Harvest Covenant respects the privacy of our students, parents and guardians, faculty, coaches, staff, and other members of our community.
This Privacy Policy explains how Harvest Covenant collects, uses, stores, shares, and protects information when individuals use our website, mobile application, school portals, communication services, Harvest TV, and related digital services.
By using Harvest Covenant's services, users acknowledge the practices described in this Privacy Policy.
1. Information We Collect
The information Harvest Covenant collects depends on a user's relationship with the school and the services they are authorized to access. School-managed accounts may include parents and guardians, students, faculty, coaches, staff, and administrators.
Account and Contact Information
This may include:
- Name
- Email address
- Account identifiers (including internal user IDs and authentication identifiers)
- User role and permission-related account information
- School-related account information needed to provide access
Sign-in for the website and mobile app uses email and password authentication provided through Firebase Authentication (Google). Harvest Covenant does not store user passwords in plaintext. Password authentication credentials are managed by Firebase Authentication according to Firebase's practices.
School and Educational Information
Depending on role and permissions, Harvest Covenant systems may process information associated with school operations and authorized educational services. Examples of categories that may appear in our systems include:
- Household and family contact records
- Student roster and enrollment-related profile fields
- Admissions and application information submitted to the school
- Documents and form submissions associated with school processes
- Events, calendar, task, and communications records used in school operations
- Staff and faculty onboarding or operational records, where applicable
Access to these categories is limited by role- and permission-based controls. Not every user can view every category of information.
Communications and User Content
Harvest Covenant provides private messaging for authorized members of the school community. Messaging is not designed as a public social network or public chat room.
Messaging information may include:
- Direct messages and group messages
- Message content
- Sender and recipient information
- Timestamps and related metadata needed to deliver messaging
Billing and Tuition Information
Authorized parents or guardians may be able to view information such as invoices, billing balances, payment status, and other applicable tuition or account information.
When an eligible user chooses an online payment option, payment processing is handled through Harvest Covenant's external payment provider, currently Stripe (for example, via Stripe Payment Links or Stripe-hosted checkout experiences opened from the website or mobile app). Payment card details entered into Stripe's payment experience are processed by Stripe according to Stripe's privacy and security practices. Harvest Covenant does not store full credit or debit card numbers entered in those Stripe payment flows.
Harvest TV, Camera, and Microphone
Authorized users may access Harvest TV video and live-streaming features. The mobile app may request access to the device camera and microphone when required for authorized live broadcasting or related audiovisual functionality.
These permissions are not used to continuously record the device. Users can manage camera and microphone permissions in their device settings.
Live audiovisual streams may be processed by Agora (or another live-video provider configured by Harvest Covenant) as necessary to deliver live-streaming functionality to authorized participants.
Device and Technical Information
To operate, secure, troubleshoot, and improve the services, certain technical information may be processed, such as:
- Network and request information associated with using the website or APIs (for example, IP address and standard server logs processed by our hosting infrastructure)
- Session and authentication tokens stored on the device (on the mobile app, access tokens may be stored using Expo Secure Store / platform secure storage; Firebase Auth may use local persistence such as AsyncStorage)
- Limited local preferences on the mobile app (for example, remembering whether a user last signed in as Parent, Student, or Staff)
- On the website, Firebase Analytics may process usage analytics when Analytics is configured for the site
The Harvest Covenant mobile app does not currently initialize a separate analytics, advertising, crash-reporting, or push-notification SDK beyond the Firebase Authentication and live-video components described in this Policy.
2. How We Use Information
Harvest Covenant may use information to:
- Authenticate authorized users
- Provide school portals and digital services
- Provide role- and permission-based access
- Facilitate private messaging among authorized users
- Provide billing and tuition information
- Process or facilitate tuition payments through external payment providers
- Operate Harvest TV and authorized live-streaming features
- Provide school administrative and operational functionality
- Maintain security and help prevent unauthorized access
- Provide technical and account support
- Maintain and improve Harvest Covenant's digital services
- Comply with applicable legal, administrative, financial, or educational obligations
Harvest Covenant does not use the mobile app to build advertising profiles for third-party behavioral advertising.
4. Data Storage and Security
Harvest Covenant uses reasonable administrative, technical, and organizational safeguards designed to protect information. Communications with our website and APIs are protected in transit using HTTPS where applicable.
On the mobile app, authentication/session information may be stored using platform-appropriate secure storage (Expo Secure Store / device keychain-style storage). Firebase Authentication may also persist session state locally on the device.
No method of transmission or storage is completely secure. We work to protect information, but we cannot guarantee absolute security.
5. Data Retention
Harvest Covenant retains information for as long as reasonably necessary to:
- Provide school services
- Maintain school and administrative records
- Meet educational obligations
- Maintain financial records
- Resolve disputes
- Enforce agreements
- Meet legal or regulatory obligations
Retention periods may differ depending on the type of information. Educational, administrative, and financial records may need to be retained even after an account is no longer actively used.
6. Account Access, Correction, and Deletion Requests
Harvest Covenant accounts are school-managed and are not created through public registration in the mobile app.
Users who want to correct account information, request access to information, request account closure, request deletion of eligible personal information, or ask questions about retained information should contact info@harvestcovenant.org.
Harvest Covenant may need to verify the requester's identity before fulfilling a request. Some records may need to be retained when required for legitimate educational, administrative, financial, contractual, security, or legal purposes. Immediate deletion of every record is not always possible.
7. Children's and Student Privacy
Harvest Covenant serves students in grades 9–12. Some students may be minors. Our digital services are provided as part of the school's educational and administrative relationship with students and families.
Accounts are provided or managed by Harvest Covenant rather than being offered as unrestricted public consumer accounts. Harvest Covenant takes student privacy seriously and limits access to school information based on roles and permissions.
Parents or guardians with questions concerning a student's information may contact info@harvestcovenant.org.
8. Third-Party Services and Links
Harvest Covenant services may contain links to or integrations with third-party services. Those services may maintain their own privacy policies and practices. Examples include:
- Stripe — stripe.com/privacy
- Google / Firebase — firebase.google.com/support/privacy and policies.google.com/privacy
- Agora — agora.io/en/privacy-policy
We encourage users to review the privacy policies of third-party services they choose to use.
9. Tracking and Advertising
The Harvest Covenant mobile app is not designed to track users across third-party apps or websites for targeted advertising. The production mobile app does not include advertising SDKs or App Tracking Transparency-based advertising tracking.
The Harvest Covenant website may use Firebase Analytics when Analytics is configured, which can help us understand how the website is used. Website analytics, if enabled, are used to operate and improve our digital services rather than to sell personal information for third-party advertising.
10. External Payments
Certain tuition or school-related payments may be completed through an external payment provider such as Stripe. These payments relate to Harvest Covenant's applicable school services. Payment information entered into a third-party payment provider's interface is subject to that provider's privacy and security practices.
Apple does not process Harvest Covenant tuition payments made through Stripe payment links or Stripe-hosted checkout opened from the app or website.
11. Changes to This Privacy Policy
Harvest Covenant may update this Privacy Policy periodically to reflect changes to services, technology, practices, or applicable requirements. The “Last Updated” date at the top of this page indicates when the policy was most recently revised.
12. Contact Us
For questions about this Privacy Policy, privacy practices, account information, or privacy requests, contact:
Harvest Covenant
140B Purcellville Gateway Dr. #811
Purcellville, VA 20132
United States
Email: info@harvestcovenant.org
Website: www.harvestcovenant.org
App Support: harvestcovenant.org/app-support