Who we are
Jethro is operated by Jethro (“we”). We are an independent tool. We are not affiliated with or endorsed by The Church of Jesus Christ of Latter-day Saints, and nothing you enter here is shared with it.
Two kinds of people
Account holders are the adult leaders who sign in: bishoprics, clerks, executive secretaries, council members, organization leaders, and music coordinators. Directory entries are the members of a ward whose information a leader imports so the ward can plan speakers, callings, and activities. Directory entries do not have accounts and have not agreed to anything with us; their leaders act as stewards of their information, described below.
What we collect
From account holders, through our sign-in provider:
- Name and email address.
- Profile picture, if you sign in with Google.
- Sign-in activity such as time and device, kept by the sign-in provider for security.
About directory entries, entered or imported by ward leaders:
- Name, household, phone, email, and address.
- Birth year and gender, used to group youth and to schedule speakers fairly.
- Current calling, speaking history, and activity RSVPs.
We deliberately do not collect membership record numbers, full birthdates, ordinance information, tithing or financial details, or ministering assignments. The importer discards those fields if they appear in an export.
Leaders also write things: meeting plans, agendas, announcements, and notes. Some notes are marked confidential and are only ever shown to the bishopric.
Ward leaders are the stewards
The person who creates a ward in Jethro accepts responsibility for its data. That leader and the bishopric decide who is invited, what role they hold, and when access is removed. Every screen enforces those roles on our servers, not just in the app. If you are a directory entry and want something corrected or removed, your ward leaders can do it immediately; you can also write to us and we will pass the request on or act on it directly.
How we use information
- To run the service: show the right ward to the right people, print programs, schedule reminders.
- To send email the ward has configured: invitations, activity reminders, and the Monday digest. Anyone can opt out of reminder email from their directory entry.
- To keep the service safe: audit logs of who changed what, and error reports so we can fix crashes.
- To answer support requests.
We do not sell information, share it with advertisers, or use it to train artificial intelligence models. We do not build profiles across wards.
De-identified Data and AI
Jethro may create de-identified and aggregated statistics from how Jethro is used, combined across many users, so that they cannot reasonably be linked to any person, family, household or organization (“De-identified Data”). We may use De-identified Data to operate, measure, improve and develop Jethro, including its analytics features, and Jethro owns it. We will not try to re-identify De-identified Data, and anyone we share it with must agree not to try either.
We never use personal information to train AI models. This includes member and household records, callings, contact details and any information that reveals religious affiliation and anything else that identifies a person. De-identified Data from Jethrois limited to usage statistics and is never offered to third parties. We do not sell personal information or share it for cross-context behavioral advertising.
Who else touches the data
We run on a small number of infrastructure providers, each under its own privacy and security commitments:
- Vercel hosts the website.
- Convex stores the database and runs scheduled jobs.
- Clerk handles sign-in and sessions.
- Resend delivers email.
- Google, only if you choose to sign in with Google.
- Sentry receives crash reports. Reports contain the error and page, not directory data.
A ward can publish a digital program for a Sunday. That public page shows what appears on a printed program: speakers’ names, hymns, and announcements the bishopric approved. It never shows contact information, and it exists only after a leader publishes it.
Youth and children
Wards include young people. Their names, birth years, and parents’ contact details may be entered by adult leaders so youth activities can be planned and parents notified. We do not knowingly allow anyone under 18 to create an account, and we do not send messages to youth directly. Parents may ask their ward leaders, or us, to correct or remove their child’s entry at any time.
How long we keep it
For as long as a ward uses Jethro. The ward owner can ask us to delete the ward and everything in it. Individual entries can be removed by ward leaders at any time. We complete deletion requests within 30 days, after which the information also ages out of backups. Account holders can delete their own account from their profile.
Security
Data is encrypted in transit and at rest by our providers. Access is checked on the server for every request against the roles a ward has granted. Confidential items are filtered before they leave the server. Changes to people, callings, and roles are recorded in an audit log visible to the bishopric.
Your choices and rights
You can ask us what we hold about you, ask for it to be corrected or deleted, and object to a use you disagree with. Write to support@myjethro.io. We answer within 30 days. Where you live may give you additional rights under local law, and we honor those.
Changes
If we change this policy in a way that matters, we will email account holders before it takes effect and note the date at the top of this page.
Contact
Jethro
30 E Broadway, Suite 203 #1053, Salt Lake City, UT 84111
support@myjethro.io
See also our Terms of Service.