Your data is yours, and we mean it literally

Try to leave most software, and you find out what it really thinks of you. The button is right there, labeled “Export your data,” and you click it, hopeful, and what lands on your desk is a forty-thousand-line file with column names only a machine could love, half your history missing, the relationships between things quietly severed. It technically fulfilled the promise. It gave you nothing you can use. That gap between what was promised and what arrived is not an accident. It is a design decision, made long before you ever asked to go.

We made a different decision, and we made it at the beginning, when it was still cheap to make.

Hostage-taking by data model

Most software doesn’t trap you with a contract. It traps you with a schema. The records get shaped, slowly and deliberately, into a form that only makes sense inside the one system that created them. Your people are scattered across a dozen tables joined by internal codes. Your money lives in a ledger whose logic is undocumented on purpose. Your history is smeared into event logs that were built for the vendor’s analytics, not for your memory. None of it is labeled for a human. None of it means anything the moment it leaves the building.

Then, when you want out, the same vendor offers to help, for a fee, on their timeline, in a format of their choosing. This is sold as a service. It is a ransom. And the ugly part is that the difficulty was engineered years earlier, when someone chose to store your parish the way that was convenient for them instead of legible for you.

We think that’s a small betrayal dressed up as a technical constraint. An institution’s records are not the software’s property. They are the institution’s life, written down. The software is just the pen.

A real export isn’t a feature you bolt on before launch. It is the shape of the data model itself, and you cannot fake that shape at the end.

The promise lives in the data model

Here is the part that isn’t obvious from the outside. “Export everything, anytime” cannot be a real promise unless the data was honest all the way down. You can’t sprinkle portability on at the end like salt. If the records were built to be legible, so that a person is a person, a gift is a gift, a baptism is a baptism, each one named plainly and connected to the things it’s actually connected to, then handing them back whole is almost nothing. It’s already how they live inside. If the records were built to be clever, no export button on earth can un-tangle them for you.

So when we design the records layer, we design it as if someone we respect is going to read it cold, years from now, with no manual and no goodwill toward us. That single discipline decides everything downstream:

• Your people come out as people, with names, families, roles, and the ties between them intact, not as foreign keys pointing at rows you can’t see.
• Your history comes out as a story you can follow: who did what, when, and what changed, in language a person wrote for a person.
• Your money comes out as a real ledger, with every gift, fund, and pledge accounted for and reconcilable, not a summary that hides its own math.
• Your sacraments come out as records, whole and dated and correct, because for a church these are not data points. They are the register. They have to outlive us, and any system we build.

Legible, complete, and shaped like the thing it describes. That’s the bar. If a careful person can open what we hand back and simply understand it, the model was honest. If they can’t, no amount of marketing copy fixes it.

Building the door so you can walk out

People ask why a studio would spend real effort making it easy for customers to leave. It sounds, at a glance, like building the exit ramp before the highway. But the logic runs the other way, and it runs deep.

When you build software knowing the door is always unlocked, with no fee to open it, no negotiation, and no waiting on us, you can’t rely on lock-in to keep anyone. The only thing left to hold someone is the work being good. That’s a healthy pressure to live under. It means every month we have to earn the next one on merit, because the alternative isn’t a penalty screen, it’s a clean, painless goodbye. Software built to survive your leaving tends to be software worth not leaving.

We built it so you could walk away at any moment. That’s exactly why we think you won’t want to.

There’s a trust that only forms this way. You can’t argue someone into it. You can only show them the door is real, that the export gives back everything, in a form they can carry, on the day they ask, for nothing, and then let them notice they never needed it. An institution that knows it can leave at will is one that can finally relax and put down roots. Fear makes short-term customers. Freedom makes long ones.

Yours, in the plain sense of the word

So when we say your data is yours, we don’t mean it the way the fine print means it. We don’t mean you hold a theoretical right to a file you can’t read. We mean your records are kept in a form built for you to understand, to carry, and to keep, with us or without us. Your people. Your history. Your money. Your sacraments. Written down honestly, handed back whole, whenever you say.

This is the least glamorous decision we make and one of the ones we’re proudest of. It is invisible right up until the moment it matters, and in that moment it matters completely. Long-memory institutions have outlived a lot of vendors, and they’ll outlive us too. The least a careful studio can do is build the records so they’re ready to. We’d rather earn your staying than engineer your inability to go. Keep what’s yours. We only hope you’ll want to keep it here.