Privacy Policy

Last updated: July 29, 2026

Worthship ("we", "our", "us") operates the Worthship mobile application and web platform. This Privacy Policy explains how we collect, use, and protect your information.

1. What Worthship Stores

Worthship stores only the information necessary to operate the service:

• Organization details (church name, settings)
• Member information (name, email, role)
• Service plans and schedules
• Song metadata, lyrics entered by users, and chord charts
• Arrangements and rehearsal notes
• Team assignments and positions
• Uploaded documents and files

Worthship does not maintain a catalog of copyrighted music recordings and does not store or stream commercial audio.

2. Information We Collect

We collect information you provide directly:

• Account Information: Name, email address, profile photo (via Google or Apple Sign-In).
• Organization Data: Church name, team names, member lists, service schedules, and song libraries you create.
• Device Information: Device type, operating system, and push notification tokens (when you opt in).

3. How We Use Your Information

• To provide and maintain the Worthship service.
• To authenticate your identity and manage your account.
• To deliver push notifications you've opted into.
• To improve and develop new features.
• To communicate important service updates.

4. Data Sharing

We do not sell your personal information. We share data only:

• With other members of your organization (as configured by your admin).
• With service providers who assist in operating our platform (hosting, authentication).
• When required by law or to protect our rights.

5. Data Storage & Security

Your data is stored securely on cloud infrastructure with encryption at rest and in transit. We use Firebase Authentication for secure sign-in and PostgreSQL databases hosted on managed cloud services.

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction, in compliance with Republic Act No. 10173 (Data Privacy Act of 2012).

6. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days. Organization data is retained as long as the organization account exists.

7. Backups

Worthship performs routine backups for disaster recovery. While we strive to protect all organization data, users remain responsible for maintaining copies of any critical information.

8. Your Rights Under the Data Privacy Act (RA 10173)

As a data subject under Philippine law, you have the following rights:

• Right to be Informed: You have the right to know how your data is being collected, used, and processed.
• Right to Access: You may request a copy of your personal data held by Worthship.
• Right to Object: You may object to the processing of your personal data.
• Right to Erasure: You may request deletion of your personal data, subject to legal and contractual obligations.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Data Portability: You may request your data in a structured, machine-readable format.
• Right to File a Complaint: You may file a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, contact us at tech@codebrew.co. We will respond within 30 days.

9. Data Processing Basis

We process your personal data based on:

• Consent: You consent to data processing when you create an account and accept these terms.
• Contractual necessity: Processing is necessary to provide the services you've requested.
• Legitimate interest: We may process data to improve our services and prevent fraud.

10. International Data Transfers

Your data may be stored and processed on servers located outside the Philippines (e.g., cloud infrastructure in the United States or Singapore). We ensure that appropriate safeguards are in place to protect your data in accordance with Philippine data privacy laws.

11. Third-Party Services

We use the following third-party services that may process your data:

• Firebase (Google): Authentication and push notifications.
• Supabase: Database hosting.
• Railway: Application hosting.
• Google Analytics: Anonymous usage analytics on our website.

Each third-party service operates under its own privacy policy and data processing agreements.

12. Artificial Intelligence

Worthship may use artificial intelligence features to assist users in organizing, formatting, searching, or analyzing organization-owned content.

We do not use your organization's private content to train public AI models without your explicit permission.

13. Children's Privacy

Worthship is not intended for use by individuals under 13 years of age. We do not knowingly collect information from children.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or in-app notification at least 15 days before the changes take effect.

15. Data Protection Contact

For questions, concerns, or requests regarding your personal data and privacy, contact our Data Protection Officer at tech@codebrew.co.

You may also file a complaint with the National Privacy Commission of the Philippines at www.privacy.gov.ph.