Privacy Policy

Each organization decides who is on its teams and who administers it. TapWorship stores that information on the organization’s behalf. Your organization’s administrators can see everything in their own organization; they cannot see other organizations.

• Your account: your name, username, email address and a one-way hash of your password. The password itself is never stored.
• Your scheduling information: the teams you are on, the roles you play, the sets you are assigned to, swap and cover requests, and the times you mark yourself unavailable.
• Messaging: if your organization connects Slack, the app stores your Slack user ID so it can send you your own notifications.
• Google Calendar: see the next section.

The app does not use advertising or third-party analytics trackers, and it never sells your information.

Google Calendar is optional and off until someone turns it on. There are three separate uses, each asking your permission first:

• An administrator connects the organization’s calendar. The app then creates one calendar event per upcoming set on the calendar they chose, invites the people scheduled on that set, and keeps the event in step when the roster or the time changes. It reads the invitation replies on those events only, so that accepting an invitation can confirm your spot in the app. It does not read anything else on that calendar.
• You import your own calendarswhen filling in your availability. The app lists the calendars in your Google account and reads the events on the ones you own or can edit, for the dates being asked about, and turns the times you are busy into blocks on your availability. Calendars you only subscribe to, such as holidays or someone else’s, are not read. It stores the resulting blocks, which you can then edit or delete, not your events, their titles or their guests.
• You choose which of your calendars your invitations go to, on your profile. The app lists the calendars in your Google account that you own or can edit, so you can pick one, and saves only that calendar’s address as where your invitations are sent. It reads no events for this. It uses the same permission as importing, so granting one covers the other.

TapWorship’s use of information received from Google APIs follows Google’s API Services User Data Policy, including its Limited Use requirements. Google information is used only to provide the features above, is never sold or transferred for advertising, and is never used to train generalized AI or machine-learning models. No human reads it except where you ask for support, where the law requires it, or to keep the service secure.

The permission you grant is kept as an access token stored encrypted, and you can withdraw it at any time: an administrator uses Disconnect in Organization settings, and anyone can revoke the app at myaccount.google.com/permissions.

Your information is kept while your account exists. Ask an administrator of your organization to remove your account, or write to privacy@tapworship.com and ask for it to be deleted. Deleting your account removes your profile, your availability and your assignments. Calendar events already sent to people stay in their own Google calendars, since the app cannot reach those.

Traffic is encrypted in transit, passwords are stored only as hashes, and access tokens for connected services are encrypted at rest. No system is perfect; if you believe an account has been misused, tell an administrator and write to the address above.

The app is for members of an organization’s teams and is not aimed at children under 13. Where a minor serves on a team, their account is created and managed by the organization’s administrators.

If this policy changes, the date at the top changes with it. Material changes will be announced in the app.

Questions about this policy or your information: privacy@tapworship.com.