YOUR PRIVACY

A journal with boundaries.

The farewell page is public. The mission journal is available only to readers approved by the family.

Google sign-in

We use your Google identity and email address to check the family’s approved-reader list. Sign-in alone does not give this website access to Gmail.

Approved readers and the missionary email group

The approved-reader list is stored privately on InMotion. The family decides access, and revocation is checked on each protected request. The missionary can separately connect the Google account that owns their selected Contacts label. Google grants broad Contacts management permission; this application uses it to maintain approved-reader membership, preserving existing names and unrelated fields. The background connection is stored in private server storage and can be disconnected. Group sync status is separate from journal approval.

Your letters

Connecting Gmail is optional. Google’s read-only permission covers your mailbox, but this journal queries only messages from michael.fielding@missionary.org. It never sends, changes or deletes your email. Letters are fetched for you and are not added to the shared gallery or shown to other readers. Email bodies are not stored in our database. Remote images and attachments inside emails are not loaded.

Shared photos

Photos added by the family are visible to approved readers. Copies used by the journal are stored in protected server storage and dates come from the shared album or are supplied by the family. The server checks the shared album five times daily. The source Google Photos album has its own sharing settings; journal sign-in does not change those settings.

Connections and deletion

Google tokens are held in your private server session. Sessions expire after 12 hours and expired session records are removed during server cleanup. Disconnect Gmail to remove the connection here and request revocation at Google. Signing out clears this website’s session. You can also remove the app from your Google Account’s third-party connections. The family administrator can remove shared photos or revoke journal access by updating the approved-reader list.

Gmail data is used only to display your letters from the missionary. It is not sold, used for advertising, or used to train AI models. Contact the family administrator using your existing family contact details for access or deletion requests.