Privacy policy

Who this policy covers

This policy covers two things:

1. This website. The pages you are reading now.
2. The Antiphona software. The web app that parishes use with their families, staff and volunteers.

The Doodle Project makes Antiphona and runs it. A parish that uses Antiphona is a separate organization.

This website

This website collects nothing about you.

• It sets no cookies.
• It runs no analytics and shows no ads.
• It loads no scripts, fonts or pictures from other sites. Every file comes from this site.
• It has no forms. To reach us, you send an email.

Like any web server, ours records technical details of each request: the page asked for, the time, the network address and the type of browser. We use them to check that the site works and to stop abuse. We do not use them to identify visitors.

Traffic passes through Cloudflare. Cloudflare protects the site, so it handles each request on its way in.

When you email us, we use your message to answer it. We do not add you to a mailing list.

The Antiphona software

The parish decides what personal information it keeps in Antiphona, and why. The parish is responsible for how it uses that information. The Doodle Project runs the software for the parish. It handles the information only to provide the service.

Each parish publishes its own privacy policy inside its app, at the address /privacy. That policy is the one that applies to you. It names the parish office to contact.

What Antiphona can hold

A parish chooses which modules it uses. Depending on the modules, Antiphona can hold:

• Household and contact details: names, addresses, email addresses and phone numbers.
• Personal details: date of birth, language, and marital and sacramental status where a program needs it.
• Children's records: name, date of birth, grade, class, attendance, allergies and medical notes, and the people allowed to pick up a child.
• Sacramental records: baptism, First Communion, Confirmation and marriage, and the certificates that families send in.
• Program records: registrations, waitlists, scholarship requests and volunteer applications.
• Volunteer and safe environment records: training and background check status.
• Payment records: what was paid, when, and for what. Card and bank numbers go straight to the payment processor. Antiphona never stores them.
• Messages and requests: what you send through a form or a help request.

What the app records on its own

So that the app can work and stay secure, it records:

• sign-in and session information, including a session identifier in a cookie;
• your network address, browser type, operating system and screen size;
• the pages you open, the actions you take, and any error the app meets;
• for each email it sends, whether the email was delivered, opened or clicked. This is recorded against the person who received it.

The parish uses this to see whether its messages reach people, and to fix faults. It does not use it to build an advertising profile, and it does not follow you to other websites. If you do not want an open to be counted, set your email program to block remote images.

Who handles the information

These service providers run parts of Antiphona. Each one gets only what it needs for its job.

• Microsoft hosts the database and the application (Microsoft Azure and Dataverse).
• Stripe processes card payments.
• Twilio sends text messages.
• ZeptoMail sends email.
• PocketBase checks sign-in credentials.
• Church Community Builder is the parish membership system. A parish that uses it shares household records with Antiphona. It is optional.

Antiphona does not sell personal information, does not rent it, and does not share it with advertisers. It shares information with civil authorities only where the law requires it, and with a diocese only where diocesan policy requires it.

How messages are sent

A parish sends three kinds of message. Each one follows its own setting, so turning off one kind does not turn off the others.

• Essential messages always arrive. There are only a few. Examples are a sign-in code, a password reset, an alert about a sign-in you may not know, and a notice about your child's safety.
• Program messages are about something you joined: a receipt, a payment reminder, a schedule change, a reply to a help request. You control them one program at a time, by email and by text.
• Parish news is everything else. You choose whether to receive it, and you can change your mind at any time.

To change your choices, open your communication preferences in the app. Use the unsubscribe link at the bottom of any email. Reply STOP to any text message to stop texts from that number. Reply HELP for help. Message and data rates may apply.

How information is protected

• Information is encrypted in transit and at rest.
• Access depends on role. Staff see only what their work needs. Staff accounts use multi-factor sign-in.
• The app records who changed a record, and when.
• Anyone who serves with children completes safe environment training and a background check before they see children's records.

No system is completely secure. If you think someone else used your account, tell your parish office at once.

Children

A parent or guardian creates and manages a child's record. Children do not create their own accounts, and the app does not knowingly collect information straight from a child under 13. A parent or guardian can see and correct everything held about their child.

Older youth may get their own sign-in for a youth program, with a parent's or guardian's knowledge.

Cookies

The app sets a small number of cookies, and each one is necessary. They keep you signed in, protect forms against forgery, and remember your language. The app has no advertising cookies, no analytics service and no third-party tracker. Because of this, it shows no cookie banner.

Where information is stored

Information is stored on servers in the United States. A service provider may process it in other countries where it works. It must protect the information to the same standard.

Your choices

Ask your parish office to show you what it holds, to correct it, to delete it, to give you a copy, or to stop messages. Your rights depend on where you live. The parish's own privacy policy lists them.

Some records cannot be deleted: a sacramental record, a financial record that the law requires, and a safeguarding record. Where a parish cannot act on a request, it must tell you why.

If you write to us instead, we pass your request to your parish.

If there is a data breach

Sometimes personal information is exposed in a way that could put you at risk. Then the parish and The Doodle Project will tell the people affected and the authorities, as the law requires. We will say what happened, what information was involved, and what you can do.

Changes to this policy

When we change this policy, we change the date at the top of the page. If a change affects how we handle information, we will say so on this page and in the changelog.

How to contact us

Email [email protected]. For a request about your own records, contact your parish office first.