This Privacy Policy describes how ChurchScore and ChurchScore Live (collectively "the Apps," "we," "our") handle information when you use either iOS application. ChurchScore is a locally-hosted points and attendance tracking tool designed for church organizations. ChurchScore Live is the companion application that enables real-time multi-device synchronization across your organization's iPads.
This policy applies to all users of both the ChurchScore and ChurchScore Live iOS applications. The privacy practices described herein are identical across both apps — neither application collects, transmits, or shares your data with the developers or any third party. By using either App, you acknowledge that you have read and understood this policy.
ChurchScore stores the following data locally on your device and, if configured, on your self-hosted server:
| Data Type | What It Includes | Where It's Stored |
|---|---|---|
| Member Records | Names, class assignments, profile photos | Local SQLite on device; your server |
| Point Records | Points awarded, dates, associated actions | Local SQLite on device; your server |
| Class & Action Definitions | Class names, action names, point values | Local SQLite on device; your server |
| Tier Definitions | Tier names and point thresholds | Local SQLite on device; your server |
| Profile Photos | Optional member photos | Local device Documents folder only |
| Server URL | The ws:// address of your sync server | iOS UserDefaults (on device only) |
| Offline Queue | Pending sync events when offline | iOS UserDefaults (on device only) |
All of the above data is entered by you and stored exclusively on your own hardware. None of it is transmitted to or accessible by the App's developers.
ChurchScore does not collect any of the following:
Data stored by ChurchScore is used solely to provide the features of the application:
No data is used for advertising, profiling, marketing, or any purpose beyond operating the App's stated features.
We do not share any data with third parties. ChurchScore has no relationship with advertising networks, data brokers, analytics providers, or any external services.
The only scenario in which data leaves the app is when you use the built-in export feature (PDF or CSV reports), which saves a file to your device or shares it via the standard iOS share sheet. You are solely responsible for how you handle exported files.
ChurchScore is designed for use by church administrators and teachers. The App may store the names of minors (children who are church members) as part of its member roster functionality.
If you believe that information about a child has been entered into the system inappropriately, please contact your organization's ChurchScore administrator to have it removed from your local database and server.
Because ChurchScore stores data locally on your devices and on your own server, the security of that data is primarily your responsibility. We recommend the following best practices:
The App itself does not implement encryption of the local SQLite database beyond what iOS provides through its standard data protection APIs. Profile photos are stored unencrypted in the app's Documents directory.
Data is retained for as long as it exists on your device or your server. The App provides no automatic expiration of records.
To delete data:
Because the developers have no access to your data, we cannot delete data on your behalf.
Depending on your jurisdiction, you may have the following rights regarding personal data:
| Right | How to Exercise It |
|---|---|
| Access | All data is viewable directly within the App or by querying your local database |
| Correction | Edit member names and records directly in the App's Settings tab |
| Deletion | Delete individual records in the App, or uninstall the App to remove all local data |
| Portability | Export records as CSV or PDF using the Reports tab |
| Objection | Contact your organization's ChurchScore administrator |
Because all data is stored on your own infrastructure, you have full and direct control over it at all times.
ChurchScore may request access to your device's photo library or camera solely for the purpose of setting a profile photo for a church member. This access is:
Selected photos are saved to the App's local Documents directory on your device. They are not transmitted to any server or external service. You can revoke camera and photo library access at any time in iOS Settings → Privacy & Security → Photos / Camera.
ChurchScore communicates over the network only in the following circumstances:
We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically.
Continued use of the App after changes to this policy constitutes your acceptance of the updated terms. If the changes are material, we will make reasonable efforts to notify users through the App Store update notes.
This Privacy Policy is governed by the laws of the State of Georgia, United States, without regard to its conflict of law provisions. Any disputes arising under this policy shall be subject to the exclusive jurisdiction of the courts located in Georgia.
If you have any questions about this Privacy Policy or how ChurchScore handles data, please reach out.
privacy@cornerstonelabs.info