Porchlight

Privacy policy

Last updated October 10, 2026

The short version

Porchlight is a small, non-commercial app for groups that meet regularly: church small groups, clubs, neighbors and friends. We only collect what's needed to run your group, we never sell it, and we never use it for advertising.

What we collect

Account details: your name, email address, and (if you sign in with Google) your Google profile photo and account ID. If you create a passkey, we store its public key — never your fingerprint or face data, which stay on your device.

What you put in: the groups you join, your RSVPs, your household, and (if you add them) your home address for hosting and your dietary needs.

Notifications: if you turn on notifications, your browser's push subscription so we can send them.

Basic logs: a record of actions like joining a group or changing a gathering, used to keep the service running and to help if something goes wrong.

Who can see what

Your name, photo and RSVPs are visible to everyone in your groups. Your home address is shown to your group only for the dates you host. Your dietary needs are shown to your group's leaders and to hosts of gatherings you're coming to. Your email is visible to your group's leaders and your household. The site administrator can access data to fix problems.

Google sign-in

When you sign in with Google we request only your basic profile (name, email, and photo). We don't access your Gmail, contacts, calendar, or any other Google data. (The optional calendar feed is a link you add to your calendar yourself; we never connect to it.) Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Services we use

The app is hosted on Cloudflare. Emails are delivered by Resend. Push notifications are delivered through your browser maker's push service (Apple, Google, or Mozilla). These providers process data only to deliver the service.

Keeping and deleting data

Your data is kept while your account exists. Sign-in sessions expire after a year of inactivity, and notification history is deleted after 90 days. To delete your account and everything associated with it, email welcome@porchlight.tech.

Contact

Questions? Email welcome@porchlight.tech.