Privacy notice

Who this covers

Carestead LLC (“Carestead”, “we”, “us”) operates the Carestead service and is responsible for the personal information described in this notice. Carestead gives a church one place to run its website, sermons, and announcements, and to play Bible games with its families. This notice covers the people who use it: church staff and owners, parents and guardians, and the children who play under their care.

What we collect

• Account details for staff and owners — your name, email, and the church you belong to — so you can sign in and we can attribute who published what.
• Content you create — announcements, sermons, pages, and game questions — which belongs to your church.
• A minimal child profile — a display name, a chosen avatar, and an age band — created by an adult. We do not ask children for an email address, a photo, or any contact information.
• Operational logs needed to run and secure the service. Our telemetry is designed to carry no personal data — identifiers are redacted before a trace or metric leaves the app.

Children's privacy (COPPA)

Children's accounts are created and managed by a parent, guardian, or church under adult supervision — never by a child on their own. We collect only what a game needs to work, show children no behavioral advertising, and load no third-party trackers on the surfaces they use. An adult can review a child's profile and ask us to delete it at any time.

Cookies and local storage

We use only what the service needs to function, so there is no cookie consent banner to click through:

• a sign-in session cookie, which keeps you logged in;
• first-party preferences stored on your device — your light/dark theme, whether game sound is muted, and calm mode;
• short-lived game state kept on your own device while you play.

We set no analytics, advertising, or cross-site tracking cookies, and we embed no third-party pixels. If that ever changes, we will update this notice and ask for consent first.

How we measure product usage

To find out where Carestead is hard to use, we count what happens in the staff tools — how many churches finish importing their people, how long it takes a new church to publish its first announcement, where a setup step gets abandoned.

These counts are never tied to an individual. Each one records the church, the role of whoever acted (owner, admin, and so on), what happened, and when. There is no name, no email address, no member or user identifier, no session or device identifier, and no IP address — not removed afterwards, but never collected. Counts of people are stored in ranges such as “2-10” rather than as exact figures.

This sets no cookies of its own and uses no third-party analytics service, and it never leaves the installation holding your data. Nothing is sent to an outside company. We measure only the staff tools: the member app, children's games, and your public church website are never counted this way.

A few of these counts can only be seen in the browser — a setup step skipped, a suggested next action followed — so those are sent from the page to your own installation as they happen. They travel on the sign-in session you already have; nothing new is stored on your device, and the message itself carries only what happened, never who did it. Your church and the role that acted are added by the server from your sign-in, so a page cannot claim to be someone else.

The detailed records are deleted after 90 days and the day-by-day totals after two years. If you would rather we did not count your church's usage at all, the organization owner can switch it off under Privacy & consent in your settings, and counting stops from that moment. Switching it off stops future counting rather than deleting earlier counts; ask and we will delete those too.

How we use and share information

We use your information to provide the service, keep it secure, and support you. We do not sell personal information. Each church's data is isolated from every other church's. We share data only with the infrastructure providers needed to run Carestead, and only as required to deliver the service.

Security

Data is encrypted in transit, each tenant's records are isolated at the database level, and sensitive administrative actions are recorded in a tamper-evident audit log. To report a security concern, email [email protected].

Your choices

You can review and correct your account information, and request that we delete your account or a child's profile. To make a request, contact your church administrator or reach us at the address below.

Contact

Questions about this notice? Email [email protected].