Privacy Policy

PraiseShare (“we,” “us”) provides tools for worship leaders to manage songs and setlists and run live worship sessions that congregations can follow in real time. This policy explains what information we collect, how we use it, and the choices you have. It applies to the PraiseShare web app, the PraiseShare iOS app, and the praiseshare.com website.

Information we collect

Account information. When you create an account we collect your name, email address, and password (stored as a secure hash — we never see your password). You may optionally provide your church name and role (e.g., worship leader, musician).

Content you create. Songs, lyrics, chord charts, setlists, tags, and related notes you add to your library are stored so the app can function. This content is private to your account unless you actively share it (for example, by starting a live session).

Live session data. When you lead a live session, we store the session’s state (which setlist and song is active) so followers’ devices stay in sync. Congregation members who follow a session via link or QR code do not need an account, and we do not require any personal information from them to follow along.

Payment information. Paid subscriptions are processed by Stripe. Your card details go directly to Stripe — we never receive or store your full card number. We keep records of your subscription tier and status.

AI song import. If you use the AI import feature, the song file or text you submit is sent to OpenAI’s API to be converted into a formatted chord chart. It is used only to process your request; neither we nor OpenAI use your content to train AI models. OpenAI may retain API inputs for up to 30 days to monitor for abuse and misuse, after which they are deleted (see OpenAI’s API data usage policy).

Optional integrations. If you connect Planning Center, we access your Planning Center data only as needed to provide the integration, using the permissions you grant. You can disconnect it at any time.

Technical data. Like most services, our infrastructure logs basic technical information (such as IP address, browser/device type, and timestamps) for security, debugging, and abuse prevention. We do not run third-party advertising or cross-site tracking, and we do not sell your data.

Cookies and local storage. We use local storage/cookies only to keep you signed in and remember your app preferences — not for advertising. Because we do not track you across other sites or services, the app behaves the same whether or not your browser sends a “Do Not Track” signal.

How we use your information

• Provide, maintain, and improve the app (your library, setlists, live sessions)
• Process subscriptions and send billing-related messages
• Send transactional email (account invitations, password resets, feature updates you’ve opted into, and replies to feedback you submit)
• Keep the service secure and prevent abuse
• Respond when you contact us

We do not sell or rent your personal information, and we do not share it with third parties for their own marketing.

Service providers

We rely on a small number of providers to run PraiseShare, each of which processes data only on our behalf:

• Supabase — database, authentication, and realtime sync (data hosting)
• Vercel — web application hosting
• Stripe — payment processing
• Resend — transactional email delivery
• OpenAI — AI song formatting (only content you submit for import)
• Planning Center — only if you connect the integration
• Apple — App Store distribution and TestFlight for the iOS app

Your content and copyright

You are responsible for the songs and lyrics you add to your library and for having the rights (e.g., a CCLI or other license) to use and display them in your worship context.

Data retention and deletion

Your data is retained while your account is active. You can delete your account at any time from Settings → Delete Account in the app, which permanently removes your account and library from our live systems. You may also email us (see Contact below) to request deletion or a copy of your data.

After deletion:

• Residual copies may remain in encrypted backups for a limited period (up to 30 days) before being purged in the normal backup cycle.
• We retain billing and subscription records for as long as tax, accounting, and other legal obligations require.
• Server logs containing technical data (such as IP addresses) are kept for a short period for security purposes and then deleted or anonymized.

Your privacy rights

Wherever you live, we extend the same core rights to every user:

• Access and export — ask for a copy of the personal data we hold about you, in a portable format.
• Correction — update your name, email, and profile details in Settings, or ask us to correct anything else that’s inaccurate.
• Deletion — delete your account yourself in Settings → Delete Account, or ask us to do it.
• Objection and restriction — object to, or ask us to limit, a particular use of your data.
• Withdrawal of consent — where we rely on your consent (for example, optional feature-update emails or the Planning Center integration), you can withdraw it at any time by changing your settings or contacting us.

To exercise any of these rights, email us at the address in the Contact section. To protect your account, we verify requests via the email address on the account. We respond within 30 days (or sooner where local law requires), and we will never discriminate against you — in pricing, features, or service — for exercising your rights.

For users in the EU, UK, and similar jurisdictions

Where laws like the GDPR apply, our legal bases for processing are:

• Performance of a contract — providing the app itself: your account, library, setlists, live sessions, and subscription.
• Legitimate interests — keeping the service secure, preventing abuse, and fixing problems (technical logs), and improving the product.
• Consent — optional emails and optional integrations you choose to connect.
• Legal obligation — retaining billing records for tax and accounting.

You also have the right to lodge a complaint with your local data protection supervisory authority, though we’d appreciate the chance to address your concern directly first.

For California residents

In the categories used by the CCPA/CPRA, we collect: identifiers (name, email address), commercial information (subscription tier and billing status), internet activity (the technical log data described above), and the content you create in the app. We disclose these only to the service providers listed in this policy, only so they can run the app on our behalf. We do not sell your personal information and do not “share” it for cross-context behavioral advertising, and we have not done so in the preceding 12 months. California residents can exercise the rights above (access, deletion, correction, and non-discrimination) using the same process — the in-app controls or the Contact email.

International data transfers

PraiseShare is operated from the United States, and the service providers listed above process data on servers in the US. If you use PraiseShare from outside the US (including the EU or UK), your information is transferred to and processed in the US. Where required, our providers protect these transfers with recognized safeguards such as the EU–U.S. Data Privacy Framework and/or Standard Contractual Clauses — see each provider’s privacy documentation for details.

Children

PraiseShare is not directed at children under 13, and we do not knowingly collect personal information from them. Congregation members of any age can follow a live session without providing personal information.

Security

Data is encrypted in transit (HTTPS/TLS) and stored with access controls (row-level security) so accounts can only access their own data. No system is perfectly secure, but we take reasonable measures to protect your information. If a data breach affects your personal information, we will notify you and any applicable regulators without undue delay, as required by law.

Changes to this policy

If we make material changes we will update this page and adjust the effective date, and for significant changes we will notify you in the app or by email.

Contact