Is my child's information safe?

Yes. Your child's details are encrypted, only your church can see them, and only you and the other trusted people named for your child can collect them.

Who can see your child's details

Only your church. Your church holds your child's information, and Hey Burrow stores it for them.

Hey Burrow keeps every church separate. Another church using Hey Burrow can't see your child or search for them.

Inside your church, your child's details are visible to the church's Owner and the volunteers they've invited. Volunteers see less than the Owner does. Both see medical notes and allergies you've given.

Who can collect your child

Only you and the other trusted people named for your child.

Each person is invited and has to accept. Nobody is added by us, or by turning up and giving a name.

The adult who first added your child is their primary trusted person, and only they can add or remove other trusted people. If you added your children, Letting someone else collect your child shows you how to add or remove people. If someone else added them and named you, you can check those children in and out, and the primary person manages who else can. Your church's Owner can also add a trusted adult.

How you sign in

Signing in sends a code to your email. The code works once.

Because the code goes to your email, anyone with access to your email could sign in as you, so a strong password on that account keeps your Hey Burrow sign-in safe too.

What gets recorded

Every action in your church is recorded, including every sign-in and every change to your child's details. While your church exists, nobody can edit or delete those records, including your church and us. If you ask your church what happened on a particular day, they can answer from the record.

Where the information lives

Your child's details are stored encrypted in Australia, and they travel to and from your phone over an encrypted connection.

Your church's Owner and volunteers can type questions into a help assistant, and those questions are sent to OpenAI in the United States. Your child's details are never sent to it, because it only uses help articles and can't see your church's records.

Troubleshooting

• You want your child's information removed. Ask your church, because they hold the information and we host it for them. Your church may be required by law to keep some records, so it might not be able to remove everything.
• You think someone can collect your child who shouldn't be able to. Check your trusted people list and remove anyone who shouldn't be there. Then tell your church, since they can see the same list.
• You want more detail than this covers. Read our Privacy policy, linked under the forms in check-in. It also covers how we handle information on your church's behalf, and your church's Owner can answer questions about your family's records.