Privacy Notice

Effective October 12, 2026 · Version 2026-10-12-1
Operated by Dodec Consulting LLC

Good community starts with trust. This notice explains how Dodec Consulting LLC, the operator of backrow.social, handles information when you visit, create an account, or share with your community.

At a Glance

Here is what to know before you share. The sections below explain the details and your choices.

• Your profile audience and each feature’s access rules determine who can see what you share.
• Your full birthday, signup phone number, and personal ZIP code stay off your public profile.
• Church affiliation is separate from private Team membership and does not verify employment.
• Weekly Location emails are opt-in. Account verification, recovery, and other service emails are separate.
• Outside media stays unloaded until you choose its preview. The current app has no advertising pixels or third-party audience analytics.
• Contact us to request access, correction, or deletion. Never send your password.

What We Collect & Why

Account information includes your email, authentication records, agreement acceptance, church-community connection, and date of birth. Your full birthday checks the current 18-and-older eligibility rule. A signup phone number is optional. Website signup requires a personal US ZIP code; existing members can complete it in Your Area. Super Admins can view private member ZIP areas in an administrative community map. ZIP-area positions are approximate and never identify a home address. The map is not available to other members or the public.

Profile information can include your name, chosen profile URL, city, church or organization, campus, specialties, job, bio, work experience, availability, social links, and photos. We use it to show your profile to the audience you choose and help permitted viewers find people. Your job and full bio are optional.

We store the content and actions needed to provide conversations, replies, reactions, direct messages, events, attendance responses, resources, marketplace listings, company pages, and private Teams. Applications, invitations, membership decisions, review notes, notification preferences, and feedback let us manage access, support members, and review submissions.

Service providers process technical information such as IP addresses, request details, and security logs to deliver and protect backrow. For signed-in members, backrow. records a recent activity timestamp and sign-in information for authorized staff to support engagement. The activity recorder does not store the text you type or a history of the pages you visit.

Who Can See Your Information

Public profiles are available without signing in and can be copied or shared. Signed-in profiles require a signed-in viewer. Location-only profiles require access under the shared-Location rules. backrow. marks member profile routes as noindex, but that is a request to search engines, not an access control or a guarantee that a public URL will never appear elsewhere.

Location and Team content follows its own membership rules, not just your profile audience. Private Teams, messages, and member-only pages are not included in the public sitemap. Company management permissions are separate from personal Location and Team membership.

An optional church affiliation helps visible members find others at that church. It may reveal information about your religious connection. Selecting a church does not verify employment or grant access to a church’s private Team. Consider your profile audience before sharing it.

Your full signup birthday, signup phone number, and personal ZIP code are not public profile fields. Personal ZIPs remain in separate storage; a restricted database function allows active Super Admins to read them for the administrative map. Churches, campuses, and companies supply their own organization ZIP codes, separate from personal ZIPs. You can separately choose to share a birthday month and day in Location catch-up emails through Notification Settings. That choice does not share your birth year.

Company pages and approved global resources can be public. Business contact details deliberately added to a company page or resource can be visible with that page or resource. Authorized reviewers can see applications and pending submissions; backrow. management can inspect review queues and member records needed for administration.

Messages are visible to their intended participants. backrow. does not offer end-to-end encryption. Authorized operator or provider access may be necessary for service operation, security, legal requirements, or investigating a report. Do not upload counseling records, passwords, confidential personnel files, or information about children.

Providers & Outside Services

Supabase provides authentication, databases, and file storage. Its infrastructure uses Cloudflare bot protection. Render hosts the website. Resend delivers applicable account, notification, and opted-in weekly emails. Encrypted release backups are stored in private GitHub artifacts. These providers process the information needed for those functions.

The administrative map uses OpenStreetMap street tiles and a server-held GeoNames postal-area catalog. No member name, personal ZIP, or address is sent to a geocoding service. A map viewer requests street tiles for the visible area from OpenStreetMap. Fonts and branding are served by backrow. rather than requested from Google Fonts during your visit. Outside media, including YouTube, Vimeo, Spotify, Google Docs, and linked audio, video, PDFs, or images, loads only when you choose a preview. Opening an external link also connects you to that service. Its own privacy practices apply.

Providers may process information in the United States or other countries where they operate. This notice does not promise that all information stays in one country. We may disclose information when needed to meet legal obligations, protect rights or safety, or investigate misuse, subject to applicable law.

The current app does not include advertising pixels or third-party audience analytics. Our Cookies & Browser Storage notice explains the storage used for sign-in, draft recovery, navigation, and optional device badges.

Your Choices & Privacy Requests

Edit Profile lets you update your details and choose your profile audience. Notification Settings controls in-app preferences, optional device badges, weekly emails, and optional birthday sharing. You can unsubscribe from weekly catch-up emails using the link in each email. Essential verification, password recovery, and other account or membership service emails are separate.

In the iPhone app, open Your Account, then Safety & blocked members to delete your account. During onboarding, use Delete my account under Your account. Confirm with your current password. This removes your profile, membership records, personal content, and uploaded Team files. Shared Teams and company spaces remain, even if you were their only owner; other members’ contributions remain. Copies already delivered outside backrow. cannot be recalled, and provider backups follow their retention schedules.

You can also contact the operator to request a copy of your information, a correction, account closure, or deletion. Tell us what you need using your account email where possible. We may verify your identity and explain any lawful limits on the request. Do not send your password, identity documents, or other highly sensitive records in an initial email.

Depending on where you live and which laws apply, you may have additional rights to access, correct, delete, restrict, or object to processing, obtain a portable copy, withdraw applicable consent, or complain to a privacy regulator. Contact us with your request. This notice does not waive those rights or treat accepting the User Agreement as blanket privacy consent.

Changing an audience or closing an account cannot retrieve screenshots, downloaded documents, messages already delivered, or copies outside backrow.’s control. Ask before sharing someone else’s contact details, photo, or story.

Retention & Security

We keep information needed to provide the service and handle security, moderation, disputes, and legal obligations. Retention varies by record and provider; this notice does not promise immediate erasure of every record or backup. Release-backup artifacts currently have a 30-day expiry. That does not describe the retention of all provider backups or information held outside backrow.

backrow. uses HTTPS, authenticated access, database access rules, and encrypted release backups. No service can guarantee absolute security. Protect your account, use a unique password, and log out on shared devices. Saved drafts and sign-in storage can remain on a browser until cleared as described in Cookies & Browser Storage.

Adults Only & Notice Updates

backrow. accounts are currently for people 18 and older. Do not create an account for a child. Contact us if you believe a child’s information has been submitted.

We identify changes with the notice date and version. If we introduce a use that requires a new choice or consent, publishing a notice alone does not provide it. Existing member access and content visibility are not changed by this notice.

Contact the Operator

For agreement questions, privacy requests, copyright concerns, account closure, or review of a moderation decision, contact Dodec Consulting LLC at sam@dodec.org. Include the relevant URL where possible. Do not email passwords or highly sensitive records.