Shepherd Privacy Policy

Last updated: September 4, 2026

Shepherd is a private tool used by the leaders of a church to care for its members. It is not available to the public: only leaders who have been added by a church administrator can sign in.

What the app stores

• Leaders: name, phone number, role, and notification preferences.
• Members: name, phone number, birthday, address, membership status, assigned leader, and notes entered by leaders.
• Activity: Sunday attendance, a log of calls, messages, and visits made by leaders, and reminder notifications.
• Device tokens: a push-notification token for each phone a leader signs in on.

How it is used

This information is used only to help church leaders stay in touch with members: reminding leaders of birthdays, of members who have not been contacted recently, and of members who have missed church. It is never sold, shared with advertisers, or used for any other purpose.

Who can see it

Only the church's leaders, after signing in with a one-time code sent by SMS. Data is stored in a database hosted on Heroku (Salesforce) in the United States and, if the church administrator enables it, an Excel copy is written to the church's own Microsoft OneDrive.

Third-party services

• Twilio sends sign-in codes and reminder text messages to leaders.
• Expo delivers push notifications.
• WhatsApp and the phone dialer are opened on the leader's own device; Shepherd never sends messages on a leader's behalf.
• Microsoft OneDrive (optional) stores an export of the member list, controlled by the church administrator.

Your choices

Members may ask the church at any time to see, correct, or delete the information held about them. Leaders can turn off SMS reminders in Settings and can sign out to stop push notifications on a device. An administrator can remove any leader or member.

Contact

Questions about this policy or requests to remove information can be sent to the church administrator through the app, or to daniel@codconsults.com.