Privacy Policy
Last updated October 2, 2026
- We collect what's needed to run your account and the tools you use, and nothing more.
- We don't show ads, and we don't sell or rent anyone's personal information.
- Children don't create accounts. They join with a code and a first name chosen by their catechist or parent.
- You can ask us to see or delete your information at any time.
Who we are
Sunday School Faith ("we", "us") provides FaithQuiz, Lesson Studio, the marketplace and the accounts that connect them, at sundayschoolfaith.com and its subdomains. The service is built and hosted by Coastal Carolina Tech. Questions about this policy go to hello@sundayschoolfaith.com.
What we collect
Your account. Your name, email address, password, the kind of account you created (just you, a family, a parish, a classroom or a school) and its name. We never store your password itself, only a salted, one-way hash of it.
What you make. The quizzes, lessons, classes and presentations you create, and anything you choose to publish to the marketplace.
Signing in. A cookie that keeps you signed in, the time you last signed in, and, for a short time, counts of sign-in attempts by network address so we can slow down anyone trying to guess passwords.
Children and students. When a group plays FaithQuiz, players enter a team name and the first names or nicknames their host asks for. When students use Lesson Studio's companion, they join a class with a code, a display name and a 4-digit PIN, and their quiz answers and reflections are kept for their catechist. Children never give us an email address, and no child can create an account.
Early-access sign-ups. If you joined the early-access list on our home page, the details you gave there.
How we use it
To run the service: sign you in, keep your work, show your library, let your group play and your students learn, send the emails you ask for (such as a password reset), and keep the service secure. We review marketplace submissions before anyone else can see them.
What we don't do
We don't show advertising. We don't sell, rent or trade personal information. We don't use third-party tracking on the pages children use (play.sundayschoolfaith.com and learn.sundayschoolfaith.com). If we add analytics to our public marketing pages, we'll say so here first.
Who else handles it
The service runs on Cloudflare, which hosts our code and stores our data. Our email is sent through our own mail service, run by Coastal Carolina Tech. When a catechist uses Lesson Studio's AI assistant, the text of the lesson they're working on is sent to the AI provider that powers it (or to the provider whose key they supplied) to produce a draft; students' work is not sent. We share information with others only if the law requires it.
How long we keep it
Your account and your work stay until you delete them or ask us to. Sign-in attempt counts are kept for minutes to hours. Sessions expire after 30 days without use. When you ask us to delete your account, we remove it and the work stored with it, except anything we must keep by law.
Your choices
You can see, correct, download or delete your information. Write to hello@sundayschoolfaith.com from the address on your account. A parent or guardian can ask us to delete anything a child entered by writing to the same address, or simply ask the child's catechist to remove it.
Security
Everything travels over encrypted connections. Passwords are stored only as salted hashes. Session cookies can't be read by scripts on the page. No security is perfect, so if we ever learn of a breach affecting you, we'll tell you.
Changes
If we change this policy in a way that matters, we'll update the date above and tell account holders by email before the change takes effect.