Privacy policy

Kitchen Handback ("we") helps churches, fellowship halls and community centers keep a record of each group's use of their kitchen. This page explains what we store and why. We don't sell your data and we don't show ads.

What we store

• Your account: your email address and a securely hashed password, handled by Amazon Cognito.
• Your organization's records: its name and time zone, kitchens, checklists, equipment, the groups that use the kitchen (with their contact name, email and phone, and agreement and insurance dates), kitchen uses and their checklists and sign-offs, incidents, any photos you attach, and who on your team did what. Photos are kept in a private storage bucket and opened only through short-lived links.
• Page-view analytics: the page you visited, the referring site, your browser's user agent, rough location when available, and a one-way hash of your IP address that changes daily. We never store your raw IP address.
• Feedback you send us, with your email if you give it.
• Billing: payments are processed by Stripe. We store your Stripe customer and subscription IDs and your plan, never your card number.

Cookies

We use only first-party cookies: one to keep you signed in, and two random IDs that count visits and sessions. No third-party tracking or advertising cookies.

Who processes your data

Amazon Web Services (hosting, database, sign-in), Stripe (payments) and Resend (email). Each processes data only to provide its service to us.

How long we keep it

Your organization's records stay until you delete them or ask us to close the account. Analytics are kept in aggregate form for as long as they're useful.

Your choices

On the Fellowship and Campus plans you can download kitchen uses, incidents and groups as CSV at any time. To get a copy of everything, correct something, or delete your account and your organization's data, contact us and we'll handle it within 30 days.

Contact

Questions about privacy: use the feedback form.