Who we are
CovenantLight Ministries operates this portal for candidates enrolled in Fast-Tracked Spiritual Growth (FTSG). We are the party responsible for the personal data described on this page. You can reach us at any time using the contact details at the bottom of this policy.
Access to the portal is by enrollment only — a member of the ministry team adds you to a cohort and its modules. There is no public, self-service sign-up into a cohort here.
What we collect
Account information
When you're enrolled, we hold your email address, full name, role (candidate, examiner, or administrator), and — once you set it or we detect it from your device — your timezone, so exam times and results display correctly for you.
We do not store your password. Sign-in is handled entirely by our authentication provider (Supabase Auth) — we never see or hold your password in plain form. We also do not collect a phone number, physical address, date of birth, photo, or any payment information; the portal has no billing feature.
Enrollment and assessment data
Which cohort and modules you're enrolled in, and which of those you have access to. When you sit an exam, we record your answers, how you flagged or navigated between questions, when you started and submitted, your score, and whether you passed. Each answer is graded and the per-question result is kept so you and your examiner can review it later.
Exam integrity signal — and its limit
While you're sitting a timed exam, the portal records one thing: whether you switched away from the exam tab. That's it.
- No webcam access, ever.
- No microphone access, ever.
- No screen recording or screenshots.
- No keystroke logging.
We built it this way deliberately — a credentialing platform should not need to watch you to trust a result.
Certificates
When you pass a module or complete a full cohort, we generate a certificate record: the credential name, the date issued, and a cryptographic signature that lets anyone confirm it's authentic without contacting us. See "Public certificate verification" below for what that means for your name.
Technical information
Your IP address is processed briefly to apply rate limits that keep the service available for everyone — it is not stored in our database. We keep a request identifier and a scrubbed technical error report (message, route, status code) when something goes wrong, to help us fix it. Error reports are automatically stripped of tokens and passwords before they're stored.
Signing in with Google
If you choose "Continue with Google" to sign in, we request only your basic profile — your name, email address, and a stable identifier for your Google account (the openid, email, and profile scopes). We use this solely to create and authenticate your portal account; we do not request access to your Gmail, Drive, Calendar, or any other Google service.
Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
How we use it
- To create and authenticate your account, and to place you in the right cohort and modules.
- To present, time, and grade the exams you're enrolled to sit.
- To issue and verify your certificates.
- To send you operational messages — an enrollment invite, a password reset — through our authentication provider.
- To detect, diagnose, and fix technical problems.
- To understand, in aggregate, how the portal is used, so we can improve it.
We do not sell your personal data, and we do not use it for advertising or profiling. We do not use it to train third-party AI models — see "How exam questions are drafted" under Service providers for the one place AI touches this platform, and note that it never sees candidate data.
Service providers
We use a small number of specialist providers to run the portal. Each only receives what it needs to perform its job, under its own privacy terms.
| Provider | What it does | What it may receive |
|---|---|---|
| Supabase | Authentication, database, and file storage | Account credentials, all data described above |
| Vercel | Hosting, plus Analytics and Speed Insights for site performance | Anonymized usage and performance metrics |
| PostHog | Product analytics — understanding how the portal is used | Your name, email, and in-app activity events |
| Sentry | Error tracking, so we can find and fix bugs | Technical error reports, scrubbed of tokens and passwords |
| Userback | The in-app feedback widget | Your name, email, role, and anything you submit through it |
| Sign-in via "Continue with Google" | Name, email, and account identifier (see above) |
How exam questions are drafted
An administrator can optionally ask an AI model (Google Gemini or OpenAI, depending on configuration) to draft candidate exam questions from a publicly available YouTube video transcript. Only that transcript is sent to the AI provider — never any candidate name, answer, score, or other personal data. This feature is entirely operator-triggered and has nothing to do with your individual exam activity.
Public certificate verification
A certificate is only useful if someone else can trust it without calling us — so every certificate has a public verification page, reachable only if you have its unguessable link. That page shows your full name, the credential earned, the cohort, the issue date, and a cryptographic signature check, to anyone who opens the link.
The link's identifier is long and randomly generated — it cannot be guessed or enumerated, and looking up an unknown or invalid identifier simply returns "not valid" rather than exposing whether a record exists. The certificate PDF itself is stored privately and only ever served through a short-lived, signed download link.
If you would prefer your certificate not be independently verifiable this way, contact us using the details below — this is a manual request today, not a self-service toggle.
How long we keep it
Exam attempts and certificates are kept indefinitely as the permanent record of what you were assessed on and what you earned — they are never automatically deleted or archived, even by us, and can only be removed through a manual, logged action by a senior administrator.
Administrative actions on cohorts, modules, and exams are recorded in an append-only audit log for accountability. Because this log is append-only by design, it can retain a snapshot of information (such as a name or email at the time of an action) even after the related record is later changed, and it has no fixed deletion schedule.
Our infrastructure provider takes routine backups of the underlying database for disaster recovery, retained on a standard rolling schedule.
Your choices
You can update your name and timezone at any time from the Account page inside the portal.
We do not yet offer a self-service export of your data or self-service account deletion. If you'd like a copy of your data, or to ask about deleting or restricting it, contact us at the address below and we will handle the request manually — bearing in mind the retention limits on exam attempts and certificates described above.
Security
Every request to the portal's data is checked against your role before it's allowed. Certificates are signed with a cryptographic key that only the platform holds, so a certificate record can't be tampered with undetected. Sensitive values — tokens, passwords, authorization headers — are automatically stripped from our technical logs before they're stored. No method of transmission or storage is perfectly secure, but we design and review the system with these protections as a baseline, not an afterthought.
Children
This portal is provided for use by candidates enrolled through their ministry team in a discipleship program, and is not directed at children. If you believe a child's information has been provided to us without appropriate consent, contact us and we will address it.
International processing
Our service providers operate infrastructure in multiple countries, so your information may be processed outside the country you're enrolling from. Each provider is responsible for safeguarding data in line with its own security and privacy commitments, referenced under Service providers above.
Changes to this notice
We'll update this page whenever what we collect or how we use it changes in a meaningful way, and update the "Last updated" date at the top. If a change is significant, we'll look for a reasonable way to let enrolled candidates know directly.
Contact us
Questions, requests, or concerns about this policy or your data can be sent to info@covenantlight.org.