BCOK Connect · Baptist Church of Kenya, Midrift Region
Last updated: September 12, 2026
BCOK Connect is operated by Baptist Church of Kenya (BCOK), Midrift Region, and built and maintained by Informatics Developers. Questions about this policy or your data can be sent to support@bcok.informatics.co.ke.
BCOK Connect is used by youth (including children as young as 10), their parents/guardians, and church leaders (patrons, pastors, association admins) within Midrift Region. A "family account" is a phone number, verified by a one-time code, under which one or more youth profiles can be created — typically by the parent/guardian who owns that phone.
From every family account: a phone number, used only to verify identity (via a one-time SMS code) and log in — we never store or ask for a password.
For each youth/leader profile: full name, date of birth, gender, school level, church, and association. Date of birth is used only to compute an age group for showing age-appropriate content — we do not display exact ages publicly.
Activity data: Bible reading history and streaks, trivia scores, posts, anonymous questions and replies, prayer requests and comments, event RSVPs and check-ins, gig applications, and marketplace ad listings — whatever a profile actively creates while using the app.
Payment data (marketplace ads only): the phone number used to pay and the M-Pesa receipt number for a successful transaction. We never see or store M-Pesa PINs or full card details — payments are processed by Nexus Pay (see section 5).
We do not collect location data, contacts, photos, or device identifiers, and there is no advertising or tracking SDK in this app.
The Anonymous Q&A wall and anonymous Prayer Wall posts are designed so your name is never shown to other users or to patrons/pastors who respond — only church leaders scoped to your own association can see the question, and never who asked it. Internally, the system still records which profile submitted it, only so you can see your own question's replies and so we can prevent abuse.
We use two third-party services, strictly to operate the features you use — neither is used for advertising:
Advanta SMS (Kenyan bulk SMS provider) — receives a phone number and message text only when we send a one-time login code or a leader-initiated announcement.
Nexus Pay (M-Pesa payment gateway) — receives a phone number and amount only when a marketplace ad is being paid for, and returns a receipt number to us.
We do not sell personal data to anyone, and do not share it with any other third party.
Every login starts with a one-time SMS code — there is never a traditional password to leak. After that first verification, a family may optionally set a 4-digit PIN for faster logins; it's stored as a salted hash (never in plain text), locks out after repeated wrong attempts, and can always be reset by verifying your phone number again. All traffic is encrypted (HTTPS). Every action a user can take is checked against their role and their own association/profile before the system allows it. Database credentials and API keys are kept outside the public web folder and are never exposed to any user's browser.
Because BCOK Connect serves youth as young as 10, a youth profile is created either (a) by a parent/guardian, under their own verified phone number, or (b) by a youth using their own personal phone number, with the same identity-verification step. We do not knowingly allow a child to create an account without going through this phone-verification step, and we do not enable any public-facing messaging that exposes a youth's real name outside their own church community's leaders.
You can add, view, or switch between profiles under your family account at any time from the Profile page, and you can add or update your email and interests, or change your PIN, from Edit Profile at any time.
BCOK Connect, run by Baptist Church of Kenya (Midrift Region), doesn't yet have a self-service "delete my account" button in the app — a real person on our team processes every request, so we can confirm it's really you (or your child's parent/guardian) asking before anything is removed. To request deletion:
What gets deleted: the profile's name, date of birth, gender, email, interests, school level, and all activity tied to it — Bible reading history, trivia scores, posts, anonymous Q&A questions/replies, prayer requests/comments, event RSVPs/check-ins, gig applications, and marketplace ad listings. Deleting a whole family account also removes the phone number and PIN.
What we keep, and for how long: completed M-Pesa payment records for marketplace ads (phone number, amount, receipt number) are kept for up to 5 years after deletion, since Kenyan tax law requires businesses to retain financial transaction records for accounting purposes — this is the only data that survives an account deletion request, and it's used solely for that legal/accounting purpose, never anything else.
You don't have to delete an entire account to remove specific data — the same email address can ask us to remove a single post, question, or prayer request instead, without deleting the profile itself.
If this policy changes, we'll update the date at the top of this page. Continued use of BCOK Connect after a change means you accept the updated policy.