How we protect children's data

Hey Burrow stores your church's information encrypted in Australia and keeps it separate from every other church. You and your invited volunteers can access your children and families according to your roles.

Every church is kept separate

Another church using Hey Burrow can't see or search your people. If an adult is a trusted person at two churches, each church has its own record for them.

Signing in

You, your volunteers and trusted people sign in with a one-time email code or a passkey. A passkey lets you use your device's face recognition, fingerprint or screen lock.

Removing a volunteer from Volunteers ends their access to your church.

Who in your church can see records

Volunteers can read child and family records, including medical notes, so they have the information they need in a room. The Owner also manages records, settings and access. See Who can see what: roles and permissions for the full permissions table.

What Hey Burrow staff can see

A small number of Hey Burrow staff can see your church's setup to help with support. This includes locations, rooms, sessions, the Owner, volunteers and your plan. Staff can't see children, trusted people or attendance records.

We keep our own record of each time a staff member looks at your church. It isn't part of your audit trail.

A permanent record of activity

Your church's audit trail records who did something and when, including sign-ins, changes to child records and check-ins and check-outs. While your church exists, these entries can't be edited or deleted by your church or by us.

Owners can look up an entry or export it from Settings, on the Audit log tab. See What your church's audit trail records, and why.

Where information is stored

Your church's data is stored encrypted in Sydney, Australia. It also travels over an encrypted connection between your device and Hey Burrow.

Questions typed into the help assistant are sent to OpenAI in the United States. Please leave personal details out of your questions. The assistant answers from help articles and can't see your church's records. Our Privacy policy lists the services we use.

Accreditation

Hey Burrow isn't accredited against a child safety standard. Your church remains responsible for meeting its safeguarding requirements. The audit trail and permissions table describe the records and access controls available to support your own processes.

Troubleshooting

• A parent wants to know how their child's information is protected. Share Is my child's information safe?.
• A volunteer can see something you think they shouldn't. Check their role against Who can see what: roles and permissions. If their access doesn't match, email us straight away.