, or dispute-related purpose. Content reports are retained long enough to support review and, where relevant, repeat-source tracking.

Depending on where you live or are established, you may have some or all of the following rights regarding your personal data. Not every right applies in every jurisdiction; where a specific law does not grant a right listed below, KavLyfe will still make reasonable efforts to honor the request where feasible, but is only legally required to do so where applicable law provides for it.

7.1 Rights generally available

• Access - request a copy of the personal data we hold about you.
• Correction - request that we correct inaccurate or incomplete data.
• Deletion - request that we delete your personal data, subject to legal or security retention obligations described in Section 6.
• Portability - request your data in a structured, commonly used format, where technically feasible.
• Objection / restriction - object to, or request that we restrict, certain processing, including for direct marketing.
• Withdraw consent - where processing is based on your consent, withdraw it at any time without affecting processing already carried out.

7.2 Region-specific rights

• European Economic Area, United Kingdom, and Switzerland (GDPR/UK GDPR): you have the right to lodge a complaint with your local data protection authority, and the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects, where applicable.
• California and other U.S. states with comprehensive privacy laws (CCPA/CPRA and equivalents): you have the right to know what personal data is collected, sold, or shared; the right to opt out of sale or sharing (KavLyfe does not sell personal data); the right to limit use of sensitive personal data; and the right not to receive discriminatory treatment for exercising these rights.
• Nigeria (NDPA / NDPR): you have the right to be informed of the purpose of data processing, to withdraw consent, and to request deletion or anonymization of your data where it was collected or processed unlawfully.
• Brazil (LGPD), Canada (PIPEDA), and other jurisdictions with similar frameworks: you have equivalent rights of access, correction, deletion, and portability, and the right to information about with whom we have shared your data, to the extent required by applicable law.

Where your jurisdiction is not specifically listed above, the general rights in Section 7.1 apply, and KavLyfe will assess and respond to your request in line with any locally applicable law.

7.3 How to exercise your rights

To exercise any of these rights, contact [email protected]. We may need to verify your identity before processing certain requests. We will respond within the timeframe required by the law applicable to you; where no specific timeframe is legally mandated, we aim to respond within 30 days.

Because KavLyfe's infrastructure providers operate globally, your data may be processed in countries other than your own. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for such transfers.

We use industry-standard safeguards, including encrypted transport, access controls, and secrets management, to protect personal data. No system is completely secure, and we cannot guarantee absolute security.

KavLyfe is a gospel content search platform intended to be usable by people of all ages, including minors accompanied by or under the guidance of a parent or guardian. We do not knowingly collect more personal data from a child than is necessary to provide the Service, we do not use children's data for targeted advertising, and account creation by a child under the age required by applicable local law requires the involvement or consent of a parent or guardian. A parent or guardian who believes their child has provided personal data beyond what is necessary may contact [email protected] to request its review or deletion.

We may update this Privacy Policy from time to time. Material changes will be notified via email or an in-app notice before taking effect.

Questions about this Privacy Policy, or requests to exercise your data rights, can be sent to [email protected].

By using the Platform, you acknowledge that you have read, understood, and agreed to this Privacy Policy.