Privacy Policy

Last updated: October 26, 2026

This Privacy Policy explains what information is processed when you use the Selah worship notes app (the "App"). Your privacy is our top priority.

1. Information we collect and process

Information you enter

• Worship note text, preacher's name, sermon topic and Bible verses
• Commitments and next steps
• Note categories
• Profile: nickname, church name and Sunday service time
• Worship time and distraction (leaving the App) records

Information recorded automatically (stored on your device, and synced with your notes if you turn on sync)

• When worship mode starts and ends
• How long and how many times the App moves to the background (for focus statistics)

Information processed if you turn on Google Drive sync (iOS and Android, optional)

• The email address of the connected Google Account: used only to show the connected account on the App's settings screen, and not stored on your device.
• The Drive user identifier of the connected Google Account: used to check that it is the same account, and stored only on your device in a transformed form.
• Google sign-in information (authentication tokens): on iOS, stored only in this device's Keychain and never moved to backups or other devices. On Android, obtained through Google Play services on your device.
• Subscription account ID: a random identifier created by the App, used only to share your subscription across devices that connect Google Drive sync with the same Google Account. It is not derived from your email address or Google Account information. It is stored in the app-only folder of the connected Google Account's Drive and is sent to RevenueCat together with your purchase history to check your subscription status.

Information collected to improve the service (through third-party services)

• App usage events (screen views, how often features are used, etc.) — Firebase Analytics
• Anonymous user identifier (UUID, cannot identify you personally) — Firebase Analytics · Firebase Crashlytics
• App crash records, error diagnostics, and device and OS information — Firebase Crashlytics
• Subscription status and purchase history, and the subscription account ID if you turn on Google Drive sync — RevenueCat
• App launch, purchase (product and amount) and saved-note count events, and device identifiers for measuring ad performance (device identifiers on iOS: only if you allow tracking under ATT / Android: according to your advertising ID settings) — Meta, and Google if we link Google Ads

2. Where information is stored

The developer does not run its own servers. Your notes and profile are transferred only between your devices and your own iCloud or Google Drive. Because Google sign-in information is kept only on your device, the developer does not access the data stored in your Google Drive. The Google Drive permission the App requests is limited to the app-only folder (drive.appdata), so the App cannot see or change your other Drive files.

3. How we use information

• Writing and viewing worship notes
• Tracking progress on commitments and showing it in widgets
• Calculating and showing worship focus statistics
• Showing progress through Live Activities / Dynamic Island (iOS)
• Syncing notes (iOS: iCloud or Google Drive / Android: Google Drive)
• Showing the account connected to Google Drive sync and checking that it is the same account
• Checking subscription status (iOS: Apple StoreKit / Android: Google Play Billing, through RevenueCat)
• Checking your subscription status on your other devices, including devices on another operating system, that connect Google Drive sync with the same Google Account
• Analyzing usage patterns to improve App features (Firebase Analytics)
• Analyzing the causes of crashes and errors (Firebase Crashlytics)
• Measuring ad effectiveness (iOS: only if you allow tracking under ATT / Android: according to your advertising ID settings; Meta, and Google if we link Google Ads)

4. Third-party services

The App uses the third-party services below to operate. Each service has its own privacy policy.

International transfers of personal information

The App transfers personal information abroad (to service providers that process and store it on our behalf) to use the services below. Transfers happen over the internet, encrypted with HTTPS, whenever the information is generated while you use the App. Under Article 28-8(1)(3)(a) of the Korean Personal Information Protection Act, we disclose these transfers in this policy.

• RevenueCat, Inc. (compliance@revenuecat.com)
  • Country: United States
  • Information transferred: Subscription status and purchase history, and the subscription account ID if you turn on Google Drive sync
  • Purpose: Checking subscription status, subscription analytics
  • Retention: Until we delete it or our service agreement ends
• Google LLC — Firebase Analytics (googlekrsupport@google.com)
  • Country: United States and other countries where Google has data centers
  • Information transferred: App usage events, anonymous user identifier, device and OS information
  • Purpose: Analyzing how the App is used
  • Retention: User- and event-level data is deleted after the Google Analytics retention period (2 or 14 months)
• Google LLC — Firebase Crashlytics (googlekrsupport@google.com)
  • Country: United States and other countries where Google has data centers
  • Information transferred: Crash records, error diagnostics, device and OS information, anonymous user identifier
  • Purpose: Finding the causes of crashes and errors
  • Retention: Kept for 90 days, then the deletion process starts

How to refuse, and what happens: The App has no setting that turns off only these transfers. If you do not want them, stop using and delete the App; you will then not be able to use the App. Ad measurement tools (Meta and Google Ads) are described in section 5.

5. Ad tracking

The App includes the Meta SDK for measuring ad performance, so while you use the App, Meta Platforms, Inc. (United States) collects the information below directly and processes it under Meta's privacy policy. If we link Google Ads, Google LLC (United States) also receives information for the same purpose through Firebase Analytics and processes it under Google's privacy policy.

• Meta: app launch, purchase (product and amount) and saved-note count events, and the advertising ID (on iOS only if you allow tracking under ATT)
• Google (if we link Google Ads): app install and purchase events, and the advertising ID (on iOS only if you allow tracking under ATT)

You can stop the advertising ID from being sent with the settings below. Events sent without the advertising ID cannot be turned off separately in the App.

iOS: App Tracking Transparency (ATT)

In line with Apple's App Tracking Transparency (ATT) policy, the App asks for your explicit permission before accessing the device identifier for advertisers (IDFA) to measure ad performance.

• If you allow: we use the IDFA to measure which ad led you to install the App.
• If you don't allow: you can use every feature of the App in the same way, without ad tracking.

You can change this at any time in iOS Settings → Privacy & Security → Tracking.

Android: advertising ID

Android has no separate tracking permission prompt like ATT. The App uses the Google advertising ID (AAID) to measure which ad led you to install the App.

You can delete or reset your advertising ID, or turn off ad personalization, under Ads in your device settings. If you delete it, the advertising ID is not sent. Either way, you can still use every feature of the App in the same way.

6. Retention and deletion

• Data you enter on your device is kept until you delete it or delete the App. When you confirm Delete Account & Data in the App's settings, the App deletes the data on your device and also tries to delete the remote copies in the sync storage recorded in the App. A remote deletion that fails because of network or authentication problems stays pending and is retried later, and Google Drive copies can be deleted only after you sign in to your Google Account again.
  • iCloud sync (iOS): notes and profile are deleted on every device that uses iCloud sync with the same Apple Account.
  • Google Drive sync (iOS and Android): the sync file in the Drive app-only folder of the connected Google Account is deleted. Copies on other devices remain, and if Google Drive sync is on on those devices, those copies may be saved to Drive again.
  • The Android app cannot delete iCloud data from an iPhone.
• You can delete individual notes and next steps in the App at any time. To pass the deletion on to your other devices, a deleted note stays on your device and in sync storage, hidden from view, for 90 days after deletion. After 90 days it is removed from your device, and then from sync storage at the next sync. Copies kept during sync conflicts are removed in the same way 90 days after they were made.
• When you delete the App, the data on your device is deleted immediately. You can delete iCloud data in iOS Settings → [your name] → iCloud → Storage or Manage Account Storage. (iOS)
• If you choose This Device Only in the iOS App's Settings → Sync → Storage Location, iCloud sync is turned off on this device. Your notes stay on this device, and the data stored in iCloud and other devices on the same Apple Account are not changed.
• Google Drive sync files are kept in the app-only folder (not shown to other apps or in your regular Drive view). Turning off Google Drive sync in the App on iOS or Android, or deleting the App, does not remove the files stored in Drive. When you turn off sync, the App sends your last changes once and then disconnects this device. Turning off sync in the App is separate from revoking the App's access in your Google Account; you can revoke access in third-party connections in your Google Account. Revoking access is also separate from deleting the content stored in Drive.
• To delete the sync file in Google Drive outside the App, on a computer go to drive.google.com → Settings → Manage apps, open this App's Options and choose Delete hidden app data.
• The subscription account ID file is not removed when you delete your account and data in the App or turn off Google Drive sync; it is used to keep your subscription when you connect again. To remove it, delete the App's hidden app data under Manage apps at drive.google.com. This also deletes the note sync files in the same folder, and if any device still has Google Drive sync turned on, a new subscription account ID is created at its next sync. The subscription account ID and purchase history sent to RevenueCat follow RevenueCat's retention policy.
• Data sent to third-party services such as Firebase and RevenueCat follows each service's retention policy.

7. Your rights

• View your data (directly in the App)
• Edit and delete your data (with the App's edit and delete features)
• Delete your account and the App's data (App Settings → Delete Account & Data; see section 6 for what is deleted locally and remotely and how it is retried)
• Delete all local data at once by deleting the App
• Turn off iCloud sync (in the iOS App's Settings → Sync → Storage Location, choose This Device Only or Google Drive Sync)
• Turn off Google Drive sync (App Settings → Sync, iOS and Android) — to revoke the App's access in your Google Account, disconnect it in third-party connections
• Delete the sync file stored in Google Drive (App Settings → Delete Account & Data, or Delete hidden app data in Manage apps on drive.google.com; see section 6)
• Opt out of ad tracking (iOS: Settings → Privacy & Security → Tracking / Android: reset your advertising ID or turn off personalization under Ads in your device settings)

8. App permissions

• Notifications: Sunday service reminders and a weekly Wednesday reminder to reflect on the sermon (optional)
• iCloud (iOS): note sync (used by default on devices signed in to an Apple Account; can be changed in App Settings → Sync → Storage Location)
• Google Account sign-in · Google Drive (iOS and Android): note sync (optional; can be turned on and off in the App's settings). The only permission requested is the Google Drive app-only folder (drive.appdata).
• Live Activities (iOS): Dynamic Island / Lock Screen display (optional)
• App tracking (iOS, ATT): ad performance measurement (optional; you can use the whole App even if you don't allow it)
• Advertising ID (Android): ad performance measurement (can be reset or personalization turned off in device settings; you can use the whole App even if you opt out)

9. Children under 14

The App is not primarily intended for children under 14, and we do not knowingly collect personal information from children.

10. Changes to this policy

If this Privacy Policy changes, we will give notice in advance in the App or on this page.

11. Contact

If you have questions about how your information is processed, please contact us.
Email: privacy@studio-hevv.com