Privacy Policy

1. Overview

This Privacy Policy explains how the Service Sheep web console handles information. The web console is separate from the Service Sheep mobile app, which is covered by its own Privacy Policy. This policy applies only to the web console.

2. Definitions

• "We", "us", "our" — Jar Labs (Johannen Gabriel Robles & Jazielle Mavis Robles), the developer and operator of Service Sheep.
• "You" — a user who has been given an account to sign in to the web console.
• Web console — the browser-based application for administering congregation records.
• Congregation — the local group whose records are managed in the console.
• Report package (.ssrep) — an encrypted file exported from the Service Sheep mobile app and imported into the console.

3. Who this policy applies to

The web console is used only by individuals a congregation has chosen to give an account — typically those overseeing field service records. It is not used by householders, and most congregation members never have an account. The console is intended for use in the Philippines.

4. Roles and responsibilities

For the congregation records you and your congregation enter or import, your congregation is the personal information controller and we act as a personal information processor that stores and serves those records on its behalf. For the account details we collect to provide the console (your name and email), we are the personal information controller. It is the user's responsibility to ensure the records they enter or import follow applicable standards and contain no personally identifiable information about householders. When importing a report package (.ssrep), the console lets you review and edit its contents before saving them.

5. Information we collect

We collect only what is needed to run the console. The ministry records it holds describe publicly observable information — places and their visit status — and are not intended to identify any householder. Specifically, we collect:

• Your name.
• Your email address — for account holders only, used to sign in and to recover access.
• Territory, group, and publisher records you create — boundaries, maps, assignments, and the publishers listed in your congregation.
• Map pins imported from report packages (.ssrep) — their coordinates, landmark descriptions, and status.
• Visit logs imported from report packages (.ssrep) — whether the location was "home" or "not at home", the date of the visit, and any remarks.

6. How we use information

Information is used to provide, maintain, and improve the service: to authenticate your account, to scope what you can see and do by your role, to store and display the records your congregation manages, and to monitor performance and diagnose errors.

7. Legal basis for processing

We process personal information where it is necessary to provide the console under our agreement with you, for our legitimate interests in administering congregation records and keeping the service secure and reliable, to comply with legal obligations, and, where required, on the basis of your consent. Where we rely on consent, you may withdraw it at any time without affecting processing already carried out.

8. Where your data is stored and international transfers

Your data is stored in our database, hosted on Amazon Web Services (AWS) servers located in Singapore. Because the service is operated from the Philippines, this involves a cross-border transfer of your information to Singapore. We remain accountable for information transferred on our behalf and require our providers to protect it under their own privacy commitments.

• AWS Privacy Notice

9. Map tiles (Protomaps)

The territory map loads map tiles directly from Protomaps in your browser. As with any web request, your device's IP address is visible to Protomaps when tiles are downloaded. No account information is sent.

10. Analytics and diagnostics

To keep the console reliable and fast, we collect limited technical and usage data through third-party services:

• Vercel Speed Insights and Analytics — aggregated and anonymized performance and usage metrics (such as page load timings and which routes are visited), used to monitor and improve the console. It is not used for advertising.
• Sentry — error and crash diagnostics (such as the error type, a stack trace, and basic device and browser details, which may include your IP address), sent when something goes wrong so faults can be diagnosed and fixed.

• Vercel Privacy Policy
• Sentry Privacy Policy

11. Cookies and local storage

The console uses strictly necessary cookies and similar browser storage to sign you in and keep your session active. They are required for the console to work and are not used for advertising or cross-site tracking. Disabling them will prevent you from signing in.

12. Data we do not collect

• No advertising or third-party marketing.
• No tracking of you across other websites.
• No selling or sharing of your data with third parties beyond the providers named in this policy.

13. Data sharing

Records are scoped to your congregation and visible only to authorized accounts within it. We do not sell your data or share it for marketing. We share information only with the infrastructure providers named in this policy, when required by law or valid legal process, or in connection with a merger, acquisition, or transfer of the service — in which case this policy continues to apply.

14. Security

Access is enforced by row-level security and role-based permissions, so accounts see only their own congregation's data. Territory files exchanged with enrolled mobile devices — map exports (.ssmap) and report packages (.ssrep) — are encrypted with AES-256-GCM under a per-congregation device key. Connections to the console are encrypted in transit. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

15. Data retention

Records are kept until they are deleted in the console or until your congregation removes them. Account details are kept while the account is active and removed when the account is revoked.

16. Your rights

Under the Philippine Data Privacy Act (RA 10173) you have rights to be informed and to access, correct, erase or block, and object to the processing of your personal information, to data portability, and to be indemnified for damages. Because your congregation controls its records, please direct requests about those records to your congregation's administrator first. For account data, or if you cannot resolve a request that way, contact us at support@servicesheep.com.

17. Children

The web console is intended for adults administering congregation records and for users aged 18 or older. We do not knowingly collect personal information from minors.

18. Changes to this policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date above and, where practicable, notify you of material changes. The current version is always available in the console and at servicesheep.com. Continued use after an update takes effect constitutes acceptance of the revised policy.

19. Contact

Questions about this policy can be sent to support@servicesheep.com.