The people you ask to walk together are your church's people, and the record of a walk is your church's. This release says so in every email, and lets you ask someone who isn't on your EmmauOS team.
Your notice, in your name
Settings → Walking with has a new line on the checklist: a privacy notice. Link your own, or adopt EmmauOS's starter by filling in a few blanks. EmmauOS hosts the starter at your church's address and in your church's name. Every invitation links to it, beside EmmauOS's own privacy page.
Why: the people you write to should hear who is responsible for their information from the church that asked them, not from a software company.
Someone outside your team
Choose Someone not on our team… when you suggest a walk. Give their name and the address they gave you, and say whether they are part of your church. A friend from another church can be asked only when your notice covers people outside the church, and only after you have asked them in person. Their invitation says exactly what is kept and that it rests on their consent.
Why: the right person to walk with someone is often a small-group leader or an old friend, not a staff member, and they should know what saying yes means before they say it.
Not on your list
People added this way are listed on the Walking with page with the note a pastor gave for them. You can release them from walking with, or erase them when they ask.
Why: a church that vouches for someone outside its records should be able to see whom it vouched for, and delete them when asked.