Last updated: June 10, 2026
We do not collect any personal data. Leadership Tracker has no backend server and does not transmit your data to us or any third party. Everything you enter or import stays on your device and in your own Google Drive folder.
All data is stored in your own Google Drive folder (or, in device-only mode, solely on your device). The app reads and writes files solely within the folder you select during setup. We use the drive.file scope, which limits the app's access to only the files and folders it creates or that you explicitly grant it access to. The app cannot see the rest of your Drive.
You may optionally import your unit's member directory — names, and optionally phone numbers and email addresses — from a PDF report you download yourself from the Church's leader resources site. The PDF is parsed entirely on your device; the resulting list is stored only in your own Google Drive folder (shared with the leaders you have shared that folder with) and on your device. It is used to suggest names as you type and, if phone/email were included, to open your device's own phone, messaging, or email app when you tap a contact button. This information is never transmitted to us or to any third party. Re-importing replaces the list; deleting your Drive folder removes it entirely.
If you choose to link a Google calendar, the app requests the calendar.events scope (to create and remove interview appointment events on the calendar you select, and to read that calendar's events so you can see existing appointments while scheduling) and a read-only calendar-list scope (solely to show your calendars in the settings picker). Calendar event data is cached only on your device. The app never touches calendars other than the one you select, and you can unlink the calendar or revoke access at any time.
Leadership Tracker has no accounts of its own. There is no registration, no user database and no server of any kind. Authorizing your Google account (OAuth 2.0) does not create an account with us — it only grants the app permission to read and write your own content in your own Google Drive and Google Calendar, the same way an email app connects to your mail provider.
Access tokens are managed for you by Google Play services on Android and by the Keychain on iOS. We never see, store, or transmit your Google credentials.
Using a Google account is optional. The app can be used entirely on your device, with no account, no registration and no network — callings, interviews and meeting agendas all work that way. Authorizing Google unlocks only the two collaboration features: sharing a Drive folder with the rest of your leadership group, and writing appointments to a calendar you select.
Reminders, if you turn them on, are scheduled entirely on your device from the data already in your folder. There are no push servers and nothing is transmitted.
We take the protection of your data — including sensitive information such as member contact details and Google Calendar events — seriously, and rely on the following safeguards:
drive.file scope, which limits its Drive access to only the folder and files you explicitly select or that the app itself creates — it cannot read anything else in your Drive. For Google Calendar, it accesses only the single calendar you choose and never any other calendar.We do not share any data with third parties. All information remains in your Google Drive and on your devices, under your control.
Leadership Tracker is designed for use with a shared Google Drive folder among a small leadership group (e.g., a bishopric or stake presidency). Important: Share your Leadership Tracker folder only with named Google accounts of authorized members. Never set the folder to "anyone with the link," as this could expose sensitive member information to unintended parties. The same caution applies to the Google calendar you link, if any.
Your data is yours, and you can remove it at any time without asking us — we hold no copy of it and operate no server, so there is nothing to request from anyone.
If you share a folder with other leaders, remember that deleting a record removes it for everyone using that folder.
If we update this policy, the revised version will be posted at this URL with an updated date.
Questions about this policy? Contact hazard007@gmail.com.