How we handle data
This is a template for the operator of this service to complete with their legal details before launch.
Where data is stored
Records are stored in a managed PostgreSQL database with daily backups. Photos are stored in private storage and served only when access rules allow it.
On your device
Saved graves, recent searches and downloaded cemeteries are stored in your browser so they work offline. Signing out removes downloaded staff data; records not yet uploaded are kept so that no field work is lost.
Who can change records
Only authorised mappers, verifiers and cemetery administrators can create or change records. Every change is recorded in an audit log with who made it and when.
Security
All traffic is encrypted (HTTPS). Access rules are enforced by the database for every request; the app never trusts information sent from your device about your role.