Privacy
Your church’s information stays your church’s.
Hillfold never sells personal information and never uses it for advertising.
Updated November 11, 2026
This policy covers Hillfold, made by Mole Hill Marketing. It covers two kinds of information, and our role is different for each. Each church also has its own privacy page on its own website.
1. Two roles
- Your church’s members’ information (directory, prayer requests, giving records, sign-ins). Your church decides what is collected and who sees it. Hillfold stores and processes it only to run your church’s app, on your church’s behalf. Members with questions about it should ask their church first; we help the church answer.
- Information about churches as Hillfold’s customers (who signed up, contact details, plan, bills, support requests). We decide how this is used, as described here.
2. What is collected
| Kind | Examples | Why |
|---|---|---|
| Member details a church adds or a member gives | Name, household, address, phone, email, birthdays, photos | The church’s directory and app |
| Sign-in | Email address or phone number, one-time codes, the time of each sign-in | Signing in safely |
| Church content | Prayer requests, bulletins, events, serving schedules | The church’s app |
| Messages from the church | Emails and app notices a church sends, each member’s choice to receive them, and whether an email was delivered and opened | Sending them, and showing the office who got them |
| Gifts | Giver name, email, amount, fund, date | Receipts and the church’s records. Card and bank numbers stay with Stripe and never reach Hillfold |
| Customer details | The church’s name, address, contact person, plan, invoices | Billing and support |
| Website visits | Pages visited, device type, approximate place from the network | Keeping the sites working and safe. We don’t use advertising trackers |
| Sign-up lookup | The church’s public website and Google listing | Filling in the sign-up form |
3. Who helps us run Hillfold
These companies process information for us, only to provide their service:
- Supabase: the database, sign-in and private file storage.
- Cloudflare: hosting the websites.
- Stripe: Hillfold’s bills and each church’s online giving.
- Resend: sending email (sign-in codes, notices, and email a church sends its members).
- Twilio: sending sign-in codes by text message.
- Google: finding a church’s public listing at sign-up, checking a mailing address when a household changes it (where a church has this on), and sermon videos on YouTube.
- Anthropic (Claude): reading a church’s public website at sign-up to suggest its pages, reading bulletins a church uploads, and reading a directory file (a PDF or photos) when a church’s office chooses to import one. Nothing else from the directory is sent.
- GitHub: building each church’s website from its settings (not members’ information).
- Apple, Google and Mozilla notification services: delivering app notices to phones and browsers that have turned them on.
We share information otherwise only if the law requires it, or to protect someone’s safety.
4. Keeping it safe
- Each church has its own database; one church can’t see another’s information.
- Database rules decide, for every request, who may see each record. Private files need a sign-in, and each church approves its own members.
- Hillfold support signs in to a church’s app only while the church allows it, never sees the treasurer’s giving records, and every sign-in is logged where the church can see it.
5. How long it is kept
- A church’s information is kept while its plan is active. After the plan ends we keep it for 30 days in case the church comes back, then delete it.
- A church can delete a member’s information at any time; a member can ask the church to.
- Billing records are kept as long as tax law requires.
6. Children
Hillfold is sold to churches and isn’t aimed at children. A church may list children as part of a household in its directory; the church is responsible for having the parents’ permission. Each church decides who it approves to sign in.
7. Your choices
Members can see and change their own details in the app, choose what others in the directory see, choose whether the church may email them, and ask their church to remove them. Churches can ask us for a copy of their information or for it to be deleted.
8. Changes and contact
We’ll post changes here and email churches about important ones. Questions: [email protected].