What you give us
Your email address, used to sign you in — or your Google account, if you sign in with Google.
Your first name, date of birth and gender, and where you live: your country, and your state and local government area in Nigeria or your town elsewhere.
Your phone’s time zone, so that daily and weekly allowances reset at your own midnight.
Your answers about faith, relationship intentions, family plans and lifestyle. These are the basis of matching.
Your favourite verse, your testimony, your answers to the Kingdom Questions, and where you stand on family matters such as family involvement, traditional and church weddings, bride price and money in marriage, if you choose to give them.
Your photographs, and anything you write in your profile or in messages.
Prayer requests you post, and what you and a match share on your Together page: your relationship stage, prayers, the Kingdom Journey and Bible Duel games.
Your location
If you allow it, we take your phone’s position when you open the app, round it to roughly a hundred metres, and store only the latest one. We re-check at most every fifteen minutes and only save a new position if you have moved at least half a kilometre. We keep no history of where you have been.
Your coordinates are never sent to another member. Distance is calculated on our server and sent as a rounded number, and anything under two kilometres is reported as two — so nobody can work out where you live from it.
If you do not allow location, distance is measured from the centre of the area you chose, which is far less precise and works perfectly well.
You can turn distance off entirely in Settings, and then it is not calculated at all.
Your photographs
Photographs are stored privately. They are never available at a public address — each viewing uses a link that expires within the hour, so a link copied out of the app stops working.
Profile photographs are visible to members you have not blocked. Photographs sent in a conversation are visible only to the two people in it.
Photographs are re-encoded when you upload them, which removes the hidden data cameras attach — including, importantly, the GPS coordinates of where the photograph was taken.
We also keep a tiny copy of your main photograph, 24 pixels wide. It is too small for a face to be recognised in, and it is what members who have not subscribed see, blurred, when you like them.
A verification selfie is stored separately, in a place no member can read, and is deleted the moment a moderator has made a decision on it. It is never shown to other members.
What other members can see
Your first name, age, area, photographs, and the profile answers you gave.
An approximate distance, unless you have turned it off.
Members you have matched with see whether you are online and when you were last in the app. This is on unless you turn it off in Settings, and turning it off also hides theirs from you.
Whether you have read their messages, unless you turn read receipts off in Settings.
They never see your email address, your exact date of birth or your coordinates.
If you like somebody who does not subscribe, they are sent only your first name, your age and the tiny blurred copy of your main photograph. Your profile and your photographs are withheld by our server, not merely hidden by the app, unless they subscribe or you match.
Messages
Messages are stored so they can be delivered and so you can read them again.
They are automatically checked for the patterns used in romance scams — requests for money, investment and cryptocurrency offers, requests for bank details or passwords. When one is found you are shown a warning and the message is recorded for a moderator to review. Nothing is blocked or deleted by this check.
You can edit a message for fifteen minutes after sending it, or delete it for both of you. The original is kept where no member can read it, so that a moderator reviewing a report can see what was really sent. It is deleted with your account.
A moderator reads messages only when reviewing a report or a flag. We do not read conversations otherwise.
Who else sees your data
Supabase hosts our database, files and sign-in.
Google signs you in, if you choose to sign in with Google.
Resend delivers our emails: sign-up codes, password resets and notices about your account.
Expo and Google Firebase deliver push notifications. A notification tells your phone that something happened; it does not carry your conversations.
RevenueCat processes subscription purchases on our behalf and tells us whether a subscription is active. It receives your account identifier, never your card details.
Google Play handles subscription payments. We never see or store your card details.
We do not sell your data, and we do not share it for advertising.
How we learn what to improve
We record a few facts about how the app is used: that it was opened, how far somebody got through sign-up, and which screens were looked at. Never the content of a message, and never anything you typed.
These records say who did something, never who it was done to. When you delete your account they are kept without your name.
How long it is kept
While your account is open, we keep your profile so the app works.
When you delete your account, your name, photographs, biography, location, date of birth, preferences, profile answers, testimony, Kingdom Questions answers and prayer requests are erased immediately, and every match closes.
Thirty days after you delete your account, your login and everything still attached to it — including the messages you sent — are permanently deleted. The thirty days exist so that a deletion made by mistake, or in the middle of a dispute, can still be looked at. Nothing of yours is visible to anybody during them.
Reports and moderation records are kept longer, because a record that disappears when the reported person leaves protects the wrong person.
Records of subscription purchases are kept for as long as accounting law requires.
Your rights
You can see and correct your information in the app at any time.
You can delete your account in Settings, without asking us.
You can ask us for a copy of your data, or ask us to erase it, at support@kingdompair.com.ng.
Nigeria’s Data Protection Act gives you these rights, and we honour them wherever you live.
If you live in the UK or the European Union
The UK GDPR and the EU GDPR give you the rights above, and also the right to object to how we use your information, to ask us to restrict it, and to take a copy with you in a common format.
We use your information to provide the service you signed up for. Your faith is sensitive information under these laws, and we use it only because you choose to give it to us for matching. You can change or remove it at any time in your profile.
If you are unhappy with how we have handled your information, you can complain to the Information Commissioner’s Office in the UK or to the data protection authority where you live in the EU. We would rather hear from you first, at support@kingdompair.com.ng.
Where your information is stored
The providers listed above run data centres that may be in a different country from you. When information about members in the UK or the EU leaves those places, it is protected by the data protection contracts those providers offer under UK and EU law.