Privacy Policy

Who we are

Himnia is run by Elvio Luján, based in Argentina, who is responsible for your personal data. This policy explains what we collect, why, and the choices you have.

What we collect

Account: your name and email address, and your profile picture when you sign in with Google, Microsoft or Facebook. If you sign in with an emailed link, just your email address and the name you give us. We never see a password.

Church: the church's name, its members and their roles, and invitations (the invited person's email address).

People who serve: the people a church lists for its service teams, who don’t need an account — their name and, when the church adds them, email, phone, the language of their invites, the roles they can serve in, their household, dates they’re away, how often they’d like to serve, notes and a photo. The church that adds them is responsible for having their permission, and a parent’s or guardian’s permission for anyone under 16. We use this only to plan services and send their invites; only that church’s members can see it, and only those who plan services (not read-only members) see contact details and notes, and it is deleted with the person or the church. Each person can have a personal calendar link: anyone who has that link can see that person’s serving schedule, so it should only be shared with them; the church can replace it at any time. They also get a personal page link, where they see their upcoming services, say whether they can serve and add dates they’re away; anyone who has it can do that, so it should only be shared with them, and the church can replace it. Unless the church turns them off, they get reminder emails before services they’re on. At the church’s request we may email them to ask whether that’s fine; if they answer no, their details are deleted straight away.

Content: what you and your church add — songs, services, media files, themes, slides, notes.

Payments: Paddle handles payments, so we never see your card details. We receive the plan, the billing period, the subscription's status and Paddle's reference numbers.

Messages: what you send us through the Feedback or Contact forms, with the email address to answer.

Technical information: when something goes wrong, an error report (the page, the browser and the error message); a record of administrative actions, such as changes to a church's members or plan; and, for the public contact form, a one-way scrambled version of your IP address, only to stop abuse.

Why we use it

To provide Himnia and your church's account; to handle your subscription; to answer your messages; to keep the service secure and stop abuse; to fix errors; and to send emails about your account — such as invitations, payment problems or changes to these policies.

We send news about Himnia only if you said yes to it, and every news email has a link to stop them. You can also change this in the app, by clicking your name.

Legal basis

Where the law that protects your data asks us for a legal basis, we use your data to fulfil our contract with you, for our legitimate interest in keeping Himnia secure and working, and with your consent for news emails, which you can withdraw at any time.

Who we share it with

We don't sell your data, and there's no advertising or advertising tracking in Himnia. We share data only with the services that help us run it, and only what they need:

Microsoft Azure (United States) — hosting, database and file storage. Paddle — payments, as the seller of record (Paddle's own privacy notice applies to the payment). Google, Microsoft and Facebook — signing in, when you choose them. Resend — sending our emails. Cloudflare — receiving the email sent to support@himnia.com. Bible text is stored on our own servers; no personal data is sent to Bible text providers.

We may also share data when the law requires it.

Where your data is stored

Himnia's servers are in the United States, so your data may be stored and processed outside your country. We transfer it only to the providers listed above, under contracts that require them to protect it as data protection laws require, and by using Himnia you agree to this transfer.

Cookies and browser storage

Himnia uses one cookie to keep you signed in, and a short-lived one (10 minutes) while you sign in with Google, Microsoft or Facebook. When you pay, Paddle's checkout sets its own cookies (Paddle's privacy notice explains them). Your browser also stores your preferences (such as the language and your presentation choices) and copies of your media files so they load fast and keep working without a connection; those copies are removed when you sign out. We don't use advertising or analytics cookies.

How long we keep it

We keep your data while your account is active. When you delete your account, your account and sign-ins are deleted straight away; what you added to a church stays with that church, and your name is removed from your messages there. When an Owner closes a church, the church and everything in it are deleted 30 days later (any Owner can keep it until then). Personal data is deleted within those 30 days, except what we have to keep by law (Paddle keeps payment records).. Some records have their own limits: error reports are deleted after 30 days; copies of the emails we send, after 1 year; the record of administrative actions and the messages you send us through the Feedback or Contact forms, after 2 years; sign-in links expire after 15 minutes and are deleted the next day. Deleted data can stay in our encrypted automatic database backups for up to 7 days, until they are replaced.

Your rights

You can download a copy of your data and delete your account yourself: click your name at the top right. A church’s Owner can download all of the church’s data and close the church in Settings → Church. You can ask us for a copy of your personal data, to correct it, to delete it, to move it elsewhere, or to stop using it for a purpose — write to support@himnia.com and we'll answer within 30 days. If your data was added by your church (for example, as someone on its teams), you can also ask the church.

If you think we haven't handled your data correctly, you can also complain to the data protection authority where you live. Argentina's Agencia de Acceso a la Información Pública (AAIP), the authority for the data protection law that applies to Himnia's operator, can also receive complaints.

Children

Himnia accounts are for people 16 and older, and we don't knowingly let children under 16 create one. A church may list someone under 16 on its teams only with a parent's or guardian's permission.

Security

All connections to Himnia are encrypted, and each church's data is kept separate from every other church's. No system is perfectly secure; if a breach affected your data, we'd tell you.

Changes to this policy

We may update this policy. For important changes we'll let you know by email or in the app before they apply.

Himnia · Pricing · Compare · Help · What's new · Contact · Terms · Privacy · Refunds