Privacy policy
Last updated 8 October 2026
Householder is a personal record of the people you visit in the ministry. People share real things at their door, and this policy says plainly what the app stores, where, who can see it, and how to remove it.
Who we are
Householder is made by an individual developer. Questions about this policy go to support@householderapp.com.
What we collect
Your account. Your email address and name, held by Clerk, our sign-in provider, so you can sign in and so we can reach you about your account.
Your profile. When you first sign in the app asks for your first and last name, your city, state and ZIP, your congregation and your service status. Your name, email, city, state and ZIP are stored on our servers as you typed them; your congregation and service status are encrypted at rest the same way your records are.
The records you keep. Householders, visits, notes and tasks. These are stored on our servers, encrypted at rest with a key that belongs to your account alone. We do not read them in the ordinary course of running the service, they are never shared with other publishers, and they are never used for advertising or sold.
Usage analytics, off by default. A switch in Settings, Share usage data, controls this. It is off until you turn it on. This is what the app says beside that switch, and it is the whole of what we mean by it:
Helps us see which parts of Householder get used — which screens you open, and whether features like reminders and status suggestions work. It never includes the names, addresses, or phone numbers of the people you visit, or anything you write in a note or a visit. Turning this on does send your own account name and email, so your activity can be tied back to your account. Crash and error reports are always sent, with or without this on, and once this is on they can include your account name and email too — but never a householder's name, address, or anything you write about them.
Crash and error reports, always on. When something goes wrong, the app sends a report so it can be fixed. These carry the kind of error and internal identifiers, never a householder's name, address, status or anything you wrote.
Services we rely on, and what reaches each
- Clerk — sign-in. Your email address and name.
- PostHog — analytics (only with your consent) and crash reports. Identifiers and fixed category values, never householder data.
- Mapbox — map tiles. The area of the map you are looking at, not your householders' addresses. Mapbox's own map usage statistics are off unless you turn on Share usage data, and follow that switch. Whatever the switch says, the map also tells Mapbox when an app user is active, which Mapbox counts for billing. That message carries a random ID Mapbox creates for this install of the app, the phone's model and system version, and whether you have allowed location access, but not your location.
- Apple and Google geocoding — a householder's street address, sent once to place their pin on the map and again if you change it; and your own location, if you ask the app to fill in an address from where you are standing.
- Expo — app updates.
- Loops — the waitlist on this website and the app's own emails. Your email address, if you join the list. Creating an app account adds your email address and first name to Loops, so we can send you a welcome and, if you have not finished setting up, one reminder. Loops records whether you finished setup and whether you have an account. You can unsubscribe from any of these emails, and deleting your account deletes your contact in Loops. Loops also hears when you reach a milestone in the app, such as keeping up four weeks of return visits, as a count only, never who you visited.
Reminders are scheduled on your phone and never leave it. A reminder says a time and a count and never a householder's name, address or status.
How long we keep it
For as long as your account exists. There is no separate retention period for your records; they are yours until you delete them.
Deleting everything
Settings, My Profile, Delete account. That removes your account and every householder, visit, note and task with it. If you cannot get into the app, email support@householderapp.com from the address on the account and we will do it.
Children
Householder is not directed at children under 13 and we do not knowingly collect their data.
Changes
If this policy changes in a way that matters, the date at the top moves and a notice appears on this page before the change applies.