Privacy Policy

From account holders

• Account details: your name, email address and password. We store the password only as a secure hash; nobody, including us, can read it.
• Your team: its name, who is in it and each person’s role (owner, admin or member).
• What your team adds: songs and their chord charts, keys, versions, notes, YouTube and Spotify links, and set lists with their dates, times and running order.
• Payment records (Pro): the pass, amount, date, method (GCash or Maya), reference number, who paid, and the receipt screenshot if you add one. We never see or store your GCash or Maya login or PIN.

From people who follow Live

• A signed-in follower’s name is shown to the leader when they join. Someone following from a team link stays anonymous; their browser gets a random device code so the leader is told once, not at every reconnect.

Automatically

• Basic technical data, such as IP address and browser type, kept with your sign-in sessions and used to keep the service running and to limit abuse (for example, too many sign-in attempts). See our Cookie Policy for what’s stored in your browser.

• To run your team’s library, set lists, rehearsal and Live.
• To send the emails the service needs: confirming your address, resetting a password, and receipts and reminders about Pro.
• To process payments and refunds, and keep the records the law requires.
• To answer you when you contact us.
• To keep Worsheep secure and working.

We don’t sell your data, we don’t show ads, and we don’t use your songs or charts for anything but showing them to your team.

• Your team sees the team’s songs and sets. Owners and admins also see members’ emails and the team’s payments.
• Anyone with a link your team shares (a song, a set, or the congregation’s lyrics link) can open what it shows. Owners and admins can turn a link off or replace it at any time.
• Search engines are asked not to list shared links or anything inside the app, so they’re seen by the people you send them to, not found through Google.
• Our service providers, only to run Worsheep: Cloudflare (hosting, Live, and private storage for receipts), Railway (database) and Resend (email). Songs with a video or track show players from YouTube (in its privacy-enhanced mode) and Spotify.
• The authorities, only when the law requires it.

• Your account and your team’s songs and sets stay until you delete them or ask us to delete your account.
• Deleting a song or set removes it for good, along with any links to it.
• Payment records and receipts are kept as business records, as tax rules require, even after a team or account is deleted. Refund requests can be made within 7 days of paying.
• A Live session keeps only where the leader is, and ends on its own a few hours after the last move.

You can ask to see, correct, download or delete your personal data, or object to how we use it. Most of it you can change in the app. For anything else, email hello@worsheep.studio. You may also complain to the National Privacy Commission (privacy.gov.ph).

Everything is sent over HTTPS, passwords are hashed, receipts are kept in a private store that only our admins can open, and every page in the app checks that you belong to the team. No system is perfect, and we’ll tell affected users and the National Privacy Commission promptly if a breach happens.

Accounts are for people 18 and over, or younger with a parent’s or guardian’s permission. Anyone can read a song or set from a link without an account.

If we change this policy in a way that matters, we’ll update the date above and tell account holders by email or in the app.

Worsheep, Rizal, Philippines
hello@worsheep.studio