Privacy

Calls, visits, presentations, and service records are stored in Supabase and restricted to your signed-in account. No other account in this app can see them.

When you type a street address or use current location, that address or your coordinates are sent to Google’s geocoding service to find the map pin and a matching street address. Nothing else about your calls or visits goes with it.

The map is drawn from tiles served by OpenFreeMap. Like any web request, those requests carry standard technical details (such as your IP address)—but never your saved call pins or addresses.

Sharing your device’s location is optional. If you decline, you can still add calls with a typed address—call pins just won’t include your current distance.

The printable HTML report and CSV package are built the moment you ask for them. Ministry Callbook doesn’t keep a copy afterward—once downloaded, it’s yours to store carefully.

You can delete a single visit, a whole call, or your entire account. Deleting removes the rows from the database—there is no archive copy kept behind the scenes, and no recycle bin to recover from. Archived calls can be deleted too: archiving protects history from accidental edits, it isn’t a lock.

Deleting your account also asks you to confirm with a one-time code emailed to your address, because permanently erasing someone’s notes should take more than a stolen phone.

Supabase keeps routine backups so the service can be restored after a failure. Deleted records can persist in those backups for a short retention period before they age out, and they are never used to bring an individual record back.