Privacy Policy

Who we are

Reformed Chords is run by Joel George, an individual, at reformedchords.com. It gives a worship team one place to read chord sheets and setlists together. Access is by invitation only — an administrator of an organization has to invite you before you can make an account.

This policy is written in plain English rather than boilerplate. If something here is unclear, ask.

What we collect

• Your account — your email address, and a display name if you set one. If you sign in with Google we receive the name and email address on that Google account and nothing else; we get no access to anything else in your Google account.
• Your password, if you set one — stored only as a hash by our authentication provider. We never see it.
• What you create — chord sheets (title, artist, key, tempo, time signature, duration, and the full lyrics and chords), setlists (name, service date, description, and who is playing which instrument), and any edit you submit for approval, including the note you attach to it.
• Where you belong — which organization you are a member of and your role in it.
• Invitations — when an administrator invites someone, we store that email address and a one-time link that expires after seven days. That record is kept even if the person never creates an account.

What we don't collect

No analytics, no trackers, no advertising, no third-party scripts of any kind. We do not log your IP address or your device — there is no column anywhere for either. We do not ask for your location, your date of birth, or any payment details, and we do not store uploaded files beyond the sheet text itself. Nothing is sold or shared for marketing. This is not only a promise: none of the machinery to do it exists in the app.

One transient exception, for accuracy: the signup endpoint reads the request's IP address to rate-limit repeated attempts. It is held in memory for that purpose and never written to the database.

Who can see your content

Your organization, and nobody else's. Sheets, setlists and edits are separated per organization in the database itself, not merely in the app, so one organization cannot read another's.

Inside your organization:

• Administrators can see every sheet and setlist in the workspace, including ones you created.
• If you submit an edit for approval, an administrator sees your full proposed text and the note you sent with it.
• While a setlist is being led in Live Mode, other members following it can see that you are connected.

We can access the database in order to run and support the service.

Services we use

Supabase stores the database and handles sign-in and access control — all of your content lives there. Vercel hosts the app. Resend sends invitation emails and therefore receives the recipient's address. Google is involved only if you choose to sign in with it. Have I Been Pwned is used once, when you set a password at signup, to check whether it appears in known data breaches: only the first five characters of a hash of the password ever leave the server — never the password, and nothing that identifies you. If that check is unavailable, signup continues on our own password rules.

On your device

• Cookies — only the ones that keep you signed in. There are no advertising or analytics cookies.
• Preferences — theme, stage theme, chord display, capo, and setlist view are saved in your browser only.
• Offline setlists — saving a setlist for offline use stores a complete copy in your browser, including the full lyrics and chords of every song in it. Up to 25 setlists are kept this way, and the least recently saved are dropped after that.

Signing out clears the offline setlist copies, the cached organization details and the app's cached pages. It does not clear your display preferences — theme, stage theme, chord view, capo and setlist view stay on the device. On a shared device, clear the site data in your browser if you want everything gone.

Keeping and deleting your data

Your content stays until you or your organization deletes it. Sheets and setlists can be deleted in the app. Invitation records are currently kept even after they are accepted or expire.

There is no self-serve way to delete your account or download a copy of your data yet. Write to [contact address to be added] and we will do it by hand. Changing your email address and resetting a password are not self-serve either — same address. You can change your display name yourself at any time from your account page.

If your organization removes you, you lose access to its content immediately. The content itself stays with the organization.

Security

Registration is invitation-only and enforced in the database rather than only in the app; every request is served over HTTPS; passwords are hashed and checked against known breaches when set; and organizations are separated by row-level security in the database, so isolation does not depend on the app remembering to ask.

No system is perfect, and this one is run by one person. Keep your own copy of anything you cannot afford to lose.

Children

Reformed Chords is not intended for children and we do not knowingly collect information from them. Worship teams often include minors; where yours does, the organization's administrator is responsible for obtaining whatever consent from a parent or guardian is required before inviting them.

Contact and changes

Joel George is responsible for this service and the data in it, and is the point of contact for any privacy question, request or complaint — including as grievance officer for the purposes of India's Digital Personal Data Protection Act, 2023 and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021. Write to [contact address to be added].

If this policy changes we will update the date at the top, and where the change affects you we will say so in the app. Continuing to use Reformed Chords after a change means you accept the updated policy. See also our Terms of Service.