Privacy Policy

HarvestTrack is an outreach and discipleship follow-up platform for evangelists, missionaries, and churches. Team members capture contacts in the field — often via a personal QR code — and track each person's journey through a shared pipeline: New Contact, Contacted, Interested, Discipleship, and Joined Church.

This Privacy Policy explains what personal information HarvestTrack collects, how it is used, how it is protected, and the choices available to users. It applies to the HarvestTrack web application and any associated mobile-friendly (PWA) experience.

Account information. When you sign up, we collect your email address and password (processed and stored securely by our authentication system — never in plain text), and profile details you choose to add such as a display name, phone number, and profile photo.

Workspace information. Each account belongs to one or more workspaces (a church or ministry team). We store the workspace name, its members, and each member's role and permissions within that workspace.

Contact information entered by users. Team members can add contact records, which may include a first and last name, phone number, email, city or address, how the contact was captured (QR scan, manual entry, CSV import, or event), pipeline stage, assigned evangelist, and free-text notes.

Spiritual and ministry status information. A contact's pipeline stage reflects their spiritual journey — for example moving from "New Contact" through "Discipleship" to "Joined Church." Because this can reveal information about a person's religious activity, we treat it as sensitive personal information and apply appropriate access and security controls.

Usage and technical information. We process the operational data needed to run the product — such as session activity, task and event records, and notification history. We do not currently use third-party advertising trackers. If that changes, this section will be updated.

We use the information described above to:

HarvestTrack is a team product. Contacts you add belong to your workspace and are visible to other members of that workspace according to the permissions a workspace owner or admin has granted them — they are not private to a single user and are not visible to anyone outside the workspace.

Workspace owners and members with the right permissions can manage team access, including inviting members, assigning roles, and revoking access.

Care Cadence policies flag contacts who haven't had recent activity, and tasks can carry their own due dates. These surface as in-app notifications and, where applicable, email notifications (for example, account and security emails).

The WhatsApp and email invite tools in HarvestTrack open your own WhatsApp or email client with a pre-filled message — HarvestTrack does not send these messages on your behalf or store their delivery status.

We do not sell personal information, and contact records are never made publicly available.

We share information with service providers that help us operate the product — for example, hosting, authentication, database, and email infrastructure, and mapping/geocoding lookups used to resolve event and contact locations. We may also disclose information where required by law, or to protect the rights, safety, and security of HarvestTrack, our users, or others.

Sessions are managed through a secure, httpOnly cookie rather than a token stored in the browser, which reduces exposure to common client-side attacks. We apply access controls appropriate to the sensitivity of the data involved, including the ministry/spiritual-status information described above.

No method of transmission or storage can be guaranteed completely secure. Please protect your password and device, and contact us promptly if you believe your account has been compromised.

We retain workspace and contact data for as long as the workspace remains active. A workspace owner can permanently delete a workspace and its data at any time from the workspace settings — this action cannot be undone.

To request deletion of your personal account or data, please reach out through the Support Centre inside the app, or email us using the address below.

Depending on where you are located, you may have rights over your personal information, which can include access, correction, deletion, restriction of processing, portability, or withdrawal of consent. We will handle verified requests in accordance with applicable law.

HarvestTrack is built for people who meet and follow up with others during outreach. If you enter information about someone you've met, please do so lawfully and fairly, and only collect what is reasonably necessary for follow-up purposes.

HarvestTrack is intended for evangelists, missionaries, and church team members, and is not directed at children. You must be at least 13 years old, or the minimum age of digital consent in your country, to create an account.

HarvestTrack uses essential cookies only: a session cookie that keeps you signed in, and small routing cookies that remember your active workspace and onboarding progress. We do not currently use advertising or cross-site tracking cookies.

We may update this Privacy Policy as HarvestTrack's features and legal requirements evolve. We will update the date below when changes are made, and provide additional notice for material changes.

If you have questions, concerns, or requests relating to this Privacy Policy or your personal information, contact us at harvesttrackteam@gmail.com.