Privacy Policy

Who is responsible for your information

Sacred Heart Cathedral is responsible for the personal information held in Kept. Kept is the software the parish uses to keep that information organized.

For any privacy question or request, write to joseph@koldops.com. We answer within 5 business days.

Kept is for adults

Kept is intended for people 18 and over. We do not knowingly collect information from children. If you believe a minor has created an account, write to us and we will remove it.

What we collect

Your account

Your name, preferred name, email address, phone number, and mailing address. Your role in the parish, such as catechist, sponsor, or someone going through OCIA, and the class or group you belong to.

Your OCIA discernment

If you are going through OCIA, a catechist records what is needed to prepare you for the sacraments. This includes your date of birth, whether and where you were baptized and the date, your marital history including your spouse's name, how long you have been married, any previous marriages, and whether a marriage needs convalidation, along with how you came to the parish, how often you attend Mass, and notes from your conversations.

This is sensitive information about your religious beliefs and your family life. We collect it only because it is genuinely required to prepare you for the sacraments, and only with your consent. It is visible to the parish staff and catechists responsible for your formation, not to other participants.

Documents you provide

Baptismal certificates, sacramental records, and, for catechists and sponsors, safe environment certificates and eligibility forms.

Messages and prayer requests

Messages you send in group chats, including any files or voice notes you attach, and prayer intentions you submit. Prayer intentions can be submitted silently, without your name attached.

Technical information

Your sign in session, and, if you turn on notifications, the push subscription for your device. We keep a record of emails and text messages we send you, and a log of actions parish staff take on your record, so there is an accurate history of your journey.

What we do not do

We do not sell or rent your personal information to anyone. Kept contains no advertising, no analytics service, no tracking pixels, and no third party trackers of any kind. Nothing you enter is used to build an advertising profile. We do not use your information to train machine learning models.

Who else receives your information

We use a small number of service providers to operate Kept. Each one only receives what it needs to do its job, and none of them are permitted to use your information for their own purposes.

• Supabase hosts the database, sign in system, and uploaded documents. It holds all of the information described above.
• Google delivers our email, through Gmail, and hosts the parish calendar used to book intake calls. Email delivery involves your address and the contents of the message. A calendar entry for an intake call carries your name, phone number, and email so the person calling you knows who they are reaching.
• Amazon Web Services delivers text messages, which involves your phone number and the contents of the message.
• Vercel hosts the app and keeps standard server request logs.

We may also disclose information where the law requires it, or to protect someone's safety.

How long we keep it

Sacramental preparation records are part of the permanent record the parish keeps, in the same way a parish keeps a baptismal register, and they are retained after your OCIA journey ends. Everything else, including messages, notes, and technical records, is kept only as long as it serves the parish program, and is removed when you ask us to close your account.

Your choices

You can ask us to do any of the following, at any time, by writing to us.

• See the information we hold about you.
• Correct anything that is wrong.
• Receive a copy of your information.
• Delete your account and the personal information tied to it. See the section below.
• Ask us to stop sending you emails or text messages.
• Withdraw your consent for us to hold your discernment information.

We will not treat you differently in the parish program for exercising any of these choices.

Deleting your account

To delete your account, open your account page in the app and use "Delete my account" at the bottom. That files the request with the parish, and an admin carries it out, so nothing is removed the moment you tap it. If you cannot sign in, write to joseph@koldops.com from the email address on your account, with the subject line "Delete my account", instead. Either way we confirm the request, delete your account and the personal information tied to it within 30 days, and write back when it is done.

One thing survives deletion: the sacramental records the parish is obliged to keep as its permanent register, as described above. Messages you sent in KeptUp, including group chats, are deleted along with your account.

How we protect your information

Your information travels encrypted, and access is restricted by role, so a catechist sees the people they are responsible for rather than the whole parish. Uploaded documents are held in private storage that is not reachable by a public link.

No system is perfect. If we ever discover a breach affecting your information, we will tell you.

Changes to this policy

If we change this policy in a way that materially affects you, we will tell you in the app or by email before the change takes effect.