Privacy Policy

Last updated November 3, 2026

Who this covers

Olive Leaf is run by 5 Loaves Digital ("we", "us"). This policy covers the Olive Leaf app, its sign-up pages, each church's public page, and the share links churches send (sign-up sheets, RSVPs, polls and wedding pages), and the Market, both inside the app and at oliveleaf.app/market/. Each church decides what goes into its own Olive Leaf and who can see it; for most questions about your details, your church's admin is the first person to ask.

What we hold

• The church directory, as your church enters it: household names, addresses and where each address is on the map, phone numbers, birthdays, anniversaries, children's names and birthdays, church roles, notes and photos.
• Your sign-in: your name and email address, and which household you belong to. Passwords are handled by our sign-in provider and stored only in scrambled (hashed) form — we never see them.
• What your church shares in the app: announcements, calendar events, documents and files, sign-ups, RSVPs (including guests' names, party size and any request for somewhere to stay), which homes offered to keep guests, poll answers, recipes, readings and wedding pages.
• Guests using a share link give only what that page asks for, such as a name on a sign-up sheet.
• Giving, if your church takes gifts through Olive Leaf: each gift's amount, date and fund, whether it came from a bank account or a card, the household and sign-in it came from, and any repeating gift you set up. If you ask us to remember your bank account for your next gift, Stripe keeps it on your church's Stripe account until you forget it under Give. The bank account or card itself is held by Stripe on your church's own Stripe account; we never see or store full account or card numbers.
• Billing: the church's billing contact and plan. Payments are processed by Stripe; we see only things like the last four digits of a card or the bank's name, never full account numbers.
• Notifications, if you turn them on: the address your browser's notification service gives us for your device, and which browser it is, so we can send to it. Turning notifications off removes them.
• The Market: your posts and their photos, the contact details you put on a post, the town and state you give, your store, and whether you show your congregation's name. If you joined the Market on its own, also your name, your email address, and that you said you're 18 or older.
• Messages you send in the app, and anyone you block or report.
• Market payments: what was bought or booked, the price, the fees and any refund. For each payment, the buyer's name, email address and phone number, and the address it ships to if it's shipped, along with its tracking number. For a seller, the Stripe account their money goes to, and what Stripe says it still needs. Stripe collects a seller's date of birth, Social Security digits and bank details itself; we never see them. When a seller's sales in the app pass the IRS's reporting limit, or their state's, we report their name, address, tax number and yearly total to the IRS and the state on a Form 1099-K, through Stripe, as the law requires.
• Places to stay: bookings, what the host tells a booked guest (such as the door code), reviews, and any calendar links a host gives us from other sites such as Airbnb or Vrbo.
• If you ask to look around: the name, church, email address and phone number you put in the form on our site.
• Technical records: like any website, our servers log basic details of each request (such as IP address, browser type and time) to keep the service secure and working. We also note which days each sign-in was used.

How we use it

Only to run Olive Leaf for your church: showing the directory and the rest of the app to the people your church allows, sending account emails (invites, confirmations and password resets) and the notifications you've turned on, passing gifts to your church through Stripe, billing the church, running the Market (showing posts, passing payments to sellers, sending a booked guest their details), keeping the service secure, and helping when your church asks for support. If you asked to look around, we use what you gave us to answer you and help you get started. We don't sell or rent information, we don't show ads, and we don't use your church's information to market anything to you.

Who can see it

• Members of your church who have signed in. Admins decide who joins and which tools each person can use; parents can give the other adult in their household, and their children, their own sign-ins.
• Guests with a share link see only the single page that link opens — never the directory. One of those pages, where homes say whether they can keep guests, lets a home look itself up by name; it shows names only, never an address or phone number.
• Anyone can open your church's public page without signing in. It shows the church's name, welcome line, service times, where it meets, a link to its live audio if it has one, and its calendar (each event's title, date, time, place, links and timeline, but not its notes), along with any documents and notices your church's admins mark for visitors. The directory is never on it.
• Visitors with your church's visitor code, if your admins have set one. Anyone who enters it can see, for 30 days, what a printed directory would show: household names, phone numbers, addresses, where each home is on the map, and children's names — not birthdays, notes or roles. There is no visitor code unless an admin sets one, and changing or removing it ends every visit it has opened.
• Giving. The adults of your household see your household's gifts; a son's or daughter's sign-in sees only its own. Your church's admins, and the people your church gives the giving report to (usually its deacons), see the church's gifts by household. Other members don't.
• Other churches of your denomination, on the congregations' map. When the Olive Leaf team has confirmed which denomination your church belongs to, other confirmed churches of that same denomination can see your church's families on the map: each household's name and the first names of husband and wife, their phone numbers, their address and where it is on the map, and the church jobs they hold. Never children, birthdays, anniversaries, notes or photos. Your church's admins can take the whole church off the map. A family can keep its phone numbers and address off it: its name and church jobs still show, and someone from another church can ask for its details through Olive Leaf, which reach the asker only if the family agrees to share them. Churches that aren't confirmed, or belong to another denomination, see none of this.
• Otherwise, other churches never see your church's information. Each church's information is kept apart by the database itself, not just by the app. Apart from the congregations' map, the Market is the one place people from different churches meet, and only through what is posted there.
• In the Market. A post for "Our congregation" is seen only by your church's members. A post for "All congregations" is seen by everyone in the Market, including people who joined it on their own. Anyone on the web can see it without signing in, but without your name, phone number or email address. Signed-in people see the contact details you put on a post. When someone pays you in the app, you see their name, email address and phone number, and where to ship it; they see the contact details on your post. A guest gets a place's exact address once the stay is booked, and the door code the day before; before that, the map shows only roughly where it is. A place's reviews are shown with it. A message is seen by the people in that conversation. If it's reported, we read it, and so do the church's admins if it was between their members. A reported post goes to the church admins of the person who posted it, or to us.
• Our support team can open a church to help when something goes wrong. Every time we do, it's recorded in that church's audit trail, which the church's admins can read.
• We'll disclose information if the law requires it, and only as much as required.

Services we rely on

We use a small number of trusted providers, only to run Olive Leaf:

• Netlify — hosting, sign-in, and the database and file storage where your church's information is kept. The look-around form on our site is kept by Netlify too.
• Stripe — payments: your church's subscription, if your church takes gifts through Olive Leaf, the gifts, which Stripe handles on your church's own Stripe account; and payments in the Market. To set up a seller, we send Stripe the seller's email address and phone number, and Stripe asks them for the rest.
• Airbnb, Vrbo and similar sites — if a host gives us their place's calendar link from one of these sites, our servers read that calendar to keep the nights in step.
• Maps — the maps are Google Maps, with Google's satellite view and Street View; where Google Maps isn't available, the map pictures come from OpenStreetMap and, for the satellite view, Esri. Your browser loads them directly, so Google (or those services) sees your IP address and the part of the map you're looking at. The pins for households and places to stay are drawn on your device: Olive Leaf doesn't send your directory to Google. To put a household on the map, or to suggest an address as it is typed, the address — only the address, never a name — is sent to an address-lookup service: the US Census Bureau's geocoder, OpenStreetMap's Nominatim, Photon (by komoot) or Google Maps.
• Google Fonts and public code libraries (unpkg, cdnjs, jsDelivr) — typefaces and open-source code your browser downloads when the app loads. Like any web request, these see your IP address.
• QR codes — the QR code on a printed directory is drawn by goQR.me (api.qrserver.com). It is sent the app's web address and nothing else.
• Notifications — if you turn them on, they reach your device through your browser's own notification service (Apple, Google or Mozilla, depending on the browser).

Some buttons open another service when you tap them — directions in Google Maps, a message in WhatsApp, the church calendar in Google Calendar. What you do there is covered by that service's own policy.

On your device

Olive Leaf keeps your sign-in, and a copy of your church's directory, in your browser's storage so the app opens quickly. Signing out removes them. A visitor who enters a church's visitor code has that visit remembered on their device for 30 days. We don't use advertising or tracking cookies.

Children

A household in the directory may list children's names and birthdays, added by their parents or the church's admins.

A child doesn't sign up on their own. A parent can give a son or daughter on their household's list their own sign-in; for that we hold the email address the parent gave and the child's name, and the sign-in belongs to that household. Olive Leaf doesn't check anyone's age. Nobody under 13 can sign up for an account themselves; a younger child has a sign-in only if a parent gives them one, and by doing so the parent consents to it. The church's admins can take it away at any time; a parent who changes their mind can ask them, or us.

The Market is for grown-ups: a child with their own sign-in can't post, buy or book there, and anyone who joins the Market on its own must say they're 18 or older.

If you think a child under 13 has a sign-in their parent didn't give them, or has given us information directly, contact us and we'll delete it.

How long we keep it

We keep your church's information while your church uses Olive Leaf. Families can update their own details; admins can change or remove households and take away anyone's access. When a church leaves, we delete its information on request within 30 days, and copies in backups are deleted as those backups expire. Stripe keeps its own record of your church's payments to us, and of payments in the Market, under Stripe's rules; and of gifts in your church's Stripe account, under Stripe's rules and your church's. A Market post you take down, and your store if you close it, are no longer shown. To delete an account you made just for the Market, contact us.

Keeping it safe

Every connection to Olive Leaf is encrypted. Each person has their own sign-in; a person sees only the churches they belong to; and inside a church, what each person can change depends on their role. No system is perfectly secure, but we take care, and if something ever goes wrong that affects your information, we'll tell your church's admins promptly.

Your choices

You can see and update your own household's details in the app, turn notifications off, and pause or stop a repeating gift under Give. In the Market, you can change or take down your posts, close your store, and choose whether your congregation's name is shown. To correct or remove anything else, ask your church's admin. You can also contact us to ask what we hold about you, or to delete your sign-in.

Changes to this policy

If we make a significant change, we'll tell church admins before it takes effect, and update the date at the top.

Contact us

carson@5loavesdigital.com