- Starting price
- $50 per center/month
- Free tier
- No
- Platforms
- Web on phone · tablet · computer
- Developer
- Corey Haines / Safehold
- Launched
- 2026
- Updated
- Aug 16, 2026
The verdict
Safehold has an appealing product shape: one-tap real-time check-in and checkout, first-visitor flags, guardian contacts, digital permission slips and e-signatures, lesson logs, role limits, multi-room and campus views, and attendance reporting for $50 per center. The decisive issue is governance, not interface. As of review, both the public Privacy Policy and Terms pages tell the operator to choose a policy generator and have a lawyer review the text; they contain no actual terms. A church should not load children, guardians, attendance, signatures, or notes until Safehold publishes and contractually answers the complete security, privacy, retention, incident, custody, support, and safeguarding checklist.
Try Safehold ↗Opens safehold.app
Safehold is a browser-based children’s ministry management product created by software developer Corey Haines after a church asked about replacing paper check-in. It focuses on a narrower workflow than a full ChMS: identify which children are present, record arrival and departure, flag visitors, track activities, collect digital consent, and report attendance trends.
The system advertises unlimited stations and students within each paid center. A center can represent a nursery, age group, youth room, campus, VBS, or temporary program. Families are shared across an organization, volunteers can be limited to assigned rooms, directors can switch views, and reports combine center data. Internet is required, although the vendor says a lightweight interface can run over cellular service.
Pricing is $50 per center per month with a fourteen-day trial and no card. The site lists $100 for two centers and $150 for three, with volume discounts for four or more. That simplicity is valuable, but center definitions can multiply across campuses, programs, and age rooms; exact archiving, billing, and historical-access behavior should be included in a written quote.
We reviewed current product, check-in, permission, multi-center, about, policy, terms, and directory materials without entering child data, running a Sunday load test, testing labels or custody alerts, auditing access controls, evaluating guardian verification, or reviewing a private contract. The public privacy and terms pages are unmistakable unfinished template placeholders. We found no usable public commitments on collected fields, processors, encryption, retention, deletion, backups, breach response, legal roles, or support.
✓ The good
- Focused volunteer workflow - search and one-tap status can be easier than a general database
- Real-time room visibility - directors can see current counts, first-time visitors, and location across centers
- Flat station model - each center includes unlimited check-in devices and students
- Digital consent - guardian links, e-signatures, status, and records can replace scattered paper waivers
- Activity history - lessons, worship, memory work, prayer, and other participation can be recorded per child
- Multi-center structure - rooms, programs, and campuses can remain separate while leadership sees organization totals
- Transparent headline pricing - $50 per center and fourteen days free are plainly stated
✗ Watch out
- No actual privacy policy - the live page contains instructions for creating one, not disclosures or rights
- No actual terms - the live page is another unfinished policy template rather than a customer agreement
- High-risk child data - names, age, guardians, contacts, notes, attendance, signatures, rooms, church, and schedules can create safety exposure
- No public security package - encryption, MFA, logs, testing, backups, regions, subprocessors, recovery, deletion, and incidents are not established
- Internet dependency - check-in and emergency headcounts need a documented offline or outage fallback
- Safety scope is incomplete - public material does not establish guardian matching, labels, custody restrictions, medical alerts, allergies, evacuation, or pickup authorization
- Young founder-led service - staffing, support coverage, insurance, succession, uptime, and data escrow require scrutiny
Best for
- Only a limited synthetic-data pilot after the vendor supplies complete written privacy, terms, security, and support documents
- Small churches whose final validated need is simple room attendance rather than a full ChMS
- Teams able to maintain a parallel paper emergency roster and formal child-safety procedures
- Organizations whose legal, security, ministry, and insurance reviewers approve the product and contract
Avoid if
- The public placeholder privacy and terms pages remain unchanged or the vendor will not sign adequate written commitments
- The church plans to enter custody restrictions, abuse concerns, medical details, allergies, special needs, or sensitive notes without verified controls
- Label printing, secure pickup matching, background-check integration, emergency roster, offline operation, or ChMS synchronization is required
- No staff member owns access review, data minimization, retention, deletion, incident response, volunteer training, and Sunday fallback
What Safehold is
Safehold is attendance and permission software. It is not itself a child-protection policy, background check, two-adult rule, custody determination, emergency communication system, medical record, label printer, physical access control, or guarantee that the correct adult takes a child.
A name and check-in time may look ordinary, but a combined database can reveal child identity, age, family relationship, church, recurring location, schedule, absence, room, guardian contact, consent, and possibly sensitive notes. That deserves a higher standard than ordinary event registration.
Why a narrow modern check-in can appeal—and still fail procurement
Full church-management products often burden a children’s desk with configuration, station licenses, and features volunteers do not need. Safehold offers a small browser workflow, shared live state, digital consent, and simple center pricing.
A narrow interface does not create narrow risk. The operator still holds a structured map of minors and families. Until the legal and security layer is real, interface simplicity cannot support a responsible recommendation.
Check-in and checkout: speed needs identity controls
Volunteers can search children, add a new family, mark arrival, see current room counts and new visitors, and track when everyone leaves.
Require authorized pickup verification, custody and protection flags, immutable event logs, least-privilege roles, session timeouts, concealed sensitive notes, and a paper outage roster. A one-tap workflow must not become one-tap release.
Permission slips and activity logs: evidence needs provenance
Guardian links collect electronic signatures and status, while staff can record lesson and activity categories on a child profile.
Confirm signer authentication, consent text version, timestamp, IP or audit trail, revocation, export, legal validity, retention, and who may see the record. Do not use a generic lesson field for clinical, behavioral, or abuse notes.
Multi-center analytics: useful patterns, easy surveillance
Directors can compare rooms and campuses, identify new and returning children, see trends, and preserve history as children change centers.
Limit reports to legitimate ministry purposes, suppress tiny groups, avoid ranking children or volunteers, define archive dates, and restrict cross-campus visibility. Attendance is pastoral data, not a growth-score proxy.
Pricing
One center
$50/month
Unlimited students and check-in stations, digital permission slips, analytics, activity logging, and a fourteen-day no-card trial.
Two or three centers
$100 or $150/month
Each room, program, age group, or campus center is billed at the same rate while sharing organization and family data.
Four or more centers
Contact for discount
Volume pricing is offered. Obtain exact center definition, archive billing, support, contract, and data terms before purchase.
The public model is $50 per active center each month, not per device or child.
The fourteen-day trial does not require a payment card, which supports evaluation with invented records.
Multiple campuses, rooms, age groups, VBS, and temporary programs can each affect center count; define when archived centers stop billing.
Do not sign or pay until actual terms cover cancellation, renewal, refunds, export, deletion, ownership, confidentiality, liability, support, security, and service termination.
Where Safehold falls behind
Replace both template pages immediately with lawyer-reviewed privacy and service terms specific to children’s ministry data.
Publish a DPA and security portal naming legal roles, subprocessors, regions, encryption, MFA, audit logs, tests, backups, recovery, retention, deletion, breach notification, and insurance.
Add secure label and pickup matching, custody restrictions, authorized adults, emergency contacts, medical and allergy minimization, evacuation rosters, and offline mode.
Document role scopes, access reviews, administrator logs, volunteer session controls, exports, automated retention, legal holds, and verified deletion from backups.
Complete independent child-safety, accessibility, penetration, load, disaster-recovery, and privacy assessments before making safety claims.
Safehold vs. KidCheck vs. Planning Center Check-Ins vs. paper
KidCheck specializes in mature child check-in and security workflows. Planning Center connects check-in with a large church operations suite. Paper is slower and harder to report but can operate during an outage. Safehold has the cleanest simple pricing and interface concept, yet currently offers the weakest public legal and security foundation.
Choose a mature platform when verified pickup, labels, custody, integrations, support, and procurement evidence matter. Consider Safehold only after its policies and safety controls are completed and tested against the church’s exact procedure.
Regardless of software, preserve two-adult practices, approved pickup, volunteer screening, emergency rosters, evacuation, reunification, incident reporting, and a working offline method.
The bottom line
Safehold may become a welcome affordable alternative for churches that need more than a clipboard and less than a full ChMS. Today, the live placeholder privacy and terms pages are disqualifying for real children’s data. This is not a cosmetic legal footer: churches and families need to know who has the records, where they go, how they are protected, when they disappear, and what happens during a breach or shutdown. Evaluate the interface with fake names if useful, but do not launch until the vendor supplies and implements a verifiable child-data and safety framework.
Alternatives to Safehold
Planning Center Check-InsA mature church check-in system integrated with people, events, rooms, labels, and broader operations.KidCheckA dedicated child check-in platform with established pickup and security workflows.Breeze ChMSSimple church management with people, attendance, giving, events, and check-in.ChurchTracAffordable church management and check-in within a broader administrative suite.Governed paper rosterSlower and less searchable, but resilient offline when securely handled and destroyed on schedule.Frequently asked questions
How much does Safehold cost?
It lists $50 per center per month with unlimited students and stations, plus a fourteen-day no-card trial and discounts for four or more centers.
Does Safehold have a privacy policy?
The current public page is a template telling the operator how to create a policy. It does not disclose actual practices.
Does it have terms of service?
The current terms page is also unfinished template guidance rather than contractual terms. Obtain completed documents before use.
Can it work without internet?
The site says it works on any internet-connected phone, tablet, or computer. No dependable offline check-in workflow was established.
Does it support multiple rooms or campuses?
Yes. Centers can represent rooms, age groups, programs, or campuses, with separate operations and organization-wide reporting.
Is it safe for real children’s data?
Safety is not established while policies, security controls, retention, incident response, pickup verification, and other details remain undocumented.
How should a church test it?
Use synthetic children and guardians only. Test roles, rush traffic, checkout, exports, outages, deletion, support, and safety requirements before procurement.
Sources & further reading
More Church Management Software
B1 ChurchA genuinely free, open-source church platform - app, website, giving and check-in on one database - run by an Oklahoma nonprofit. The catch is not the price - it is that the vendor own docs call the native app deprecated.
Involv Chat (church.chat)Involv Chat combines ministry-team messaging, rosters, blocked dates and service scheduling in a focused church workspace—useful when leaders protect volunteer consent and resist turning attendance or gifts data into a spiritual score.
ChurchSoftwareChurchSoftware—formerly StoreHouse—offers an unusually broad church-management core for $0, including giving, check-in, accounting and a shared mobile app, while charging transparently for vendor-heavy extras.
Pastor Notes AppA two-app system that lets leaders publish sermon notes and invite live congregational response while attendees use the free Bible Notes companion—but its pricing math, refund terms and app privacy disclosures need correction before a church commits.
Take RootA low-cost, offline-friendly relationship tracker built specifically for evangelism and discipleship follow-up—more intentional than a spreadsheet, but its old generic privacy policy does not adequately describe the sensitive ministry data the product exists to hold.
Develop.MeDevelop.Me packages course building, cohorts, discussion, assignments, gamification and mobile learning for churches and mission-driven organizations—with unlimited learners on paid plans, but a vague free tier and a 2022 website privacy notice leave procurement questions open.