Privacy Policy

Effective date: October 26, 2026

This Privacy Policy explains how Chris Unseth, an individual doing business as Be Small ("Be Small," "we," "us," or "our"), collects, uses, shares, and protects personal information through besmall.org, app.besmall.org, our emails and text messages, and related services (the "Services").

The short version: we collect what is needed to run small groups for churches and ministries. We do not sell your personal information, we do not use it for targeted advertising, we do not use it to train artificial intelligence models, and we never share your mobile number for marketing.

1. Who Is Responsible for Your Information

Organizations. Most information in app.besmall.org is entered by, or on behalf of, a church, ministry, or similar organization ("Organization") that uses Be Small to run its groups. For that information, the Organization decides what is collected and how it is used, and Be Small processes it on the Organization's behalf under our Organization Terms. Questions about how your Organization uses your information should go to your Organization; we will help them respond.

Be Small. We are responsible for information we collect directly, such as from visitors to besmall.org, people who contact us, and the security and operation of the Services.

2. Information We Collect

Information you or your Organization provide

  • Identity and contact details: first and last name, email address, and (optionally) mobile phone number.

  • Account details: your role (member, leader, or administrator), your sign-in method, and, if you set one, a password. Passwords are stored by our authentication provider only in hashed form; we cannot see them.

  • Group participation: groups you belong to, lead, or have asked to join; requests and decisions; meeting RSVPs and how many people you are bringing.

  • Content: messages, resources, links, and other content sent through the Services.

  • Preferences and consent records: your email and text-message settings and a record of when you opted in or out of texts.

  • Communications with us: anything you send to privacy@besmall.org or through forms on besmall.org.

Information collected automatically

  • Device and log data: IP address, browser type, device type, pages requested, and timestamps, recorded by our hosting providers for security and reliability.

  • Delivery data: whether an email or text was sent, delivered, or failed.

  • Change history: a record of who made changes to people, groups, and memberships and which fields changed (not the values).

  • Cookies: see our Cookie Notice. app.besmall.org uses only essential cookies needed to keep you signed in.

Sensitive information. Because Be Small is used by churches and ministries, the fact that you belong to a group may reveal your religious beliefs or affiliation. Connecticut and some other states treat this as "sensitive data." Messages and prayer requests may also contain sensitive details. We process this information only to provide the Services, and only with your consent, which you give by creating an account or joining or requesting to join a group. You may withdraw consent at any time by leaving your groups or deleting your account (see Section 8). Please do not share health, financial, or other highly sensitive details in messages or resources.

We do not knowingly collect information from anyone under 18.

3. How We Use Information

We use personal information to:

  • provide the Services, including sign-in, group membership, approvals, messages, reminders, and RSVPs;

  • send service emails, such as sign-in codes, welcome emails, group messages, and meeting reminders, and texts if you opted in;

  • keep the Services secure, prevent fraud and abuse, and enforce our Terms of Service;

  • troubleshoot, maintain, and improve the Services;

  • respond to requests and support questions; and

  • comply with law and protect the rights, safety, and property of Be Small, our users, and others.

We do not sell personal information, use it for targeted advertising, build advertising profiles, use it for profiling that produces legal or similarly significant effects, or use it to train large language models or other artificial intelligence.

4. How We Share Information

  • Within your Organization. Administrators of your Organization can see your profile and group information. Leaders of groups you belong to or ask to join can see your name and contact details, request status, and RSVPs. Other members can see group details, leader names, and resources, but not your contact details.

  • Service providers. We use trusted providers to run the Services, who may process personal information only on our instructions: Supabase (database and authentication), Vercel (application hosting), Resend (email delivery), Twilio (text messaging, when enabled), and Squarespace (besmall.org website and domain). We may change providers; we will keep this list reasonably current.

  • Legal and safety. We may disclose information if we believe in good faith it is required by law, subpoena, or court order, or necessary to protect anyone's safety, investigate fraud or security issues, or enforce our Terms.

  • Business transfers. If Be Small is reorganized into a business entity, merged, acquired, or sells assets, information may be transferred as part of that transaction, subject to this Policy.

  • With your direction or consent.

Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent will not be shared with any third parties. This excludes only the service providers above that deliver messages on our behalf.

5. Retention

We keep personal information for as long as your account is active or as needed to provide the Services. When you delete your account, or an Organization deletes you, your profile, memberships, RSVPs, and consent records are deleted. Messages you sent remain visible to the group without your name. Change history (which contains field names, not values) and delivery records may be kept for up to 3 years for security and compliance. Copies in backups and provider logs are removed on their normal schedules. We may keep information longer where required by law or to resolve disputes and enforce our agreements.

6. Security

We use reasonable administrative, technical, and physical safeguards, including encrypted connections (HTTPS), database-level access rules that limit each person to the information they are permitted to see, hashed passwords, and restricted administrative access. No method of transmission or storage is completely secure, and we cannot guarantee security. You are responsible for keeping your sign-in credentials and email account secure. If we learn of a security breach affecting your information, we will notify you and authorities as required by law.

7. Your Choices

  • Profile: update your name and phone number on your Me page.

  • Emails: turn off group emails on your Me page. Sign-in codes and essential account notices continue while you have an account.

  • Texts: reply STOP to any text, or turn texts off on your Me page.

  • Leave a group: use "Leave this group" on the group's page.

  • Delete your account: use "Delete my account" on your Me page, or email us.

8. Your Privacy Rights

Depending on where you live, including Connecticut, you may have the right to:

  • confirm whether we process your personal information and access it;

  • correct inaccuracies;

  • delete it;

  • obtain a portable copy;

  • withdraw consent to processing of sensitive data;

  • opt out of sale, targeted advertising, and significant profiling (we do none of these); and

  • appeal our decision about your request.

To make a request, email privacy@besmall.org from the address on your account (or tell us how to verify your identity). You may use an authorized agent where the law allows. If your information is held for an Organization, we may refer your request to it or act on its instructions. We will respond within 45 days, which may be extended by 45 more days when reasonably necessary. We will not discriminate against you for exercising your rights.

Appeals. If we decline your request, you may appeal by emailing privacy@besmall.org with the subject "Privacy Appeal" within 60 days of our decision. We will respond within 60 days. If your appeal is denied, you may contact your state attorney general; Connecticut residents may submit a complaint at portal.ct.gov/ag.

9. Children

The Services are only for people 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided information, contact us and we will delete it.

10. International Users

The Services are operated in the United States and intended for users in the United States. If you use them from elsewhere, your information will be transferred to and processed in the United States, where laws may differ from those in your country.

11. Do Not Track

Our Services do not respond to browser "Do Not Track" signals, because we do not track you across other websites. We honor Global Privacy Control signals as an opt-out of sale and targeted advertising, although we do neither.

12. Changes to This Policy

We may update this Policy. We will post the updated version with a new effective date and, for material changes, give reasonable notice (for example, by email or a notice in the Services). If a change would let us use sensitive data for a new purpose, we will ask for your consent first.

13. Contact

Be Small · privacy@besmall.org