MakingSpace

Privacy policy

How MakingSpace handles account and church-workspace information.

This policy applies to MakingSpace at makingspace.planofakind.com, including sign-in, church workspaces, public session links and question-box links.

Beta policy: check the items below before opening the service to paying churches. This version reflects the current product. Confirm the operational retention periods, provider data locations and privacy contact routing before treating it as final.

Who is responsible

MakingSpace is operated by Joshua Young, a sole trader trading as Plan of a Kind, 31 Worcester Road, Leicester, LE2 8HY. Contact: contact@planofakind.com.

For account administration, sign-in, billing and support, Joshua Young determines why and how the information is used. For information a church team puts into its workspace, the church decides why that information is used; Joshua Young processes it to provide and secure MakingSpace on the church's instructions. The church is responsible for telling its team members about its use of that workspace and for deciding what information belongs there.

Information the service handles

• Adult account information: sign-in email, account identifier, display name or username if supplied, and church membership and role.
• Church planning content: ministry-group details, session plans, risk-assessment templates, resources and teaching series that adult team members choose to save.
• Public question-box submissions: free-text questions and submission time, follow-up status and a pseudonymous anti-abuse fingerprint. The form does not ask for a name or email address.
• Support messages and replies sent to the MakingSpace developer team.
• Subscription and billing status. Card details are handled by Stripe; MakingSpace does not receive or store full payment-card numbers.
• Account sign-in activity: the account identifier, whether a successful sign-in or explicit sign-out occurred, and the time. MakingSpace does not record IP addresses or device details for this activity history.

Young people's information

MakingSpace does not create young-person accounts or ask churches to enter young people's names, contact details, attendance, pastoral notes or safeguarding records. The app is a planning tool for adult ministry teams. The public question box does accept free-text submissions without asking for a name or email. A young person could still include identifying or sensitive details in a message, so the message itself may contain personal information. The church's authorised leaders can read the submitted message. The form advises people not to include names or details that identify themselves or anyone else. If identifying or safeguarding information is submitted, the church should handle it under its own safeguarding process and remove it from MakingSpace when no longer needed.

Why information is used

Information is used to provide sign-in, account and church-workspace features; save and display planning content to authorised team members; deliver question-box messages to church leaders; respond to support requests; manage subscriptions; prevent abuse; and maintain the security and operation of the service.

Lawful bases

For account and subscription administration, we use information where it is needed to provide the service or take steps you request before entering a contract. We use billing and transaction records to meet legal accounting and tax duties. We use limited technical and anti-abuse information where needed for our legitimate interests in securing and operating MakingSpace, balanced against people's rights. A church using a workspace is responsible for identifying and explaining its lawful basis for the content it chooses to process; we process that workspace content on the church's instructions.

Who can access information

Church workspace information is available to members of that church according to their assigned role. Public session links show only the content selected for sharing. A question submitter cannot see the church's question feed. Support tickets are visible to the author and MakingSpace developers, not other church members. Cloudflare serves the application; Supabase provides authentication and database services; Stripe processes payments and billing. These providers process information under their service terms. Provider-specific processing locations and international-transfer safeguards must be confirmed against the current provider account settings and agreements.

Retention and deletion

Sign-in activity is retained for up to 90 days and is visible only to MakingSpace developers for account support and service security. Activity events are deleted after that period.

Account information is kept while the account is active. Church workspace content remains available until an authorised user deletes it or the church workspace is deleted. Support messages are kept to respond to and manage the request. Billing records may be retained where required for accounting, tax, fraud prevention or legal claims. Deletion removes information from the active service where supported; encrypted backups and security records may remain for the provider's configured retention period or where retention is legally required. The exact backup expiry and support-ticket retention periods must be confirmed from the current provider settings and operational process before general release.

Security

MakingSpace uses signed, secure, HTTP-only session cookies, role-based workspace access and database row-level security. Public sharing and question-box links use unguessable tokens. No internet service can guarantee absolute security; report suspected unauthorised access to the contact below.

Your rights and choices

You can ask the responsible organisation to access, correct, delete or restrict personal information, or object to certain uses, subject to applicable law. For workspace information, contact your church administrator first. For account, billing or support information, contact Joshua Young using the details below. You may complain to the UK Information Commissioner's Office at ico.org.uk/make-a-complaint.

Contact

Joshua Young, trading as Plan of a Kind, 31 Worcester Road, Leicester, LE2 8HY. Email: contact@planofakind.com. The email address must be monitored for privacy requests before this policy is relied on for launch.