Privacy Policy

1. What we collect

From families who register:

• The email address used to sign in, and a one-time sign-in code (stored only in scrambled form, and it expires after 10 minutes).
• Who is coming: names, and for children their birthday and school grade, which decide their age group.
• Which event and time you chose, whether a child sits with the family, and when you registered, moved or cancelled.
• If you are new to the church: a parent or guardian’s name and mobile phone number, and your children’s names and birthdays.

From church administrators: your name and Planning Center person number, your church’s name, time zone and Planning Center organization, and a record of each sign-in.

We do not collect payment details, and we do not ask for allergies, medical or other sensitive information.

2. How we use it

• To hold your family’s spots, placing each person in the right age group, and to keep every room’s count exact.
• To email you a sign-in code, a confirmation with a private link to change or cancel, and a note if you cancel.
• To find you in your church’s Planning Center so you don’t have to type your family in again.
• To fix problems: when something fails, the people running the service get an alert describing the error.

3. What we write to your church’s Planning Center

We only read from Planning Center, with two exceptions:

• If you are not in your church’s Planning Center yet, we add your family (the details you gave, listed above) so the church knows you.
• If a parent corrects a child’s birthday or grade and confirms the change, we update that child’s record, and keep a note of who changed what and when.

We never delete anyone, and never change a church’s events, services, times, rooms or calendar in Planning Center.

4. Who else handles it

• Cloudflare hosts the service and its database, in the United States.
• Resend sends our emails.
• Planning Center is your church’s own system; what it holds is governed by your church and Planning Center’s policies.

5. Cookies and storage in your browser

We use no advertising or tracking cookies and no analytics. Church administrators get one sign-in cookie. Families’ sign-in is kept in the browser tab and ends when the tab closes. The admin walkthrough remembers its place on your device.

6. Children

Children don’t use Congregation RSVP themselves. A parent or guardian registers them and must come too. We use a child’s name, birthday and grade only to place them in the right group and to share that with their church.

7. How long we keep it, and removing it

We keep registration details while the church uses Congregation RSVP, so it can see past registrations. Sign-in codes expire after 10 minutes. When a church stops using the service, we delete its data on request.

To see, correct or delete what we hold about you or your children, ask your church or write to ppilalas@gmail.com. We’ll reply within 30 days. Details already in your church’s Planning Center are kept by your church; ask them to change or remove those.

8. Keeping it safe

Everything travels over encrypted connections. Planning Center access keys are stored encrypted. Each church sees only its own data. Only the people running the service can reach the database.

9. Changes

If we change this policy, we’ll update the date above, and tell churches about any change that matters.