Last updated: October 27, 2026
Privacy & data handling
This workspace helps your organization manage students, weekly attendance and team activities. Your organization decides what information to collect and how long it should be kept.
What is stored
Student profiles, optional photos and contact details, attendance, care notes, member profiles and team records. Account passwords are hashed. Recovery codes are stored only as hashes.
Who can see it
Organization administrators can manage their organization’s records. Approved staff see assigned classes; contact details and care notes require an additional permission. Job titles selected at signup do not grant access.
Optional connections
Google sign-in, external calendars and photo recognition operate only when configured or enabled. If photo recognition is enabled, selecting Read photo sends the selected image to OpenAI. Only the selected attendance-sheet image, requested date and mark legend are sent for this feature. The stored student roster, care notes and prayer entries are not included. The app does not save the uploaded scan image and requests store:false from OpenAI; this is not a promise of zero provider-side retention. Review the provider’s terms with your organization before enabling it.
When you choose Google sign-in, Nehemian receives your Google account identifier, verified email address and name to create or connect your account. Your Google password is never received. Google access tokens are used only to verify your identity during sign-in and are not saved. Google sign-in does not grant access to your Gmail, Drive or Calendar.
Google Drive and Dropbox sync data
Google Drive and Dropbox folder sync is separate from Google sign-in and requires your explicit authorization. You choose a cloud folder and a Nehemian Shared Folder, then enable two-way sync. This feature is currently a private preview.
Sync accesses file and folder identifiers, names, hierarchy, sizes, versions and file contents within the selected folder and its descendants. It copies new and changed files in both directions and retains previous or conflicting versions as separate files. The Google Drive authorization scope can access all Drive files; the application limits synchronization to the folder you select. Sync does not propagate deletions or change cloud sharing permissions.
OAuth refresh tokens are encrypted on the server so scheduled sync can run while your browser is closed. Connection settings, sync mappings and copied files are stored in Nehemian’s private server storage. Access is checked against the connection owner and organization. Copies follow Nehemian folder permissions; cloud originals follow Google Drive or Dropbox permissions. These permissions are not copied between services.
Data obtained through these connections is used to provide the requested synchronization and file access. It is not sold, used for advertising, or used to train generalized AI or machine-learning models. The sync process does not send connected files to OpenAI. Nehemian’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
You can pause sync or disconnect a connection in Shared Folder. Disconnecting removes the stored connection tokens and sync mappings, but keeps files already copied to either service. You can also revoke app access in your Google or Dropbox account settings. For removal of copied data or help with backups, contact your organization administrator or hello@nehemian.com. Records and backup copies are not automatically deleted when sync is disconnected.
Students and guardian permission
Your organization must explain student-data use and obtain any required student or guardian permission before uploading records or photos. Joining an account is not a guardian-consent process. This app does not currently verify guardian permission; confirm the procedure with your organization.
Retention and requests
Ask your organization for its retention period. Records are not automatically deleted. A review period is not an automatic deletion deadline. Ask your administrator to correct, export or remove information. Removal from the live workspace does not automatically erase existing backups. Contact hello@nehemian.com for backup retention and deletion-request handling, including after a restore.
hello@nehemian.com — Service and privacy enquiries. Send only the minimum information needed; do not attach student records or passwords.
Nehemian is operated by elevenplus Inc. For service and privacy enquiries, contact hello@nehemian.com.