Privacy policy

Sprigstaff is for staff only. It holds no information about children: no names, photos, enrollment or attendance records. If your organization also uses a childcare platform for families, that is a separate system with its own policy.

• Your name, the name you go by, your work email address, and your roles at your organization.
• Employment basics your organization enters: full or part time, start date, status.
• Sign-in records: when you set up your account, signed in, or changed your password.
• Training and policy records as your organization uses them: policies you have acknowledged, skills you have demonstrated and who observed them, training hours, and the feedback attached to them.
• A log of changes made by managers and administrators (who changed what, and when), kept so your organization can show a licensing inspector that its records are sound.
• If you connect a Google account: the email address of that account and a token that lets Sprigstaff create calendar events for you. The token is stored encrypted, and nobody can read it, including other people at your organization.

You may sign in with Google, and you may connect your Google Calendar so that interviews and other events you schedule in Sprigstaff appear on your calendar with a Google Meet link and Google sends the invitations. When you connect a calendar, Sprigstaff creates and updates only the events it schedules; it does not read, store or share the rest of your calendar. You can disconnect at any time from your Account page, which deletes the token.

Sprigstaff's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

To run the app: signing you in, showing you your training and records, letting your organization's managers do their jobs, sending you the emails the app needs to send (your sign-in code, an invitation, a notice that something is due), and producing the records your organization must keep for its licensing body. We do not sell your information, use it for advertising, or build profiles from it.

People at your organization, according to the roles your organization gives them: you see your own record; a lead or manager sees the records of the people they are responsible for; an administrator sees the organization's records. Nobody at one organization can see another organization's records.

The companies that host the app on our behalf, under contracts that limit them to that job: Supabase (database and sign-in), Vercel (web hosting), Resend (email delivery), Sentry (error reports, which carry no personal information), and Google (only if you sign in with Google or connect a calendar). We may also disclose information if the law requires it.

Training and acknowledgement records are kept for as long as your organization's licensing rules require, which is usually several years after you leave; your organization marks you inactive rather than deleting you, so the record stands. Sign-in records are kept for a shorter period. A Google Calendar token is deleted the moment you disconnect. If you believe something about you is wrong, ask your organization's manager to correct it; if your organization cannot help, contact us.

Everything travels encrypted. Access is enforced by the database itself, keyed first on your organization and then on your role, so a mistake in a screen cannot show you someone else's records. Credentials such as calendar tokens are encrypted at rest. Administrative changes are logged automatically.

When this policy changes, the date at the top changes with it, and your organization's administrators are told. Continued use of the app after a change means the new policy applies.

Questions go to colin@familytreeministry.org.