How we handle information

What we collect

Only what the person writes on their own card: first and last name, one way to reach them — phone, WhatsApp, or email — the town or neighborhood they are in, and whatever they chose to write in the prayer request or comments field.

• No date of birth, no address, no ID number.
• Nothing about their situation, their health, their family, or their finances.
• Nothing at all from your records.

How consent is given

By the person, on paper, in their own hand. The box is not pre-checked, it is not bundled with anything else, and it is written in plain language in the language they read. No box, no contact. The card exists in English and in Spanish.

☐I'd like someone to contact me about faith, the Bible, or spiritual questions. I understand CoMission will reach out to me, and that I can ask them to stop at any time.

There is a second, separate box for people who want prayer but would rather not be contacted. That one matters more than it looks: it gives people a way to be honest about what they want, and it is what makes the first box mean something.

Who sees it

The disciple maker assigned to that person sees their name and how to reach them, and nothing else. CoMission staff who run the platform see the record. Nobody else.

• Prayer requests shared with prayer partners have names removed — or carry a first name only, where the person has agreed to that.

What we never do

• We never sell, rent, trade, or share this information with any other organization.
• We never add these people to a mailing list, a newsletter, or a fundraising appeal.
• We never use your organization's name in follow-up without your written permission.
• We never contact anyone who didn't check the box, for any reason.

Stopping and deleting

Anyone can ask us to stop, and we stop — at the first contact or the tenth, at any time, with no questions asked and nothing further.

• Anyone can ask us to delete their record, and we delete it within 30 days. Byron Sommardahl, who leads CoMission, writes back to that person himself to confirm it is done.
• Your organization can ask us to delete every record that came through you — at any time, for any reason, without explaining why.

How long we keep it

A record is kept while the relationship is active. Once twelve months pass with no contact of any kind, the record is deleted.

• Deleted means deleted, not archived. We do not keep a copy somewhere else.

Security

Records live in the CoMission platform behind individual logins, with what each person can see limited by their role. There are no shared accounts and no exported spreadsheets passed around.

What you get back

Your choice — and "nothing" is one of the choices.

• NothingHand it off and never think about it again. We won't send you anything.
• A quarterly noteHow many people used it, how many asked to be contacted, how many were connected, and how many are in an active study.
• Your own loginFollow it yourself, as often as you like — useful if you report outcomes to a board, a denomination, or your own donors.

In every case: numbers and outcomes, never names — unless a person specifically asks us to tell you how they are doing. The confidentiality we promise them runs in your direction too.

This website

Everything above is about the people who fill out a card. These last two parts are about the website itself, and they are deliberately kept separate — the two halves have nothing to do with each other.

• We count page visits with Plausible, which sets no cookies, does not fingerprint anyone, and stores nothing that identifies a visitor. That is why this site has no cookie banner: there is nothing to consent to.
• What it records is a page, a rough country, a device type, and where a link was followed from. Never a name, never an address, never anything that can be traced back to you.
• It is never joined to a card, a prayer request, or any record in the platform. Nothing in the two halves of this page ever meets.
• The printable study sheets and study plan PDFs report nothing at all.

Your account

You can read the open part of the library without an account. If you create one, it is free, and it belongs to the website half of this page.

• What it holds: your email address, your name, your language, your answer to “How will you use this?” if you gave one, and which classes, studies, files and videos you opened, downloaded or played, with the dates, and the chapters, studies and checklist steps you marked done, so your progress follows you to any device. If you take the Discipleship Health Check while signed in, it also keeps your answers and results, so you can take it again and compare. If you turn on leader materials, it also notes that, and when.
• Why: so we know who uses the library and can make it better, to email you sign-in links, and to send you occasional updates. Every update has an unsubscribe link, and unsubscribing never stops your sign-in links.
• Who handles it for us: Google Cloud hosts the website and the account service, Neon keeps the account database, Cloudflare runs our domain name, the bot check on the sign-in form and the storage for downloadable files, and Mailgun sends the email. Nothing is sold, rented or shared with any other organization.
• Signing in with Google: if you choose it, Google tells us your name, your email address and that Google has checked the address, and nothing else from your Google account. It signs you into the same account the email link does.
• Cookies: one, set only when you sign in, and used only to keep you signed in. The visit counting above still sets none, which is why there is still no cookie banner. Signing in with Google adds a second, for the few minutes the sign-in takes, to check that Google’s answer is the one we asked for.
• How long: for as long as you keep the account. On your account page you can turn updates off, download everything your account holds, or delete it. Delete it and it is gone from our database at once, and from everywhere else within 30 days.
• The wall: your account is never joined to a card, a prayer request, or any record from the paper-card work.

Forms you send us

When you fill in a form on this website — the contact form, a request, the field report sign-up or the Discipleship Health Check — what you type is stored on our own server, in the same database as the accounts. It belongs to the website half of this page.

• Who sees it: CoMission staff, on a page only they can open after signing in. We get an email when a form comes in, with a short summary and a link to it.
• The Health Check: our server scores it and emails you your report. Your church’s score, without your name, is counted when we tell other churches how they compare.
• If you have an account with the same email address, the form shows with it: it is in what you download from your account page, and deleting the account deletes the form too. If you are signed in when you send it, it is linked to your account directly.
• How long: until we delete it or you ask us to. Write to us and we delete it within 30 days.
• Who handles it for us: the same Google Cloud, Neon and Mailgun named above. Nothing is sold, rented or shared with any other organization.

Follow-up emails

If you tick the follow-up box on the Discipleship Health Check, or tell Byron in conversation that you would like to hear from us, we keep your name, email, church and city so that we can send a short series of emails about next steps: three over two weeks for the stage you are at. The box is never pre-ticked, and the Health Check works the same without it.

• Every email has an unsubscribe link that works with one click, without signing in. After it, we send you nothing more.
• Replies go to Byron, not to a mailing system.
• We never add you because a friend gave us your address, and we never share or sell the list.
• To have your details deleted, email byron@comission.cc.