Privacy
Private and COPPA-safe by design.
Kid accounts collect the minimum with consent captured at creation, no personal data rides along in telemetry, and children are never shown ads.
- Kid data collected
- the minimum
- PII in telemetry
- none
- Ads shown to kids
- zero
Safeguarding
Custody-aware, when you turn it on.
Pickup follows the custody records your staff keep: who may collect a child and who may not. The decision is made in the database as the child is released, and volunteer clearances are tracked with expiry dates.
- Deny overrides
- none
- Pickup decision
- in the database
- Lapsed clearances
- surfaced
Compliance
Controls in the schema, not the handbook.
Row-level security isolates every church, the visibility rules run inside the database, pastoral care notes are encrypted field by field and never sent to AI, and an audit log sits behind it. Compliance-by-design controls, CI-enforced, audit-ready.
- Tenant isolation
- row-level security
- Care notes
- field-encrypted
- Export + erasure
- built in
Platform
One platform underneath.
Herald, Roster, and Trivia share content, members, and a single warm brand across everything your church does online.
- Products
- three
- Logins
- one
- Your data
- yours, exportable