Privacy Policy

Last updated: 16 July 2026

Choirly ("we", "us", or "our") operates the Choirly mobile and web application (the "Service"). This Privacy Policy explains how we collect, use, store, and protect your personal and device data when you use our Service. By using Choirly, you agree to the practices described in this policy.

1. Information We Collect

Account information: Your name, email address, and password (stored as a secure hash) when you register or log in.

Profile information: Details you add to your member profile, such as phone number, voice part, instrument, birthday, join date, profile photo, and notes.

Organisation data: Information about your choir or ensemble, including its name, description, logo, and contact email.

Content you create: Rehearsals, events, announcements, music files, lyrics, audio tracks, photos, videos, chat messages, and attendance records.

Device and usage data: Device type, operating system, browser, app version, IP address, and usage logs that help us maintain and improve the Service.

Payment data: When you purchase a subscription, payment is processed by Stripe. We do not store your full card number — Stripe handles all payment details securely.

2. How We Use Your Information

We use your data to:

  • Provide and maintain the Service, including calendars, attendance, music libraries, chat, and notifications
  • Authenticate your account and keep the Service secure
  • Send you rehearsal reminders, announcements, and notifications about your choir's activity
  • Process subscription payments and manage your plan
  • Generate attendance reports and dashboard analytics for your organisation
  • Improve, debug, and develop new features
  • Comply with legal obligations

3. Data Sharing & Disclosure

Your personal data is visible only to members within your own organisation, based on the permissions set by your organisation's administrators. We do not sell your data.

We may share data with trusted third-party service providers who help us operate the Service:

  • Stripe — payment processing
  • Google Maps — location display for events
  • Cloud infrastructure providers — secure data hosting and storage

We may disclose information if required by law or to protect the rights, safety, or property of our users or others.

4. Data Security

We take reasonable measures to protect your data using encryption in transit (TLS) and at rest, secure authentication, and access controls. Only authorised administrators within your organisation can manage member data, and permission groups allow fine-grained control over who can access what.

While we strive to protect your data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

5. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. If you delete your account, we will remove your personal data from our active systems within a reasonable period, except where we are required to retain it for legal or accounting purposes.

Organisation administrators can delete members, content, and other data at any time from within the app.

6. Your Rights

Depending on your jurisdiction (including under the Australian Privacy Act 1988 and the GDPR), you may have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate or incomplete data
  • Request deletion of your data
  • Withdraw consent for certain data processing
  • Export your data

To exercise any of these rights, contact your organisation administrator or reach out to us using the details below.

7. Children's Privacy

Choirly is not directed at children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will take steps to delete it.

8. Cookies & Local Storage

The Service uses local storage and cookies to maintain your session, remember preferences, and improve performance. We do not use cookies for third-party advertising.

9. Third-Party Links

The Service may contain links to third-party websites or services (such as Google Calendar or Apple Calendar for sync). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy within the app and updating the "Last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact your organisation administrator or the Choirly support team through the in-app feedback form in Settings.

Choirly is committed to protecting your privacy and being transparent about how your data is used.