Security and privacy
Built to protect your people.
In Joined, each person sees only what their work needs. Kids’ safety details stay with the people caring for them, and giving and prayer stay private.
Permissions for every person
Everyone sees what their work needs.
A role says what someone can do, and their access says where: the whole church, a campus, or only the work they’re assigned.
- Each person has one role, and each role lists what it can view, edit, export or send
- Access covers the entire church, chosen campuses or only the work assigned to them
- Nobody can hand out access they don’t hold, or change their own role
- Every role change is recorded with who made it and when
Six roles to start from
- Owner
- Sets up the church and its plan, and decides who may hand out sensitive access.
- Administrator
- Runs everyday administration. Giving, kids check-in and exports stay separate.
- Billing manager
- Handles your Joined subscription and invoices, with no access to donors or giving.
- Staff
- Does the ministry work their role allows.
- Volunteer
- Sees the events and serving work assigned to them.
- Viewer
- Reads permitted information without changing it.
Copy any of them into roles of your own, like Pastor or Kids director, and choose exactly what each can do.
Kids safety
Every child goes home with the right grown-up.
Each check-in prints a child label and a parent tag with the same pickup code. Seeing children’s details is a permission you give by role, so their names and allergies stay with the people caring for them.
- Checkout asks for the code on the parent’s tag
- Siblings checked in together share one code
- Codes skip look-alike characters such as 0 and O
- Allergies stand out beside every child’s name
Giving and prayer
What’s personal stays private.
Giving
Gifts, batches, statements and giving history are sensitive. Out of the box only the owner sees them, and a role gets giving only when someone trusted with sensitive access grants it.
Without giving access, a person’s record shows no giving at all. Your billing manager pays for Joined and never sees donors.
Prayer requests
Prayer requests are follow-ups in People, so only the people you give People access can read them, and you can limit that access to the campuses each person serves.
Each person’s timeline shows who called or left a note, so care never happens out of sight.
Your data is yours
Take it with you, or ask us to delete it.
Every person controls their own account, and your church can take its records with it.
Download your data
Request a copy of your profile, preferences, security settings and notifications from your account settings.
Delete your account
Your account is removed 30 days after you confirm, and you can cancel until then. Church owners hand over or close their church first, so no church is left without an owner.
Two-step verification
Add a code from an authenticator app when you sign in, with recovery codes in case you lose your phone.
Signed-in devices
See where your account is signed in and sign out any device. Changing your password can sign out the rest.
Export church records
People with export access can download your people and households as a spreadsheet. Exporting is a sensitive permission.
Infrastructure details
Published before launch.
Joined is in early access, and churches are invited to use the connected application. The protections on this page are how the product is built. Our servers will enforce them when churches move in.
Where church data is hosted, how it’s encrypted and backed up, and any independent reviews we complete will be listed here before launch. We won’t claim a certification until we hold it.
Not yet. Joined is in early access, and churches are invited to use the connected application. Real church data comes in when churches are invited to move over, and the infrastructure details are published before that happens.
No. Out of the box only the owner can see giving. Anyone else sees it only if their role is given giving access, and only someone trusted to hand out sensitive permissions can do that.
Yes. Each person’s access covers the entire church, the campuses you choose, or only the work assigned to them. Records outside those campuses stay out of their view.
Prayer requests are follow-ups in People, so only the people you give People access can read them. You can limit that access to the campuses each person serves.
Yes. Authorized staff at Mission Ready Strategies, who build and run Joined, can access church and member data to provide support, fix problems, keep the service secure and meet legal obligations. Only staff who need it have this access, we keep an internal record of it, and we never sell your data. Read the Privacy policy
We’ll publish hosting, encryption, backups and any independent reviews before launch. Until then we won’t make claims about them, and we won’t list a certification we don’t hold.
Yes. People with export access can download your people and households as a spreadsheet at any time, and every person can request a copy of their own account data. How switching works
Care for your people with confidence.
Joined is opening to churches in small groups. Join early access and we’ll reach out when it’s your turn.