Effective September 19, 2026
Wardganize is open-source software that helps the leadership of a ward (a local congregation) of The Church of Jesus Christ of Latter-day Saints coordinate member care, interview scheduling, callings, meetings, sacrament meeting programs, and ministering assignments. The hosted instance at wardganize.org is operated by Bradley Farrer (the "operator", "we"). The leaders of each ward using the app decide what information to enter and control it.
Wardganize is an independent project. It is not affiliated with, sponsored by, or endorsed by The Church of Jesus Christ of Latter-day Saints, and it is not a system of record for official Church data.
1. Account information for invited leaders. When a ward's bishopric invites a leader, we store the name and email address they enter. If a leader adds Face ID / fingerprint sign-in, we store the passkey's public key (never biometric data — that stays on the leader's device). If a leader signs in with Google, we receive the name and email address Google shares. There are no passwords anywhere in the system.
2. Ward records entered by leaders. Leaders may enter: a member directory (names, household, phone, email, address, birthdate, organizational status and priesthood office where relevant, optional temple recommend expiration and mission return dates); service needs (for example, meals or moving help, with a per-item sensitivity flag that restricts visibility to the bishopric); callings and calling recommendations; meeting agendas and assignments; ministering companionships and assignments; sacrament meeting programs; and interview scheduling records. Interview records contain only the interview's type, date, status, and who conducted it — the application has no field for, and never stores, what was said in an interview.
3. Technical information. A session cookie, strictly necessary for sign-in — this is the only cookie Wardganize sets. Standard server logs (IP address, request path, timestamp) are retained briefly for security and debugging. We use no analytics services, no advertising trackers, and no marketing tools of any kind.
Solely to provide the coordination features to a ward's authorized leaders. Access is role-gated: ward-council members see only what is relevant to their responsibilities; items marked sensitive are restricted to the bishopric; ministering details are visible to the designated quorum and Relief Society presidents. Sign-in emails are sent only when a leader requests one. We do not sell or rent any information, we do not share it for advertising, and we do not use ward data to train AI models.
Wardganize runs on a small number of infrastructure providers, each processing data only to provide their service to us:
| Provider | Purpose |
|---|---|
| Google Cloud | Server hosting (United States), with provider-managed encryption at rest |
| Cloudflare | Network delivery, DNS, and encrypted backup storage (R2) |
| Resend | Delivery of sign-in link emails |
| Google Sign-In | Optional authentication, only for leaders who choose it |
All traffic is encrypted in transit (HTTPS). The server accepts no inbound connections except through an authenticated tunnel. Membership is closed — only invited leaders can sign in — and each role sees only its slice of the data. Nightly database backups are kept on the server and copied to Cloudflare R2 storage; backups age out after approximately two weeks.
Ward records remain until the ward's leaders edit or remove them, or until a ward asks for its instance data to be deleted. When a leader's access is removed, their account and private notes are deleted. Backup copies expire on the roughly two-week cycle described above.
To see, correct, or remove information about you, contact your ward's bishopric — they control the records — or email [email protected] and we will work with the ward's leadership to resolve your request promptly.
Wardganize accounts are held by adult ward leaders. Directory entries may include basic information about minors (such as name and birthdate) entered by leaders as part of ordinary ward administration — the same information a paper ward list would carry. Parents or guardians may ask ward leadership to correct or remove it at any time.
No worthiness information, no welfare or financial records, no official membership records, and no interview content. Those belong to the Church's own systems and to the private ministry of its leaders.
If this policy changes, the new version will be posted at this address with a new effective date.
Bradley Farrer · [email protected]