WorshipPro Privacy Policy
Version 1.0 · Effective date: September 23, 2026
This is an English translation provided for convenience. The Polish version (Polityka prywatności) is the legally binding one; in case of any discrepancy, the Polish version prevails.
This policy describes what personal data we process in the WorshipPro service — in the web application at worshippro.net, in the WorshipPro app for iPhone and iPad, and in the desktop app — why we do it, and what rights you have. WorshipPro is a tool for churches and worship teams: a song library with chords and sheet music, service and ministry planning, presentation, the Bible, and church membership records and administration.
1. Who controls your data
WorshipPro has two roles, depending on which data is concerned.
Your account data (first and last name, email, sign-in, content you create as a user) — the controller is the operator of the service:
- Name: ELEVATION SYSTEMS — Emanuel Trzcionkowski
- Address: ul. Raciborska 104B, 44-210 Rybnik, Polska
- NIP (tax ID): 6423114582, REGON (business registry number): 521321287
- Email: contact@worshippro.net
- Phone: +48 786 833 736 (formal matters only; technical support by email)
- Website: worshippro.net
Data entered by a church (records of members and guests, children and guardians, groups and ministry teams, schedules, events, donations and finances, consents, notes) — the controller is the church that uses WorshipPro. The operator processes this data solely on the church's behalf, as a processor, under the Data Processing Agreement (DPA). For matters concerning this data (e.g. access to, correction or deletion of an entry in the membership records), please contact your church first; if you write to us, we will forward your request to the church.
For all privacy matters, write to contact@worshippro.net.
2. What data we process
2.1 Account
- first and last name (display name) and email address,
- password — we store only its hash (scrypt), never the password itself,
- if you sign in with Apple or Google: your account identifier with that provider, the email address it passed to us (with Apple this may be an Apple relay address), and — with Google — your name and the address of your profile picture,
- if you enable two-factor authentication: the authenticator app secret and backup codes,
- confirmation of your email address and one-time tokens for confirming your address and changing your password.
2.2 Sign-in and security
- sign-in sessions: session token, creation and expiry date, IP address and information about your browser or device (user agent) — you can see the list of active sessions and end them in the account settings of the web version,
- the church activity log (who changed e.g. a role, a plan or a membership record entry, and when) with the IP address and the name or email of the person making the change,
- the record of acceptance of the Terms and the DPA when a church is created (date, document version, email of the accepting person, IP address, user agent),
- the log of sent emails (recipient, type and subject of the message, delivery status).
2.3 Church membership
The churches you belong to, your role (e.g. owner, administrator, leader, musician) and invitations sent to your email address.
2.4 Content you create
Songs (lyrics, chords, arrangements, versions, attachments and sheet music scans uploaded in the web version), service plans, song lists, media, announcements and events, your handwritten annotations on sheet music, display settings, and Bible reading plan progress in the web version. Content created within a church belongs to the church and is visible to its members according to their permissions.
2.5 iPhone and iPad app
- We do not track you. The app contains no ads, no analytics tools and no third-party crash-reporting SDKs, and does not use the advertising identifier (IDFA).
- The camera is used to scan the leader's QR code ("follow the leader" mode) and to photograph songbook pages you want to have in the app. Photos from the camera and from the photo library (you choose them in the system picker) and imported sheet music files stay on your device — the app does not send them to our server.
- Your highlights, bookmarks and notes in the Bible and your reading plan progress in the iOS app are stored only on the device. Bible translations and songs are downloaded from our server.
- Only data needed for your account and church features to work reaches the server: sign-in, changes to plans, settings and annotations on sheet music, and — in "follow the leader" mode — the current position in the song.
- We store the sign-in token in the device's Keychain.
2.6 Website and web application
We use only strictly necessary cookies: the sign-in session cookie, and cookies remembering the selected church and language. In browser storage (localStorage, cache) we save your settings (e.g. light/dark theme, song view) and sheet music for offline use. We do not use analytics tools, advertising pixels or marketing cookies, so we do not display a consent banner.
2.7 Contacting us
When you write to us, we process your email address and the content of the correspondence in order to reply.
2.8 What we do not collect
We do not collect location, phone contacts, microphone recordings or health data from your device. We do not send push notifications. We do not use artificial intelligence to process your data. There are no payments in the app.
3. Purposes and legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Creating and maintaining your account, sign-in (including via Apple/Google), church membership, storing and sharing your content, emails needed for the service to work (address confirmation, password change, invitations, ministry reminders) | Art. 6(1)(b) — performance of the contract for the provision of the service |
| Security of the service: sessions, IP addresses, activity log, limiting sign-in attempts, detecting abuse | Art. 6(1)(f) — legitimate interest (protecting the service and its users) |
| Record of document acceptance, establishing and defending claims | Art. 6(1)(f) — legitimate interest (accountability) |
| Replying to messages and requests | Art. 6(1)(f) — legitimate interest (communicating with users) |
| Complying with legal obligations, e.g. responding to GDPR requests | Art. 6(1)(c) — legal obligation |
| Data in the church membership records | the legal basis is determined by the church as the controller (e.g. Art. 9(2)(d) GDPR for data on church membership, or consent) |
Providing account data is voluntary, but an account cannot be created without an email address and password (or sign-in with Apple or Google). We do not make decisions about you based solely on automated processing, including profiling.
4. Who we share data with
- The churches you belong to — their administrators see your first and last name, email and role; members see the content and plans you take part in, according to their permissions.
- Entities that help us provide the service (subprocessors): the provider of the server in Poland on which the application, database and files run, and the email delivery provider. The current list with company names and locations is on the Subprocessors page.
- Apple and Google — only if you choose to sign in with their account; they then act as independent controllers under their own privacy policies.
- Public authorities — only where required by law.
We do not sell data. We do not share it with advertisers, ad networks or data brokers.
5. Transfers outside the EEA
The server hosting the application, database and files is located in Poland. Data may leave the European Economic Area only to the US companies named in the subprocessors list: the email delivery provider (Resend — messages are sent from its servers in the EU, in Ireland) and the services through which we receive email at contact@worshippro.net (ImprovMX forwarding, Google Gmail mailbox). Such transfers are based on the European Commission's Standard Contractual Clauses (SCC) or on the EU-US Data Privacy Framework. We will provide a copy of the safeguards on request.
6. How long we keep data
| Data | Period |
|---|---|
| Account data and your content | until the account is deleted (content created within a church — until the church deletes it or stops using the service) |
| Sign-in session | expires after 7 days of inactivity; signing out or deleting the account ends it immediately |
| Address confirmation and password change tokens | valid for up to 1 hour |
| Church activity log, record of document acceptance, log of sent emails | for as long as the church uses the service; entries relating to a deleted account are deleted or anonymized on request, unless they are needed to establish or defend claims |
| Technical server logs | briefly, with automatic rotation |
| Correspondence with us | until the matter is closed, and then for as long as it may be needed to defend claims |
| Data in the church membership records | as decided by the church (the controller) |
7. Your rights
You have the right to:
- access your data and receive a copy of it (Art. 15 GDPR),
- rectification of your data (Art. 16),
- erasure of your data (Art. 17) — see section 8,
- restriction of processing (Art. 18),
- data portability (Art. 20),
- object to processing based on legitimate interest (Art. 21),
- lodge a complaint with the supervisory authority — the President of the Personal Data Protection Office (UODO) (ul. Stawki 2, 00-193 Warszawa, Poland, uodo.gov.pl).
Send your request to contact@worshippro.net from the address associated with your account. We will reply without undue delay, and at the latest within one month. Rights concerning data in the church membership records are handled by the church — church administrators have tools in WorshipPro to export and anonymize a person's data.
8. Deleting your account
- In the iPhone and iPad app: tap your avatar (or the "Settings" tile) → Settings → Account → Delete account (Ustawienia → Konto → „Usuń konto” in the Polish interface) and confirm (an account with a password requires entering the password).
- Without the app: write to contact@worshippro.net from the address associated with your account — we will delete it after confirming that the message comes from you.
Deletion is immediate and irreversible: we end all sessions and delete your sign-in data (password, links to Apple and Google, two-factor authentication), memberships, settings and annotations. Content created within a church (e.g. songs and plans) remains in the church without being attributed to you. If you are the only owner or administrator of a church, first hand over that role to another person. Details: Deleting your account.
9. Children
A person aged 13 or over may create a WorshipPro account on their own — it is a tool for the Bible and songs, also used by young musicians in worship teams. An account for a child under 13 is created or approved by a parent or guardian. If we learn that an account of a child under 13 was created without the involvement of a parent or guardian, we will delete it or ask the guardian for confirmation. A church may keep children's data in its membership records (e.g. Sunday school, attendance check-in) — it does so as the controller, on the basis of the guardians' consent or knowledge, and the operator processes this data on its behalf.
10. Security
- connections to the server are encrypted (HTTPS/TLS),
- passwords are stored as a scrypt hash; two-factor authentication (TOTP) is available,
- each church's data is separated in the database (Row-Level Security), and access within a church depends on the role,
- we limit the number of sign-in attempts and keep an activity log,
- in the event of a personal data breach, we will notify the President of UODO within 72 hours and, where the breach is likely to result in a high risk, you as well; we notify churches in accordance with the DPA.
11. Changes to this policy
We may update this policy when the features of the service or the law change. The current version and effective date are always at the top of this page. We will notify you of material changes in advance by email or in the app.
Contact: contact@worshippro.net · Terms of Service · DPA · Subprocessors · Deleting your account · Support