Privacy Policy
Last updated: September 2026. Written in plain language for churches worldwide. Questions: support@versevocal.com.
1. Overview
VerseVocal is built by Luminar Digitals (Pty) Ltd, a South African company (Reg. No. 2026/083517/07). We're the "responsible party" for your data under South Africa's POPIA, and the "controller" under the EU/UK GDPR. This policy explains what we collect through the desktop app and website, why, and what control you have over it.
Short version: we collect what's needed to run your account and improve the app. We don't sell your data to anyone, and you can ask us to access or delete it at any time.
For users in the EU/UK, our legal basis for most of this processing is performance of our contract with you (running your account, subscription, and support) or our legitimate interest in operating and improving VerseVocal. Where we rely on your consent instead, such as non-essential website cookies, you can withdraw that consent at any time using the cookie banner or your browser settings, without affecting anything you did before withdrawing it.
2. What we collect
| Data | Source | Why |
|---|---|---|
| Email address, basic profile | Google sign-in | Identify your account and subscription tier |
| Vault backup file | Sync to Cloud (optional) | Back up your setlists and media references to your own Google Drive |
| Feature usage counts, crash logs | App telemetry | Find bugs and understand which features matter |
| Plan, billing status | Paddle / Paystack | Know which tier you're on and process renewals |
| Page views, general location (country level) | Website analytics | Understand which pages are useful |
We never collect your live audio, microphone input, sermon recordings, or presentation content through telemetry. That data stays local to your machine unless you explicitly export or share it yourself.
3. Google sign-in and Drive sync
When you use "Continue with Google," we request:
- Your email address, to identify your account
- Your basic profile (name, avatar), for display purposes only
- Restricted Google Drive access (the
drive.filescope), used only for the optional "Sync to Cloud" feature. This scope only lets VerseVocal see files it created itself. We cannot see, list, or access any other file in your Google Drive.
You can revoke this access anytime from your Google Account permissions page.
4. App telemetry
We use Supabase to collect anonymized telemetry: how often features are used, and crash or error logs to fix bugs. This data cannot be traced back to you individually and never includes your presentation content, audio, or files. Telemetry is write-only. The app never reads this data back.
5. Payment data
We use Paddle (for international payments) and Paystack (for South African payments) to process subscriptions. Neither company shares your full card number with us. We receive your email, plan, and payment status only. See our Terms of Service for how each processor handles your transaction.
6. Website analytics and cookies
This website uses Google Analytics to understand which pages are visited and how. Google Analytics sets cookies in your browser and may process data outside your country, including in the United States. Analytics stays off by default: the cookie banner shown on your first visit asks for your consent before any analytics cookie is set, and you can change your answer at any time using the "Cookie settings" link in the footer of any page. You can also opt out using your browser's cookie settings or a browser extension like Google's Analytics Opt-out add-on.
8. We do not sell your data
We do not sell, rent, or trade your personal information to anyone, for any purpose. This applies everywhere, including for users covered by the California Consumer Privacy Act (CCPA).
9. International data transfers
Luminar Digitals is based in South Africa, and some of our service providers (Google, Supabase, Paddle) process data in other countries, including the United States and the European Union. If you're in the EU, UK, or elsewhere, your data may be processed outside your country. Our service providers maintain their own safeguards for these transfers (such as standard contractual clauses), consistent with GDPR requirements.
10. Your rights and how to exercise them
Depending on where you live, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Delete your data (subject to legal retention requirements, such as financial records)
- Receive a copy of your data in a portable format
- Object to certain processing, such as analytics
To exercise any of these rights, email support@versevocal.com. We'll respond within 30 days. If you're in the EU/UK and unhappy with our response, you also have the right to lodge a complaint with your local data protection authority. If you're in South Africa, that's the Information Regulator.
11. Children's privacy
VerseVocal is not directed at children, and we do not knowingly collect personal data from anyone under 13 (or under 16 where local law requires that age). If you believe a child has provided us with personal data, contact us and we'll delete it.
12. How long we keep data
We keep account data for as long as your account is active, plus a reasonable period afterward in case you return. Billing records are kept as long as required by tax law. Telemetry data is anonymized and not tied to your identity.
13. Changes to this policy
We'll update this page as the product changes, and note the date at the top. For material changes, we'll notify active users by email.
14. Contact
Luminar Digitals (Pty) Ltd
Email: support@versevocal.com
Support hours: Mon-Fri, 9am-6pm SAST