Privacy Policy

Last updated: October 16, 2026

Version: 2026-10-16

This Privacy Policy explains how Arship LLC ("Arship", "we", "our", or "us") collects, uses, shares, and protects information when you use the Arship mobile application (the "App") and related services. Arship is a private collaboration tool for worship teams and bands. The App is offered to adults 18 and older and is currently intended for users in the United States.

1. Information We Collect

We collect only what is needed to run the App and the features you use.

1.1 Account and profile information

• Email address, used to create your account and sign in. It is stored in a private part of your account that other users cannot read.
• Date of birth, collected when you sign up (or, for accounts created before we asked, the first time you accept our updated Terms) so we can confirm you are at least 18. It is stored privately and is not shown to other users.
• Display name and, if you choose to add one, a profile photo.
• Sign-in credentials, handled by our authentication provider (email and password, Google Sign-In, or Sign in with Apple). We never see or store your password; Firebase Authentication stores it in salted, hashed form.
• Account status (for example, active or disabled) and the time you last signed in.
• Language and time zone of your device. We use your time zone to hold non-urgent notifications during quiet hours (see Section 14).

1.2 Team and content information

• Teams you create or join, your role (for example, owner, admin, or member), your positions or instruments, and your voice part.
• Songs, setlists, services, and notes you create, and your answers to requests to play in a service.
• Availability: dates you mark yourself as away, and any short note you add, which only you can see.
• Voice recordings you make in the App, including practice takes you submit and guide recordings.
• Chat messages and attachments (such as photos, which the App compresses before upload) in team chats and direct messages.
• Music sheets (images or PDFs) you upload to a song.
• Song requests, poll votes, and approval or review decisions.

1.3 Safety information

• Reports you file about content or people: the reason you chose, any note you add, and identifiers for the reported item, the person reported, and you.
• Blocks: the list of people you have blocked.

1.4 Technical information

• Account identifier: a non-public ID that Firebase assigns to you.
• Device information: platform (iOS or Android), App version, and a push notification token for each device, used only to deliver notifications.
• Device attestation: the App uses Firebase App Check (Apple App Attest on iOS) to help confirm requests come from a genuine copy of the App. These checks are being rolled out and are not yet required for every request.
• Consent records: when you accept our Terms and this Policy, or the in-app microphone notice, we record the document version, the time, and the IP address the request came from, so we can show what you agreed to.
• Operational logs: our cloud provider (Google Cloud) processes IP addresses and basic request metadata for security and reliability, and keeps them under its standard retention periods.
• On your device: the App caches audio and some data on your device so it works smoothly. You can clear the audio cache in Settings.

1.5 What we do not do

• We do not use advertising networks, third-party analytics, or crash-reporting SDKs in the App.
• We do not track you across other companies' apps or websites.
• We do not sell or rent your personal information, and we do not share it for cross-context behavioral advertising.
• We do not use voice recordings to identify or authenticate you (see Section 13).
• We do not request your precise location, contacts, calendar, or health data.

A note on church affiliation. Being a member of a team tied to a church or ministry may reveal or suggest your religious affiliation. We use team membership only to run the App for you and your team. We never use it for advertising or profiling, and we never sell it.

2. How We Use Your Information

We use the information above to:

• Run the App's features: sign-in, teams, scheduling, recordings, playback, chat, and setlists;
• Keep your data in sync across your devices;
• Send the notifications described in Section 14;
• Confirm you meet our minimum age (18) and apply the right permissions for your role;
• Keep the App safe: handle reports, enforce blocks, limit request rates, detect abuse, and investigate security problems;
• Respond to support requests; and
• Meet our legal obligations and keep records of consent.

3. Users Outside the United States

Arship is currently offered in the United States. If you use the App from somewhere else, your information is processed in the United States as described in Section 8. Where a law such as the GDPR or UK GDPR applies, we rely on these legal bases: performance of a contract (to provide the App); consent (microphone recording, push notifications, optional profile photo), which you can withdraw at any time; legitimate interests (security, abuse prevention, handling reports); and legal obligation (consent and legal records). You may also have the right to complain to your local data-protection authority.

4. Who Can See Your Information

4.1 Other Arship users

• Only current members of your teams can see your display name, profile photo, and role in the team. Other Arship users cannot see your profile. Your email address, date of birth, block list, last sign-in time, and time zone are never shown to other users.
• Current members of your team can see what you share in that team: recordings, guide recordings, chat messages and attachments in team chat, song requests, setlists, your positions, and your voice part.
• Team owners and admins can also see your answers to service requests, the dates you have marked as away (but not any note you added, which only you can see), and reports filed in their team, including who filed them.
• Direct messages are visible only to the two people in the conversation.
• When someone joins a team, its owner and admins are notified.
• If you leave or are removed from a team, you lose access to its content. What you shared there stays with the team unless you delete it first, or until you delete your account (see Section 6).

4.2 Service providers

We use the providers listed in Section 5 to host, secure, and deliver the App. They process information for us under written terms.

4.3 Legal reasons and safety

We may share information if the law or valid legal process requires it, or if we believe in good faith that sharing is reasonably necessary to protect the safety, rights, or property of our users, the public, or Arship. This includes reporting apparent child sexual exploitation to the National Center for Missing & Exploited Children (NCMEC).

4.4 Business transfers

If Arship is acquired or merged, your information may be transferred to the new owner under this Policy or a successor policy that protects it at least as well.

5. Service Providers (Sub-Processors)

Account verification and password-reset emails are sent by Firebase Authentication (Google).

6. Data Retention and Account Deletion

We keep information only as long as we need it for the purposes in this Policy, or as the law requires.

6.1 While your account is active

We keep your account data while your account exists. When you delete a recording, guide, or song request in the App, it is removed from our active systems, including any related audio file. Chat messages work differently. When you or an admin delete a message, it is hidden from everyone in the App, but its text and any attachment stay stored on our servers for 30 days so we can handle reports and safety issues. After 30 days the text, any poll, and any attachment are permanently erased; only an empty placeholder remains so the conversation stays in order. To have a deleted message erased sooner, email us.

6.2 When you delete your account

You can delete your account in Settings → Delete Account. If you own a team, you need to transfer ownership or delete the team first. Deletion then does the following:

6.3 Records we keep after deletion

• Security and compliance logs: a minimal audit record that an account was deleted, with hashed or internal identifiers.
• Consent records: kept so we can show what terms applied, for 7 years.
• Reports and moderation records: kept so we can handle abuse, repeat violations, and legal requests, for 3 years from when the report was filed.
• Operational logs and backups: Google Cloud's standard retention applies, and we do not extend it.

7. Security

We use security features of Google Firebase and Google Cloud, including encryption in transit (TLS) and at rest, server-side access rules that limit each person to the teams they belong to, server-controlled roles, and rate limits. We are rolling out device attestation (Firebase App Check with Apple App Attest), which is not yet required for every request. Only a small number of operators can access production systems. No system is perfectly secure, so please use a strong, unique password.

If we learn of a security incident that affects your information, we will notify you and any regulators as the law requires.

8. Where Your Data Is Processed

Arship is operated from the United States, and your information is stored and processed there and wherever our service providers operate. Where the law requires a transfer mechanism, we rely on our providers' Standard Contractual Clauses.

9. Your Rights and Choices

Depending on where you live, you may have the right to:

• Access and export your information. Settings → Export My Data gives you a machine-readable file with your profile, team memberships, the recordings you submitted (as temporary download links), messages you sent, your song requests, notifications sent to you, and your devices. For anything else (for example, your availability, guide recordings, or consent records), email us.
• Correct your information. You can edit your display name, photo, positions, and voice part in the App; email us for anything else.
• Delete your account (see Section 6), or ask us to delete specific items.
• Withdraw consent (for example, turn off notifications or microphone access in your device settings).
• Leave a team at any time.
• Appeal our decision on a privacy request by replying to our response.

Email support@arship.app for requests the App doesn't handle directly. We may need to confirm your identity first. We aim to respond within 30 days, and no later than 45 days. More detail is on our Data Request page.

10. California Residents (CCPA / CPRA)

If you are a California resident, you have the rights described in Section 9 (to know, correct, delete, and port your data), the right not to be discriminated against for using them, and the right to opt out of the sale or sharing of personal information. Arship does not sell personal information or share it for cross-context behavioral advertising.

Categories we collect: identifiers (email, display name, account ID, device and push identifiers, IP address); audio and electronic information (voice recordings, chat messages and attachments); user content (songs, setlists, notes, music sheets, availability); internet or network activity (sign-in times, operational logs); and sensitive personal information limited to date of birth, used only for age assurance, plus any religious affiliation your team membership may suggest, which we use only to provide the App. We do not use sensitive personal information for purposes beyond those allowed by Cal. Civ. Code §1798.121. We disclose these categories only to the providers in Section 5, for the purposes in Section 2. To make a request, email support@arship.app; you may use an authorized agent.

11. Reporting, Blocking, and Safety

• Reporting. You can report a message, recording, song request, or person from inside the App. Reasons include spam, harassment, inappropriate content, copyright, intimate images shared without consent, and child safety; the last two are treated as urgent. Each report alerts Arship's support inbox with identifiers only (see Section 5), creates an audit record, and is visible to your team's admins.
• Blocking. When you block someone, the App hides their messages, recordings, song requests, and notifications from you everywhere. They can't start or continue a direct message with you, and they stop triggering push notifications on your devices. Blocking does not delete their content for other people. You can unblock in Settings.
• Intimate images. Anyone, including people without an Arship account, can ask us to remove intimate images shared without consent. See our TAKE IT DOWN removal page. We act on valid requests within 48 hours.

12. Minors

12.1 Arship is for adults 18 and older

You must be at least 18 to create an Arship account. We ask for your date of birth at sign-up, and anyone under 18 cannot create an account. Accounts for minors are not available, including accounts created by a parent, and we do not knowingly collect personal information from anyone under 18. We may offer options for minors in the future. If we do, we will update this Policy first.

12.2 If we learn a minor has an account

If we learn that someone under 18 has an Arship account, we will close the account and delete its personal information promptly. If you believe a minor is using Arship, email support@arship.app.

13. Voice Recordings and Biometric Information

We do not use voice recordings to identify or authenticate anyone. We do not extract voiceprints, identify speakers, clone voices, or profile anyone by voice, and we do not let third parties do so for us. Recordings are used only for your team's rehearsal and are visible only to current members of that team. Arship staff do not listen to recordings except when needed to handle a report, a legal request, or a support request you make.

A recording stays until you delete it, a team admin deletes it, the team is deleted, or you delete your account (see Section 6). Leaving a team does not delete the recordings you shared there.

Please record only yourself, or people who have agreed to be recorded. The App shows clearly when the microphone is recording.

14. Notifications

The App asks permission before sending push notifications, and you can turn them off at any time in your device settings. Practice reminders are scheduled on your device and can be turned off in the App's Settings. When you allow notifications, we store your device's push token so we can deliver them.

Notifications cover things like new chat messages, requests to play in a service, recording approvals, and new members joining a team (sent to its owner and admins). Except for chat messages, non-urgent notifications are held during quiet hours in your local time zone and delivered in the morning. Chat notifications may show a short preview of the message on your lock screen, which you can control in your device's notification settings.

15. Changes to This Policy

We may update this Policy from time to time. When we do, we will change the "Last updated" date and version above. If a change is material, we will tell you before it takes effect. The next time you open the App, it will show an "Updated Terms" screen, and you will need to agree in order to keep using the App.