Your data is safe here

You're trusting an app with your details just to help your church organise serving. Here's exactly what that means for you — what we hold, who can see it, and how it's protected — in plain language.

What we collect

  • Your name so your team knows who's serving
  • Your email to sign you in securely
  • Your phone number optional — only for reminders you opt into
  • Your away dates & servings to build an accurate rota

What we never collect

  • Payment or card details
  • Your location
  • Advertising or tracking profiles
  • Anything sold or shared for marketing

Who can access your details

Access is limited to your own church, and even within it, people only see what they need.

You

Full access to your own details, schedule, and away dates — edit or clear them any time.

Your teammates

Can see your name and when you're serving, like any shared rota. Nothing more.

Your coordinators & admins

See enough to build the rota and manage your church's team — and only within your church.

WhatsApp

Receives only your number and the message, and only at the moment a reminder is sent.

Members of other churches can never see you — that separation is enforced at the database level.

How it's protected

Security isn't a feature we bolted on — it's built into the foundations.

Every church is walled off

The rules that stop one church from ever seeing another's people are enforced deep in the database — not just hidden in the app. Even a bug on screen can't leak data across churches.

Encrypted, end to end of the journey

Everything you send travels over an encrypted (HTTPS) connection, and your data is stored encrypted at rest on trusted, reputable infrastructure.

Secure, flexible sign-in

Sign in by email link, password, phone code, or Google. Passwords are never stored in a readable form, and we don't reveal whether an email has an account.

We collect the minimum

The less we hold, the less there is to protect. We only ask for what the rota genuinely needs, and a phone number only if you want reminders.

Least-privilege access

People only ever see what their role needs. Sensitive operations run on secured servers with credentials that never reach your browser.

You stay in control

Update or remove your details whenever you like. Leave a team and your personal data is deleted or anonymised — it's yours.

Have a question about your data, or noticed something that doesn't look right? Speak to your church's administrator, or email security@servingrota.app. For the finer print, see our privacy policy.