Privacy Policy

Effective April 25, 2026

Plain-English summary: Doorstep Ministry only collects the information your church needs in order to log door-to-door visits. We don’t sell or share your data with advertisers. Personal details about residents stay scoped to your church and are protected by industry-standard security.

Doorstep Ministry (“we,” “us,” or “our”) provides a web-based platform that helps churches plan, log, and follow up on door-to-door outreach visits. This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using Doorstep Ministry, you agree to the practices described here.

Information we collect

Account information

When an admin creates a church account, we collect the church name and the admin’s name, email address, and chosen password (stored hashed by our authentication provider, never in plain text). When team members are invited, we collect their name and email.

Church and ministry data you enter

The platform stores whatever you choose to record, including:

Church profile (name, address, email, website, optional logo).
Neighborhoods, scheduled visits, and weekly service times.
Households you visit: address, resident names, phone numbers, optional birthdays and anniversaries, optional photo, and the names and birthdays of any children recorded.
Visit logs: date, rating, team member name, prayer requests, conversation notes, prayer-request tags, and (when permitted by the volunteer’s device) GPS coordinates captured at the moment a visit is saved.
Edits made by team members are recorded in an admin-only audit log so a church admin can see who changed what.

Automatically collected information

Like most web apps, we collect basic technical information such as browser type, IP address, and pages visited, used solely for security, debugging, and capacity planning. We use a small number of cookies that are strictly necessary for keeping you logged in — we do not use advertising trackers.

Information from third parties

When you type an address, we send the partial text to Mapbox to show address suggestions. When you subscribe to a paid plan, we use Stripe to process payments; Stripe receives the information you submit on its checkout page. We do not store your credit card details on our servers.

How we use your information

To create and operate your church’s account.
To deliver the features you use (logging visits, calendars, exports, etc.).
To send transactional messages (sign-up, password reset, billing receipts).
To respond to your support questions.
To diagnose and fix problems and protect against abuse.
To comply with legal obligations.

We do not sell your information, and we do not use it to target you with advertising.

How we share information

We share information only with the service providers that help us run Doorstep Ministry, and only to the extent they need it:

Supabase — database, authentication, and file storage.
Vercel — application hosting.
Hostinger — this marketing website.
Mapbox — address autocomplete.
Stripe — subscription billing (when you upgrade from the free trial).

Each of those providers operates under its own privacy policy and contractual obligations to safeguard data. We may also disclose information if required by law, to protect rights and safety, or in connection with a sale or transfer of our business (in which case we will notify you).

Tenant isolation

Each church operates as its own “tenant” in our database. Through Row Level Security policies, members of one church cannot see another church’s neighborhoods, households, visits, scheduled visits, or settings. Within a church, certain data (such as the audit log) is restricted to admins only.

How long we keep your data

We retain your data for as long as your account is active. When you delete a household, it moves to a 30-day soft-deleted “Trash” that an admin can restore. Permanent deletion removes the record and its visits from our database. If you cancel your account, we will delete or anonymize your church’s data within a reasonable period unless we’re required to retain it for legal or financial reasons (e.g., billing records).

Your rights and choices

Access & export. Admins can export households, visits, and scheduled visits as CSV files at any time from Settings.
Correction. You can edit any record you have permission to edit through the app.
Deletion. Admins can soft-delete households via the Trash and request full account deletion by emailing us.
Email preferences. Transactional messages are required for account use. You may unsubscribe from any non-essential communications.

Depending on where you live, you may have additional rights under the GDPR, CCPA, or similar laws. To exercise those rights, contact us at the address below.

Information about children

Doorstep Ministry is intended for use by adult church staff and volunteers; children should not create accounts. As part of pastoral care records, the platform allows your team to record names and birthdays of minor children associated with a household you visit. Treat that information with the same care you would expect for your own family. If you would like a specific record removed, contact your church admin or email us.

Security

We use industry-standard practices to protect your data, including encryption in transit (TLS) and at rest, role-based access, and Row Level Security policies in the database. No system is ever 100% secure; if we discover a breach affecting your information, we will notify you in line with applicable law.

Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we’ll update the effective date above and, where appropriate, send you a notice. Your continued use of Doorstep Ministry after the change means you accept the updated policy.

Contact us

Questions about this Privacy Policy or your data? Email contact@doorstepministry.com.