Privacy Policy

Last updated: May 29, 2026

Version: 2026-05-29

This Privacy Policy explains how Arship ("Arship", "we", "our", or "us") collects, uses, discloses, and safeguards information when you use the Arship mobile application (the "App") and any related services. By using the App, you agree to the practices described here. If you do not agree, please do not use the App.

1. Information We Collect

We collect only the information needed to run the App and the features you use. The categories below mirror the information actually stored by the App's backend systems.

1.1 Account & profile information

• Email address (required for account creation and sign-in).
• Display name shown to teammates.
• Date of birth, used to determine whether an account is for an adult or a minor (see Children's Privacy).
• Authentication credentials handled by our authentication provider (email / password, Google Sign-In, or Sign in with Apple). We do not store your password ourselves; passwords are managed and salted-and-hashed by Firebase Authentication.
• Account type and status (e.g., adult / child; active / disabled) used to apply the correct access and safety rules.
• Profile photo, if you choose to upload one.

1.2 Team and content data

• Teams you create or join, including team names and member lists.
• Songs, setlists, and notes you create within the App.
• Voice recordings you make in the App for rehearsal and team review.
• Chat messages and attachments you send in team and direct-message conversations.
• Voice part assignments, voting and contribution records associated with your team activity.

1.3 Technical identifiers used to operate the App

• Firebase user identifier (a non-public account ID).
• Device identifier and platform (iOS or Android), App version, locale, and timestamps such as last sign-in. These are used to send notifications to the right device and to provide basic operational diagnostics.
• Push notification token (FCM / APNs) per device, used solely to deliver notifications you have agreed to receive.
• Operational logs. Our cloud provider (Google Cloud) processes your IP address and basic request metadata for security and reliability. These are typically retained by Google for a limited period under Google's standard retention.

1.4 Information collected when a parent creates a child account

• Parent / guardian information: the parent's own account (already covered above) plus a record that the parent created the child account.
• Child information: display name, date of birth, the parent's email address used for parental notice and recovery, and the records the child creates in the App (recordings, messages, team activity). See Children's Privacy for the full disclosure required under COPPA.
• Consent record. When you create a child account we record the policy versions you accepted (privacy policy, terms, and parent direct notice) and a one-way hashed copy of the parent email for our compliance audit trail.

1.5 What we do not collect

• We do not use third-party advertising or marketing analytics.
• We do not track you across other apps or websites.
• We do not sell or rent your information to anyone.
• We do not use voice recordings to identify or authenticate you (see Voice Recordings).
• We do not request precise location, contacts, calendar, or health data.

2. How We Use Your Information

We use the categories above to:

• Provide and operate the App's core functionality (sign-in, teams, recordings, chat, setlists).
• Synchronize your data across your devices.
• Deliver push notifications you have opted into (e.g., reminders for upcoming setlists; new messages).
• Verify eligibility for features that depend on account type (adult vs. minor) or admin role.
• Protect the App from abuse: rate-limiting, abuse-detection, and security investigations.
• Comply with our legal obligations (including COPPA recordkeeping for parental consent).

3. Legal Bases for Processing (GDPR / UK GDPR)

If you are located in the European Economic Area or the United Kingdom, we rely on the following legal bases under Article 6 of the GDPR / UK GDPR:

• Performance of a contract: processing necessary to provide the App you signed up for.
• Consent: push notifications, optional profile photo, microphone use for recording, and (where applicable) verifiable parental consent for child accounts. You can withdraw consent at any time.
• Legitimate interests: security, abuse prevention, and basic operational logging — balanced against your rights as a user.
• Legal obligation: COPPA consent records and audit logs.

4. How We Share Your Information

We share information only as needed to run the App. We do not sell your information, do not share it for cross-context behavioral advertising, and do not transfer it for any unrelated commercial purpose.

• With your teammates. Content you choose to share with your team (recordings, chat messages, setlists, voice parts, etc.) is visible to other current members of that team. Removing yourself from a team removes your access to that team's shared content.
• With our service providers. We use the third-party service providers listed in Section 5 to host, secure, and deliver the App. These providers process your information on our behalf under written agreements requiring them to protect your data.
• For legal reasons. We may disclose information if required to do so by law, valid legal process, or a good-faith belief that disclosure is reasonably necessary to protect the rights, property, or safety of Arship, our users, or others.
• In connection with a business transaction. If Arship is acquired or merged, your information may be transferred to the acquiring entity under this Privacy Policy or a successor policy of equivalent protection.

5. Service Providers (Sub-Processors)

The following providers process information on our behalf:

We do not use advertising networks, analytics SDKs, or trackers in the App.

6. Data Retention

We keep information only as long as is reasonably necessary for the purposes described above, or as required by law.

• Active accounts: we retain account data while the account exists.
• Deleted accounts: when you delete your account from the App settings, we begin a cascade that removes your personally identifying data (display name, email, profile photo, recordings, messages, devices, teamProfile, and private profile records).
• Compliance audit trail. A tamper-evident audit record is retained for compliance purposes after deletion. For child accounts, this audit record contains only the hashed parent email, the parent's account ID, the child's former account ID, the policy versions accepted at consent time, and the timestamps of consent and deletion. We retain these records for the period required by COPPA and applicable law, and for a reasonable period thereafter, currently up to seven (7) years.
• Child accounts paused by a parent: when a parent revokes consent, the child account is frozen and permanently deleted after a 30-day grace window unless the parent restores it. The 30-day grace exists so a parent can recover from an accidental revocation; it is not a marketing window.
• Operational logs: Google Cloud's standard retention applies; we do not extend it.

7. Security

We use industry-standard security measures provided by Google Firebase, including TLS encryption in transit, encryption at rest, server-side access rules, custom claim–based role enforcement, and abuse-detection (App Check) in our production environment. We restrict server-side access to the smallest necessary set of operators. Despite reasonable safeguards, no system is perfectly secure; we encourage you to use a strong unique password and to enable platform-level account protections.

If we become aware of a security incident that affects your information, we will notify you and any required regulators consistent with applicable law.

8. International Data Transfers

The App is operated from the United States. If you access the App from outside the United States, your information will be transferred to, stored in, and processed in the United States and other jurisdictions where our service providers operate. Where required, we rely on the European Commission's Standard Contractual Clauses (or the UK International Data Transfer Addendum) as a transfer mechanism.

9. Your Rights

Subject to applicable law, you (or, for a child account, the supervising parent) have the right to:

• Access the personal information we hold about you;
• Correct inaccurate personal information;
• Delete your account and the personally identifying information associated with it from within the App's Settings;
• Receive a portable export of your data in a structured, commonly used, machine-readable format;
• Object to or restrict certain processing;
• Withdraw consent at any time, where processing is based on consent;
• Leave any team, which removes your access to that team's shared content; and
• Lodge a complaint with a supervisory authority where you live.

To exercise rights other than those directly available in-app, contact us at support@arship.app. We aim to respond within 30 days, and in any event no later than 45 days where a longer period is permitted.

10. California Residents (CCPA / CPRA)

If you are a California resident, you have the rights described in Section 9 above (Right to Know, Right to Correct, Right to Delete, Right to Data Portability), plus the right to opt out of the sale or sharing of your personal information. Arship does not sell personal information and does not share personal information for cross-context behavioral advertising. For children under 16, California law requires affirmative opt-in for any sale; because we do not sell information, no opt-in is required, and we will not begin selling without first asking.

Categories of personal information collected, by CCPA category: identifiers (email, display name, user ID, device ID, push token, IP address); commercial information (account type / status); audio and other electronic information (voice recordings, chat messages); user content (songs, setlists, notes, attachments); sensitive personal information limited to date of birth (used solely to determine adult / minor status). We disclose categories of personal information to the service providers listed in Section 5 strictly for the business purposes described in Section 2.

We do not knowingly use or share sensitive personal information for purposes other than those identified in California Civil Code §1798.121(a). To exercise a California right, email support@arship.app; you may also use an authorized agent (we will verify the authorization).

11. EU / UK Residents (GDPR / UK GDPR)

The data controller for the App is Arship (contact details below). The legal bases for our processing are described in Section 3. You have the rights described in Section 9, including the right to lodge a complaint with your local supervisory authority (in the UK, the Information Commissioner's Office).

12. Children's Privacy (COPPA)

Arship may be used by children under 13 only when a parent or legal guardian creates the account on the child's behalf, with verifiable parental consent under the U.S. Children's Online Privacy Protection Act ("COPPA") and accompanying FTC rule (16 C.F.R. Part 312).

12.1 Personal information collected from children

• Display name (chosen by the parent or the child with the parent).
• Date of birth, used to identify the account as a minor account and to schedule the automatic transition described below.
• Email address used for sign-in (we use email-link sign-in for child accounts; password sign-in is disabled).
• Voice recordings the child creates within the App. Voice recordings that contain a child's voice are personal information under COPPA and are treated as such throughout this Policy.
• Chat messages, contributions, and team-participation data created by the child within the App.
• Push notification token and the same operational identifiers described in Section 1.3.

12.2 How a parent provides consent

The parent must first create their own adult Arship account, verify their email, and complete a recent-reauthentication step. Within the App, the parent reviews:

• this Privacy Policy,
• the Arship Terms of Service, and
• a Parent Direct Notice that describes what we collect from the child, how we use it, with whom it is shared (the child's team and our service providers), the parent's rights, and how to contact us.

Each of these documents is versioned; we record which version the parent accepted, when, and a one-way hashed reference to the parent's email for audit purposes. The parent is rate-limited to a small number of child-account creations per day to deter misuse.

12.3 Disclosure of a child's information

A child's recordings, chat messages, and contribution records are visible to other current members of the child's worship team (whom the parent has consented to). They are not shared publicly, are not used for advertising, and are not sold. Our service providers (Section 5) process this information on our behalf under written agreements.

12.4 Parent's rights at any time

• Review the child's personal information in the App or by contacting us.
• Pause / revoke consent. The child's account is frozen and permanently deleted after a 30-day grace window; the parent can restore the account during that window.
• Refuse further collection and request deletion at any time.
• Adjust the child's permissions (for example, disabling direct messages or chat).
• Receive a portable export of the child's information.

Use Parent Controls in the App for the most direct path, or email support@arship.app.

12.5 Automatic transition at age 13

When a child reaches their 13th birthday, the account is automatically migrated to a standard account: parental controls relax, password sign-in is enabled, and the parent is notified by email. Records of the parental-consent period are retained as described in Section 6.

12.6 If we learn we have collected information from a child without consent

If we discover that a child under 13 has created an account without verifiable parental consent, we will promptly delete that account and its associated personal information.

13. Voice Recordings and Biometric Information

We do not use voice recordings to identify or authenticate users. Voice recordings are used solely for the team-rehearsal purpose for which you created them, and are visible only to current members of the team you placed them in. We do not run voice-print extraction, speaker identification, voice cloning, or voice-based behavioral profiling on your recordings, and we do not allow third parties to do so on our behalf.

Voice recordings are retained until you delete them, leave the team, or delete your account; see Section 6.

14. Push Notifications

The App requests permission before sending push notifications. You can revoke notification permission at any time from your device's system settings; in addition, the App's settings allow you to disable specific notification categories. When you allow notifications, your device's push token (FCM / APNs) is stored against your account so that the notification can be delivered to that device.

15. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the "Last updated" and "Version" dates at the top of this page and, for material changes that affect how we collect or share information from a child account, we will notify the supervising parent by email and require renewed consent before continuing the affected processing.