Privacy policy

Last updated September 23, 2026

Mission and Life Prep check-in is a volunteer-run attendance tool for our stake's Mission and Life Prep class. It is an independent local tool, not an official application of The Church of Jesus Christ of Latter-day Saints. This page explains what the system stores and why, in plain language.

What we collect

For class registration, information attendees enter themselves:

First and last name, and an optional preferred name
Birth date (used to calculate age/grade and confirm identity)
Ward, current or most recent high school, and graduation year
Mission plans — and for someone with a call, the assigned mission and report date
How you heard about the class (optional)
Attendance: one record per class you check in to, with the time and how you checked in
Optional feedback about lessons

Each check-in also shows a collectible character card. The card and your collection count are worked out from your attendance records, so nothing extra is stored for them.

A separate leader-only missionary tracker imports reviewed information from the high counselor's manually maintained sheet: name, ward, assigned mission, planned start, estimated return, and source/import references. It does not import email addresses, notes, council reports, or senior missionary records. Google Sheets remains the source for corrections; raw uploaded workbooks are not retained.

For class leaders, we store their name, role, and email address so they can sign in and so leader actions are accountable.

What we deliberately do not collect

No Church membership records or rosters
No student phone numbers, email addresses, home addresses, or parent contact details
No photos, no location tracking
No student passwords or accounts
No advertising or analytics trackers

Cookies

A "remember this phone" cookie makes weekly check-in one tap; shared kiosk devices hold a leader-issued credential; short-lived security cookies protect against abuse. Leaders signing in use Cloudflare Access cookies. That's all.

Registering, and confirming a birth date at check-in, run Cloudflare Turnstile, a security check that tells people from automated abuse without asking you to solve puzzles in most cases.

Leader sign-in with Google

Class leaders may sign in using their Google account. Through this we receive only the leader's email address to confirm they are an authorized leader — nothing else from their Google account. Students never sign in with Google or any account.

Who can see the data

Only authorized class leaders, behind two locks: Cloudflare Access sign-in and the app's own leader allowlist. Every leader action that changes data is recorded in an audit trail. Data is stored on Cloudflare's infrastructure in the United States.

How long we keep it

Profiles with no attendance for 12 months are hidden from search
Profiles with no attendance for 24 months are permanently deleted, including their attendance records
Anonymous per-class totals (a date and a count) are kept for long-term trends — they cannot identify anyone

Your choices

Missionary tracker records have no automatic expiry in this version. A record removed from a later sheet stays marked missing until a leader deletes it. To correct or delete a missionary record, contact a class leader. A deleted record is kept out of later imports: the app keeps only a one-way code for it, never the name, unless a leader deliberately restores the record.

You can update your own information any time from your remembered phone via "Update my information." To correct or permanently delete your data, ask any class leader — deletion requests are honored. Because this class serves youth, a parent or guardian may also request review or deletion of their child's information through a class leader.

Contact

Questions about this policy: talk to any Mission and Life Prep class leader, or email the administrator at nossy60@gmail.com.