Privacy

Last updated 23 September 2026.

This app is run by MNDZ Automation for member organizations. Your organization holds a record of you, the same as it always has. This page says exactly what is kept, who can see it, and what happens when you leave.

What you give us

• Your full name, your email and a password, when you ask to be admitted.
• Your photo, if you add one.
• Your phone number (and a second phone, if you add one) and your birthday, if you add them.
• A picture of your dues card, if you add one.
• An emergency contact: their name, their phone, and how they are related to you.
• A push-notification token for your device, if you turn notifications on (phones and tablets only).

Everything after your name, email and password is optional. Nothing asks twice.

What your organization records about you

• Your degree, your office, and the dates you were initiated, passed and raised.
• Whether you were at each meeting.
• What you owe in dues, what you have paid, and what has been waived.
• Where you stand on the roll: active, not active, suspended or removed.

Whoever runs your organization keeps these. You cannot change them yourself, on purpose: they are the organization's record, not yours.

What you write

• Messages in the shared room, in the officers' room if you hold an office, and private messages between you and one other member.
• Minutes, announcements and events, if you are the one who keeps them.

Who can see what

• Every member of your organization can see your name, your photo, your degree, your office and your attendance.
• Your email, your phone (including any second phone) and your birthday are visible only to you and the two people who run your organization: its Worshipful Master and its Secretary. Other members do not see them.
• Your dues, your dues card and your emergency contact are visible only to you and those same two people. The Wardens may read the roster and the dues but cannot change your record or verify your dues card.
• Private messages are visible only to you and the person you sent them to.
• Members of other organizations see only your name, your photo, your degree, your office and your organization name, and only if your organization has chosen to be listed. They may also see this month's upcoming events for a listed organization (title, when and place) — never minutes, attendance or internal work notes. They never see your phone, your email, your birthday, your dues or your emergency contact.
• A stranger signed out cannot read your personal record, messages, or dues. An organization that chooses to be listed shows its public details (name, when/where it meets, contact email) on purpose.
• The join code is for people who were given it by the organization. Strangers should not see private member records.
• Membership admin tools are for the people who run the organization, not for browsing by every member.

These are enforced by the database itself, not only by what the app chooses to draw on screen.

What we do not do

• We never sell your personal details. Not to anybody, not for any price, not ever.
• We do not collect anything about you beyond what you type into your own record, what your organization records about you, and — if you allow notifications — a device push token to deliver them. We gather nothing from anywhere else, we buy nothing about you from anybody, and we build no profile of you.
• We do not share anything about you with advertisers, data brokers or any other company.
• We do not track you across other apps or websites.
• We do not use your face for recognition of any kind. A photo is a photo.
• We do not send you marketing. If you allow notifications, we may send operational messages about your organization (chat, meetings, secretary notices) — never marketing.
• We make no money from anything about you. This app is paid for by organizations, not by you and not by anyone buying your information.

What is kept on your phone

A sign-in token, so you are not asked for your password every time you open the app. Signing out removes it. It is not an advertising cookie, nothing reads it but this app, and it says nothing about you to anybody else.

If you turn notifications on, a push token for this device is stored with your account so we can deliver those messages. Only you control that token; turning notifications off clears it. Notification preference switches (chat, meetings, secretary) are stored with your account.

There are no advertising cookies, no tracking pixels and no analytics of any kind in this app. Nobody is measuring what you tap.

Where it is kept

On Supabase, in the United States. Your password is never stored as you typed it and nobody at MNDZ Automation can read it. Pictures are kept in private storage and can only be opened through a link that is checked against who is asking and expires.

Keeping it safe

Everything travels over an encrypted connection. Who may see what is decided by the database itself, and those rules were tested by attacking them rather than by trusting them. Pictures sit in private storage and are never given a permanent public address.

Said plainly: no app and no company can promise perfect security, and we are not going to. If we ever learn that information about you has been exposed, we will tell you and the person who runs your organization.

When the law asks

If a court or a law that applies to us requires it, we may have to hand over what we hold. We will tell you if we are allowed to. We do not hand anything to anybody else, for any other reason, ever.

Deleting your account

You can delete your own account at any time, from Settings. It cannot be undone.

Your photo and dues card are cleared from your record; file cleanup runs when you delete from the app. These also go:

• Your phone, your email and your birthday
• Your emergency contact
• Your push tokens and notification preferences
• Your sign-in. You cannot log in or write anything again.

These stay, because they are your organization's record and not yours:

• Your name on the roll, which then reads Removed
• Your degree, your office and your three dates
• Your attendance at meetings that have been held
• The minutes you appear in, and the messages you wrote

Messages are kept for the same reason as minutes: they were part of a conversation other people were in, and taking them out would leave holes in it. If you want your organization to go further than this, ask whoever runs it, or write to us.

One honest note about backups. What you delete goes from the live app straight away. If a backup of the database exists from before you deleted, your details may still sit inside that copy until it is replaced or thrown away. Nobody opens a backup except to recover from a failure, and no backup is ever used to put a deleted account back.

Asking us instead

If you would rather not do it in the app, write to support@mndzautomation.com from the email on your account and we will do it for you. We will answer within 30 days.

If MNDZ Automation stops, or changes hands

Your organization's records belong to your organization, not to us. If this app ever closes down, or the business behind it is sold, we will tell every organization first and hand each one its own records in a form it can keep and read. Information about you is not something we would sell, and it is not treated as an asset in any sale.

Age

This app is for members of adult organizations. It is not for anybody under 18 and we do not knowingly keep anything about a child.

Changes

If this page changes in a way that matters, the date at the top changes with it and the app will say so.

Questions about anything on this page: support@mndzautomation.com