Privacy policy

Last updated October 30, 2026 · Pre-launch draft

Shepherd’s Watch is an invite-only network for adult church security team members. This notice covers information handled by the service, including information about people mentioned in reports who are not members.

Information we handle

Account information includes your email, name, church memberships, roles, authentication records, and optional profile details and photos. Submissions may include incident descriptions, comments, messages, images, person records, citations, and last-seen locations or dates. Technical information includes IP addresses, security logs, and notification delivery information. We do not request background location access or Social Security numbers.

Use and access

We use information to authenticate members, enforce access, operate team workflows, deliver notifications, review submissions, investigate abuse, and maintain the service. Network-wide submissions are visible to authorized network members; church-private submissions are restricted to authorized church members. Conversation membership controls message access. Mentions do not grant access.

Application administrators may review flagged or reported messages and attachments for moderation. Messages are not end-to-end encrypted. Do not use the service for communications that require that protection.

Service providers

Supabase provides authentication, database and private file storage. Cloudflare provides web hosting, DNS and inbound email routing. Resend delivers authentication and invitation emails. The website’s typography uses Google Fonts, which receives font requests and associated connection information. The Supabase project is hosted in Canada; providers may process information in other countries. Content screening providers must be disclosed here before activation. Real incident submissions must wait until screening setup is complete.

Retention and removal

Published reports and person records remain until authorized manual removal; marking a report resolved does not delete it. Removal hides content and initiates media cleanup. Security, audit, dispute and legally required records may be retained separately. Backup expiry procedures are still being finalized before the pilot; we cannot yet promise a fixed deletion period for backups.

Your choices and corrections

You may edit optional profile details, manage notifications, and request account deletion, access, correction, or review of information concerning you. Nonmembers may also contact us about a report or person record. We may verify identity and authority without disclosing private network information. Account deletion does not automatically remove incident reports or other records requiring separate review.

Cookies and security

The application keeps protected sessions and content in memory rather than persistent offline caches. Hosting and security providers may use operational cookies and logs. We do not use advertising or sell personal information. MFA and server permissions reduce risk, but no system guarantees complete security. Members must protect devices and avoid unauthorized copies.

Changes

We will update this notice when practices change and communicate material changes to members. This draft must be reviewed and finalized before real-member rollout.

Questions or requests: [email protected]. Please don’t include sensitive incident details in ordinary email.