Privacy notice

Last updated November 12, 2026

Fully Known is a tool for church staff, built and operated by Richard Schmidt. It is in a pilot with its first church. This notice explains how it handles the member information of a church that uses it.

What Fully Known reads

• Fully Known reads from the church's Planning Center People account and sends no changes to it.
• It reads names, membership status, household members, group and team memberships, check-ins, contact details (phone and email), and the church's own step fields, such as a baptism date.
• It never requests medical notes, birthdates, background checks, gender or grade.
• Giving information is read only after the church approves it, and the giving badges stay locked until then.

What it keeps

• Cards are not stored. Each card is fetched from Planning Center when someone opens it, sent to their browser with instructions not to cache it, and discarded.
• An access log. For every card opened, Fully Known records who opened it, whose card it was and when. The admins a church chooses can review this log.
• Change requests. Signed-in staff can ask for changes to the tool on its Requests page. What they type, attach (including screenshots) or record there is stored with the request.

Who can see it

• Only people on the church's list can sign in, each with a one-time code sent to their own email.
• People marked as a child in Planning Center are left out of search, and their card does not open. They appear by name in a parent's household. The child mark is set by church staff in Planning Center.
• Richard Schmidt operates the service and can access its data to run and support it.

Services it relies on

• Planning Center, where the church's records live.
• Cloudflare, which handles sign-in and carries traffic to the server.
• A private server operated by Richard Schmidt, which runs the tool and holds the access log and change requests.
• Anthropic (Claude), which helps build changes requested on the Requests page. The text and pictures of a change request are sent to it when that change is built. Card lookups are not sent to it.

Questions and removal

A church can ask at any time to see its access log, to have its change requests deleted, or to end its use of Fully Known. Write to hello@fullyknown.church.