Privacy Policy

Last updated: September 29, 2026

My Next Steps (“My Next Steps,” “we,” “us”) provides a platform that lets churches and other organizations (“Organizations”) offer a guided spiritual growth assessment and personalized next-step recommendations to their members and visitors (“Members”). This policy explains what information we collect through that platform, how we use it, and the choices you have.

This policy applies to the My Next Steps marketing site, every Organization’s hosted subdomain (for example yourchurch.mynextsteps.org), and the staff and admin tools used to configure and run an Organization’s assessment.

Information we collect

We collect information directly from the people who use the platform:

• Organization signup requests.When someone requests an Organization on the platform, we collect the organization name, the requester’s name and email address, a requested subdomain, an optional message, and any social/website links they choose to add.
• Staff and admin accounts. Name, email address, and a hashed password for anyone an Organization invites to help manage its assessment, recommendations, or team.
• Member accounts. Name, email address, and either a hashed password or a one-time sign-in link, plus whichever notification preferences a Member sets in their profile.
• Assessment responses.The answers a Member (or an anonymous visitor) gives while taking an Organization’s assessment, including any free-text reflections they choose to write. If someone completes an assessment anonymously and later chooses to save their plan, we also store the name they give us and the IP address the save request came from, so we can match a returning visitor to their earlier answers.
• Usage and security information. Timestamps, session identifiers, and IP addresses associated with requests to the platform, which we use to keep accounts secure, enforce reasonable rate limits, and maintain an audit log of administrative actions (for example, who suspended a tenant or approved a signup request).

We do not knowingly collect more than an Organization needs to run its assessment, and we don’t use advertising trackers, ad-network cookies, or third-party analytics pixels on the platform.

How we use information

We use the information above to:

• Operate the assessment, recommendation, and account features described above.
• Authenticate staff, admin, and Member accounts, and keep each Organization’s data separate from every other Organization’s.
• Send the messages a person has asked for or that the service needs to function - for example, a staff invitation, a one-time sign-in link, or a notice about an assessment a Member has opted into.
• Detect and prevent abuse, and investigate security incidents.
• Maintain, troubleshoot, and improve the platform.

How information is shared

An Organization’s staff and admin users can see the assessment responses, saved plans, and profile information of that Organization’s own Members - that visibility is core to how the platform is meant to be used, so a church’s team can follow up and offer support. Staff and Members at one Organization cannot see another Organization’s data.

We do not sell personal information, and we do not share it with third parties for their own marketing purposes. We share information only:

• With service providers who help us operate the platform (for example, email delivery), and only as needed to provide that service;
• If required to comply with a law, regulation, or valid legal process; or
• To protect the rights, property, or safety of My Next Steps, an Organization, or a Member.

Cookies and sessions

The platform uses a session cookie to keep you signed in to your account. We don’t use third-party advertising or tracking cookies.

Data retention

We keep account and assessment information for as long as the related account or Organization is active, or as needed to comply with our legal obligations, resolve disputes, and enforce our agreements. An anonymous assessment that’s never claimed or saved is kept only as long as needed to let that visitor return to it.

Your choices

• You can review and update your name, email, and notification preferences from your profile at any time.
• You can decline to save or claim an anonymous assessment result.
• You can ask us to delete your account or personal information by contacting us at the address below; we’ll do so unless we need to keep some information for a legitimate business or legal reason.

Children’s privacy

The platform isn’t directed at children under 13, and we don’t knowingly collect personal information from a child under 13 without appropriate parental or guardian consent. If you believe a child has given us personal information without that consent, please contact us and we’ll delete it.

Security

We use reasonable technical and organizational measures to protect the information in our care. No method of storing or transmitting information is completely secure, so we can’t guarantee absolute security.

Changes to this policy

We may update this policy from time to time. If we make a material change, we’ll update the date at the top of this page.

Contact us

Questions about this policy or your information can be sent to hello@mynextsteps.org.

This page is a plain-language template describing how the platform actually handles data, not a substitute for legal advice - it should be reviewed by a qualified attorney (and have the platform operator’s legal name, business address, and governing jurisdiction added) before being relied on for compliance purposes.