Privacy
Privacy Policy
We honor the stories you share. This policy explains what we collect, how we use it, and the choices you have.
At a glance
What we collect
Contact details, order information, story details you provide, and usage and device data.
Why we use it
To craft your song, deliver it securely, provide support, and improve the experience.
How we share it
Only with trusted payment, hosting, analytics, advertising, and communications providers, and when required by law.
Your choices
Request access, correction, or deletion and opt out of marketing anytime.
Overview
This Privacy Policy explains how HosannaSong ("we", "us", and "our") collects, uses, and protects information when you visit our website, use our app, request a custom song, or contact our team.
By using our services, you agree to the practices described here. If you do not agree, please do not use the site or app or submit personal information.
Information we collect
We collect information you provide directly and information that is generated through your use of our services. We only collect what we need to deliver and improve HosannaSong.
Information you provide
When you place an order or contact us, you may provide details such as your name, email address, recipient name, occasion, preferred style, scripture references, and other story details needed to craft your song.
- Contact details (name, email, phone if provided)
- Order details (recipient name, occasion, timeline preferences)
- Creative inputs (story notes, themes, messages, scripture references)
- Communication content (support inquiries, feedback, revision notes)
Order and payment information
Payments are processed by third-party providers. In the mobile app, purchases are processed by the Apple App Store or Google Play and validated by RevenueCat. We receive the confirmation, transaction identifier, product, store, and purchase environment needed to unlock and record the order. We do not receive or store full payment card numbers on our servers.
- Transaction IDs and payment status
- Billing name and postal code (if provided)
- Invoice and tax-related records
Usage and device data
Our app uses Google Analytics for Firebase to measure app usage and advertising performance. It collects an app-instance identifier, app lifecycle and purchase events, and approximate location derived from IP; Android may also provide an advertising ID. Random installation, purchase and notification identifiers connect the device with orders and store transactions. Notification tokens are used only after system permission. Starting with version 1.4.2, when Meta measurement is enabled, the Meta SDK also receives app activation and device context. Android advertising IDs deleted in system settings are not replaced to bypass that choice. On iOS, Meta tracking and access to IDFA require App Tracking Transparency authorization.
- IP address, browser type, and operating system
- Pages viewed and time spent on the site
- Referring URLs and approximate location
- Notification token, installation/app/advertising identifiers, platform, language, campaign source, and communication preferences
- App opens, screens, briefing progress, checkout start, and confirmed purchase; analytics events do not include names, email, phone, recipient, or story text
Sensitive information
Your story may include sensitive personal details. Please avoid sharing unnecessary sensitive information (such as government IDs, financial account numbers, or health records). If you include sensitive details, we will treat them with heightened care and use them only for fulfilling your order.
How we use information
We use the information we collect to provide, maintain, and improve HosannaSong.
- Create your custom song and deliver it to you securely
- Communicate about payment, production, delivery, revisions, add-ons, and support
- Send app news and offers only when you opt in to marketing
- Understand app usage, attribute installs, and measure advertising campaign performance
- Improve our creative process, website performance, and user experience
- Detect and prevent fraud, abuse, or security incidents
- Comply with legal obligations and enforce our terms
Legal bases (EEA/UK)
If you are located in the European Economic Area or the United Kingdom, we process your personal information under the following legal bases:
- Contractual necessity (to fulfill your order)
- Legitimate interests (to improve services, protect our platform, and measure campaigns where permitted)
- Consent (for optional marketing communications and for analytics or advertising measurement where required)
- Legal obligations (tax, accounting, and compliance requirements)
Data retention
We keep personal information only as long as necessary to provide our services and comply with legal obligations.
- Order records are retained for accounting and customer support purposes
- Creative briefs and communications are kept to fulfill your order and handle revisions
- Analytics data is retained in aggregate form when possible
Security
We use administrative, technical, and physical safeguards to protect your information. This includes access controls, encrypted connections, and least-privilege access for team members.
No system can be 100% secure. Please use a strong email password and contact us immediately if you believe your information has been compromised.
Your rights and choices
Depending on where you live, you may have rights regarding your personal information.
- Access, correct, or delete your personal information
- Request a copy of your data (data portability)
- Object to or restrict certain processing
- Opt out of marketing emails by using the unsubscribe link or contacting us
- Request deletion of analytics and campaign data linked to your order
International transfers
HosannaSong may operate across borders. Your information may be processed in countries other than your own. When we transfer data, we use appropriate safeguards to protect it.
Children's privacy
HosannaSong is not directed to children under 13, and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, please contact us so we can delete it.
Third-party links
Our website may link to third-party websites. We are not responsible for the privacy practices of those sites, and we encourage you to review their policies.
Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes, we will post an updated version and revise the "Last updated" date.
Contact us
If you have questions about this policy or want to exercise your privacy rights, please reach out using the contact details below.