Your data, plainly.
Privacy and terms
The short version, in plain words.
Who holds your data
Your church is the controller and Hymnfold is the processor, under a data-processing agreement. Data is hosted in Ireland.
Who helps us run it
A few companies handle data for us, each under contract and each for one job. Vercel runs the website. Convex stores it. Resend sends our emails. Stripe takes payments, and we never see your card number. Cloudflare makes your PDFs. Anthropic’s Claude answers help questions and reads photographs and scans of old sheets, and Anthropic does not train its models on them. Some of these companies work outside the UK and Europe, under the usual safeguards for moving data abroad.
Funerals
If a funeral director arranged the order, the firm is the controller of the family’s details and photographs, and keeps them for as long as its own policy says. If you bought a single order yourself, you are in charge of it, Hymnfold is the controller of your account, and we delete your order and photographs after 12 months.
Names in prayers
Names can reveal health or faith, so treat them with care. They stay off phone links, and leave the archive after four weeks, unless your church changes that on each prayer. Your church needs each person’s permission.
Keeping and deleting
You can download or delete anything at any time. If you cancel, nothing is deleted. If you ask us to delete the account, your data goes after 90 days, and from our backups 30 days later.
Children
Please do not enter children’s full names in notices. Hymnfold is designed for adults running a church.