How Pathfinder handles family data

Account and contact details such as names, email addresses, phone numbers, household addresses, emergency contacts, and household relationships.

Youth and program information such as member names, birth dates, program enrollments, advancement and participation records, attendance, readiness status, and guardian-managed household records.

Documents and forms submitted for program operations, including waivers, signed documents, physical or readiness forms, uploaded files, and related review status.

Event, ticket, and finance information such as RSVPs, reservations, gate redemption history, dues status, Stripe checkout identifiers, invoice summaries, and receipt summaries.

Operational information such as authentication events, support or bug reports, device/browser details submitted with bug reports, audit logs, and admin alerts.

Photos adults choose to share in private Pathfinder group albums, along with captions, event associations, moderation status, and guardian-confirmed youth journey tags.

We use information to operate Pathfinder programs, manage family accounts, support youth participation, run events, process documents, support readiness checks, coordinate leaders, and provide support.

Admins and authorized leaders use limited records to review registrations, household updates, documents, attendance, event readiness, tickets, and program operations.

We use audit logs and alerts to protect sensitive workflows, investigate account or support issues, and keep records accountable.

Private group photos are used to help participating families share event memories. Pathfinder does not use or send youth photos to external AI services for training, facial recognition, or automated image analysis.

Card and payment method details are handled by Stripe. Pathfinder does not store full card numbers, bank details, CVV codes, or detailed payment method data.

Pathfinder may store payment and invoice summaries needed for dues, receipts, ticket status, reconciliation, and family or admin support.

Pathfinder is designed around household and guardian-managed youth records. Youth access, where available, is limited by program and age-appropriate rules.

Parents, guardians, authorized leaders, and admins may manage or review youth records only within their assigned household, program, or operational role.

A guardian must explicitly allow manual youth identification and journey-album inclusion for each Pathfinder group. That permission can be withdrawn from the group album at any time.

Public or promotional photo use requires a separate guardian media release. It is not granted by joining a private album, and the safe default is not granted.

We do not sell personal information.

We share data with service providers only as needed to operate Pathfinder, including hosting, authentication, database, email, storage, payment processing, and security services.

Program records may be used by authorized Pathfinder staff, leaders, or administrators for program operations, safety, compliance, reporting, and support.

We keep records only as long as reasonably needed for program operations, safety, legal, accounting, dispute-resolution, and audit purposes.

Some records, such as payment summaries, signed documents, safety/readiness history, and admin audit logs, may need to be retained even after an account is closed.

Families can request account deletion or data review from the profile page after signing in, or from the support page if they cannot access their account.

An adult uploader or authorized leader may remove an album photo. Withdrawing journey permission removes the identifying association; families may separately request removal of a photograph in which a youth remains visible.

Pathfinder uses role-based access controls, server-owned privileged routes, audit logging, and scoped exports to reduce unnecessary access to sensitive family, youth, medical, document, and payment-summary data.

Private album objects are not public. Upload and viewing access uses short-lived signed links, and image location and camera metadata are removed in the browser before upload.

No online service can guarantee absolute security, but we work to limit access to authorized users and operational need.