Privacy policy

The short version

We collect what we need to give you an account, put you in your organization, and let a leader push a song to your device. Nothing else.

We do not sell your data. We do not run ads. We do not track you across other apps or websites. Your location never leaves your device.

What we collect

Account details. Your email address and name. Optionally, if you choose to add them: a phone number, a second contact email, a postal address, and a profile picture.

Sign-in. If you sign in with Google or Apple, we receive your email address and name from them so we can create or link your account. We never receive your password.

Your device. When you sign in on a phone or tablet we record its platform, app version, a notification token, and when it was last seen — so we can send you a notification when an event goes live.

What you contribute. Songs, chords, translations and transliterations you submit, and which organizations you belong to. Contributions are reviewed before publication and become part of the public library.

Activity we have to keep. A record of privileged actions (approving a member, publishing the library) so organizations can audit their own governance, and counts of events held, which is how organization plans are measured.

What we deliberately don't collect

Your location. Some organizations attach a venue to an event so your device can notice you've arrived and offer to let you join. That check happens entirely on your device: we send it the venue's coordinates, and it decides. Your position is never sent to us and we could not see it if we wanted to.

Your camera. The app can scan a QR code to join an event. The image is processed on the device and never uploaded or stored.

Your card details. Payments go through Stripe. Card numbers never touch our servers.

• No advertising identifiers
• No cross-app or cross-site tracking
• No sale or sharing of personal data with data brokers

How we use what we collect

To sign you in and keep your account secure. To show you your organization's events and songbooks. To notify you when an event goes live. To review and publish contributions. To bill organizations on paid plans. To investigate abuse and keep the service running.

We don't use your personal data to train anything, and we don't profile you.

Who else sees it

Our infrastructure runs on Amazon Web Services, which stores and processes data on our behalf. Payments are handled by Stripe. If you use social sign-in, Google or Apple confirms your identity to us. Notifications are delivered through Apple and Google's push services.

Within a platform, members of an organization can see your name and profile picture in that organization's context. Contributions you make to the public library are public, and author pages are public by design.

We disclose data to anyone else only where the law requires it.

How long we keep it

Your account data stays for as long as your account exists. Audit records are kept for as long as the organization needs them for governance. Published contributions remain part of the library, since removing a song from a published version would break it for everyone who has it downloaded — but we'll remove your name from it on request.

Your choices

You can view and change your account details in the app or the web console at any time. You can turn off event notifications in Settings. You can ask us for a copy of your data, or ask us to delete your account, and we'll do it.

Reader settings — font size, colours, handedness, which libraries you've downloaded — are stored on your device, not on our servers. Uninstalling the app removes them.

Children

Vercast isn't directed at children under 13, and we don't knowingly collect their personal data. If you believe a child has given us data, contact us and we'll remove it.

Changes

If we change this policy in a way that matters, we'll say so in the app and update the date at the top. Continuing to use Vercast after that means you accept the change.