Privacy policy

Your email address, your name, your church's name, and a scrypt hash of your password. The password itself is never stored and cannot be recovered from the hash.

Needed to perform the contract: without an account there is nothing to hold your creations or your plan. Your address is also how the operator tells you about the service itself: a change to it or to your own plan, a price change, an outage, or something new. If a promotion code gave you your plan and nothing has been made on the account for eight days, it also gets a short reminder, a week apart and at most three in a row, each with a link that stops them for good. If a creation you started finishes while the page is no longer open, one email says it is ready. The operator may also write to you personally, for example to welcome you when you join, and such a note can include a promotion code. A copy of every email the service sends you goes to the operator's own inbox ([email protected]), the confirmation, reset, hand-over and invitation links included, so the operator can help when a link does not arrive. Nothing else is sent to it: no newsletter, no mailing list, and nothing on anyone else's behalf.

Per account the service also keeps how often and when you sign in (the last ten moments), on which days you used it, how many files of each kind you rendered, and when your first and your latest creation were made (since version 1.5). The operator reads these on the admin page to see whether the service is used and by whom. Nothing records what you looked at, and nothing is kept about visitors who have no account.

An account can have a team: further sign-ins that share the church's creations, church design and photos. Everyone on the team sees each other's names and addresses and everything made on the account, and the owner can remove a member at any time; a removed member's creations stay with the church.

Your plan, when you paid, how many creations you have made in total and this week, and any promotion code you redeemed.

Needed to perform the contract and to enforce the allowance you bought.

The preaching notes you paste, or the text read from a Word, PowerPoint, PDF or text file you upload (the file is read in memory and not kept), the YouTube link you give, the title and preacher you type, and the service details for an upcoming Sunday. If you choose a file from Google Drive, your browser signs in to Google and fetches that one file itself; this server receives the file and never your Google sign-in.

Needed to perform the contract: this is the material the pack is written from.

The generated pack, with its copy, caption, hashtags and image instructions, and a snapshot of the church design settings it was made with.

Kept so you can come back and download it again. How many are kept depends on your plan.

Your two colors, typeface, theme, church name, handle, and a logo file if you upload one.

Any photograph you put behind a post, a story or an invitation card, stored with the creation you added it to. Nothing is read out of it: it is kept as the file you sent and drawn behind that one asset.

A photograph of people is personal data about them, and they are not the ones who uploaded it. You are responsible for having their agreement before it goes in, which is clause 7 of the terms.

Needed to perform the contract: it is part of the asset you asked the service to build.

If you use the feedback tab: your message, the kind you chose, and where you were when you sent it (the page, the open panel, the creation and asset if you were in the studio, your plan, interface language and browser). Replies are sent to your address and shown on your dashboard. Kept until your account is closed, so a thread can be picked up again.

Legitimate interest: answering you without asking which creation you meant, and improving the service. The context is captured so you do not have to describe it.

If you answer the survey the operator sends to people who used the service in the last month (since version 1.6): your answers to its ten questions, kept together with your name, address, church, plan and interface language, and the date. You answer once, and nothing is asked of you unless you choose to open it. The operator reads the answers to learn what to improve and may write back to you about them. Nobody outside the operator's team sees them, and they are not sent to any other service. Finishing the survey shows a discount code on the page; the code is not tied to your answers. Kept until your account is closed.

Legitimate interest: learning how the service is used and where it should improve, from the people who use it. Answering is voluntary, and you can ask for your answers to be deleted at any time by writing to [email protected].

Your IP address, held briefly in memory to limit signups and generations per address, and a session cookie so you stay signed in. Cloudflare Web Analytics also counts the visit itself, without a cookie. See the cookie notice.

Legitimate interest in keeping the service usable and its model costs from being spent by strangers.

Writes the pack from the message. The preaching notes you paste, and the title and description of the video you link. Not your name, email or church.

United States · their terms

Hosting, and the disk your account and packs sit on. Everything the service stores, because it runs on their machines: account details, preaching notes, generated packs, uploaded logos and uploaded photographs.

United States, with the deployment region set by the operator · their terms

Reads the title and description of a linked video; hands over a Drive file you pick. The video id from the link you paste, and this server's address. Not your notes and nothing that identifies you. If you choose a file from Google Drive, your own browser signs in to Google and fetches that file; nothing goes from this server to Google.

United States · their terms

Supplies the photographs behind the assets. Two to four English search words taken from the message, for example 'empty bench lake dusk', and the words you type into the photo search in the studio. When you search, your browser loads the thumbnails straight from Unsplash. Never the notes themselves, and nothing that identifies you.

United States · their terms

Delivers every email the service sends: address confirmation, password resets, account hand-overs, team invitations, replies to your feedback, plan reminders, and notes the operator chooses to email. Your email address and name, and the text of the email being sent, with a copy of each to the operator's own inbox. Never your preaching notes or what your packs contain.

United States · their terms

Takes the payment, and is the seller of record for it. Your email address and which plan you picked, sent when the checkout opens, plus an internal reference to your account so the payment can be matched back to it. Your card details are entered on Paddle's own checkout and never reach this service, which stores only the subscription id Paddle gives back.

United Kingdom · their terms

Counts visits to the website, nothing more. What a browser sends when it loads any page: the page address, the referring site, the browser and device type, and the visitor's IP address, which Cloudflare uses to work out the country and does not keep as an identifier. No cookie is set, nothing is stored in your browser, and visitors are not tracked from one site to another. Never your notes, your account or what your packs contain.

United States, with servers around the world · their terms