Grace Adventures — Privacy Policy

Last updated: May 5, 2026

This Privacy Policy describes how Grace Adventures ("we", "us", "the app") collects, uses, and protects information when you use our iOS application and related backend service.

What we collect

• Account info: first and last name, phone number, optional email, the church (organization) you belong to, and a numeric PIN you choose for sign-in.
• Children's info (parents only): first and last name, date of birth, optional notes (e.g., allergies), and a consent record per event.
• Attendance: when your child checks in or out of a church event, who performed the check-in/out, and the pickup person.
• Photos and content (staff/admin only): photos taken during events that you upload, along with which children are tagged in them and short captions.
• Session tokens: a random identifier stored securely in your device's Keychain so you stay signed in.

Why we collect it

• To run church kids' events safely (check-in, pickup verification, attendance records).
• To let parents see what their kids did at the event.
• To authenticate you when you sign in.

We do not sell your data, share it with advertisers, or use it for tracking across apps or websites.

Where data lives

Data is stored on a private database hosted with the church's hosting provider (Namecheap). Photos are stored on the same server's file system. We do not use third-party analytics, advertising SDKs, or trackers in the app.

Who can see your data

• Parents see only their own family's records.
• Staff and admins within your church organization can see member info, children, and photos for the events they run.
• Photos posted during an event are visible to every parent in that same organization.
• Different churches (organizations) are walled off from each other.

Children's data

Information about children is entered by a parent or by trusted church staff, with parental consent recorded per event. We never sell or share children's data with third parties. Parents may remove their own family's data at any time via the in-app account deletion (Settings > Delete my account).

How long we keep data

We keep your data as long as you have an active account. When you delete your account, your user record, your children's records, and your attendance history are permanently deleted from the database. Photos you uploaded as staff are also removed.

Your rights

• Access: Sign in and view your account, your children, and their attendance history any time.
• Correction: Edit your child's info from the child's detail page; or contact the church admin.
• Deletion: Settings > Delete my account permanently removes your data. You can also email us to request deletion.

Security

All traffic between the app and our server is encrypted with HTTPS. Session tokens are stored in the iOS Keychain. Database access is restricted to authorized staff.

Children's online safety

The app is designed for parents and church staff to use on behalf of children. We do not direct interactive features (chat, comments, etc.) to children themselves. The information collected about children is limited to what is necessary to run safe kids' events.

Changes

If we make material changes to this policy we'll update the date above and notify you in the app the next time you sign in.

Contact

Questions about this policy or your data? Email support@graceromanianbaptist.com.