This Privacy Policy describes how David J. Spillman operating the ROUTE Platform ("ROUTE", "we", "us", or "our") collects, uses, protects, and discloses personal information obtained through our website at routeapp.org and our application software portal at app.routeapp.org.
ROUTE is a specialized multi-tenant operating system designed for local church bus ministries, soulwinning visitation, and route logistics. We understand that church rosters, child attendance records, emergency numbers, and soulwinning visitation notes represent deeply sensitive personal and ministry data. We maintain strict technical, legal, and operational safeguards to protect this information.
Data Controller Contact Information:
David J. Spillman / ROUTE Platform
1600 Ute Avenue
Grand Junction, CO 81501
Email: privacy@routeapp.org
We hold an absolute commitment to data privacy. ROUTE never sells, rents, trades, licenses, or monetizes any church data, rider information, phone numbers, or soulwinning notes to any third party for marketing or advertising purposes.
All information collected within ROUTE is used strictly to power your church's bus route operations, parent text updates, worker coordination, and outreach tracking.
Depending on your interaction with ROUTE, we collect the following categories of information:
ROUTE integrates with telephony providers, including Twilio Inc., to enable direct communications between church workers and parents or ministry team members.
A. Nature of Messaging:
All text messages sent through ROUTE are human-initiated and composed individually by authorized church staff or bus workers through our telephony interface. Messages are operational and transactional in nature (e.g., "We are on our way with the church bus!", "Will Joseph be riding the bus tomorrow?", or child care check-in updates).
B. Consent & Opt-In Method:
Mobile numbers and SMS opt-in consent are obtained directly when parents/guardians register their children in person with church bus workers via signed physical permission slips or enrollment forms. Bus workers explicitly inform parents that the ministry uses ROUTE to communicate bus schedules, rider updates, and emergency notices.
C. Mandatory Non-Sharing Clause:
No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
D. Opt-Out & Support Commands:
Message recipients can opt out of SMS communications at any time by replying STOP or UNSUBSCRIBE to any text message received. For assistance, recipients can reply HELP or contact privacy@routeapp.org. Message frequency varies based on church route activity. Standard message and data rates may apply.
ROUTE infrastructure is hosted on Amazon Web Services (AWS) within the United States (`us-east-2` region).
A. Transactional Emails (AWS SES):
Email communications are delivered via AWS Simple Email Service (SES). We send strictly transactional and administrative emails (such as worker account onboarding, password resets, system alerts, and weekly route summaries). We do not send unsolicited marketing emails. Every administrative email contains valid sender identification, contact details, and an unsubscribe link where applicable.
B. Infrastructure Security:
All data transmitted between your device and ROUTE is encrypted using TLS 1.3 / HTTPS. All stored data, including database volumes and media assets, is encrypted at rest using industry-standard AES-256 encryption.
ROUTE enforces strict tenant data isolation. Each church organization operates within its own secured logical environment utilizing PostgreSQL Row-Level Security (RLS) policies. No other church, tenant, or unauthorized party can ever access, query, or view your ministry’s rider rosters, phone numbers, or visitation records.
Because local church bus ministries serve children and youth, ROUTE processes information regarding minor riders. We strictly comply with Children's Online Privacy Protection principles:
Door-to-door visitation notes, prospect addresses, prayer requests, and spiritual decisions recorded during soulwinning outreach are treated as confidential ministry assets. Access is strictly scoped to authorized church users. ROUTE employees and automated systems do not inspect or read spiritual visitation notes except when required to deliver system support at the explicit request of the church account administrator.
Zero Advertising Trackers: We do NOT use third-party marketing cookies, Google Analytics, Meta Pixels, or remarketing tags on routeapp.org or app.routeapp.org. We utilize only essential, cryptographically secure session cookies required to keep users safely logged in.
ROUTE partners with select, trusted cloud infrastructure subprocessors strictly to deliver platform functionality:
Churches maintain full control over their ministry records:
Subject to applicable laws, church administrators and parents have the right to access, inspect, correct, export, or request the permanent deletion of their personal information.
For any privacy inquiries, data deletion requests, or questions regarding this policy, please contact us at:
David J. Spillman / ROUTE Platform
Attn: Privacy & Data Protection
1600 Ute Avenue
Grand Junction, CO 81501
United States
Email: privacy@routeapp.org
Website: https://routeapp.org