Yudah Privacy Policy

1. About this policy

Yudah is a church presentation, worship planning and team collaboration application operated by Ashes to Beauty, referred to in this policy as “Yudah,” “we,” “us” or “our.”

This Privacy Policy explains how we collect, use, store, disclose and protect personal information when you access Yudah, connect Google Drive or communicate with us.

We are based in Australia and aim to handle personal information consistently with the Australian Privacy Act 1988 and the Australian Privacy Principles. Where applicable, we also respect privacy rights provided under laws such as the European Union General Data Protection Regulation and the United Kingdom GDPR.

2. Information we may collect

Depending on the features you use, we may collect:

• Your name, email address and account identifier
• Your church, ministry, organisation or team name
• Authentication and account-security information
• Team membership, permissions and collaboration activity
• Service schedules, presentation information and song-library information
• Files and folders that you create, select or authorise Yudah to access
• Synchronisation records, file identifiers and last-updated information
• Device, browser, diagnostic, security and usage information
• Questions, support requests and other communications you send us

Yudah does not require access to your entire Google Drive. Where Google Drive integration is enabled, Yudah is intended to request the limited drive.file permission so it can access files created by Yudah or specifically selected by the user for use with Yudah.

Church or ministry content may sometimes reveal religious affiliation or other sensitive information. Users and organisations must only enter or share this information when they have an appropriate legal basis, permission or consent.

3. Google user data

If you connect Google Drive, Yudah may access, create, update, synchronise or delete files and folders that you expressly select, create through Yudah or authorise Yudah to manage.

Yudah uses Google user data only to provide visible, user-requested features, including:

• Connecting a Google Drive account
• Creating or selecting a Yudah team folder
• Saving presentations, schedules and authorised song-library information
• Synchronising permitted files between authorised team members and devices
• Reviewing and resolving synchronisation conflicts
• Restoring authorised Yudah information when requested by the user

Yudah will not use Google user data for advertising, credit assessment, surveillance or the creation, training or improvement of general artificial-intelligence or machine-learning models.

Yudah does not sell Google user data or transfer it to data brokers, advertising platforms or information resellers.

Yudah’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4. How we collect information

We may collect information directly from you when you register, configure Yudah or contact us; from your authorised church, ministry or team administrator; through your use of Yudah; from Google when you choose to connect your account and grant permission; and automatically through limited operational, diagnostic and security records.

We do not attempt to access Google Drive information without the user completing Google’s permission process.

5. Why we use personal information

We may use personal information to:

• Create, authenticate and administer accounts
• Provide Yudah’s presentation, planning, storage and synchronisation features
• Allow authorised team collaboration
• Process user-requested Google Drive operations
• Maintain offline copies and pending synchronisation records
• Protect accounts and investigate suspected misuse
• Troubleshoot technical problems
• Respond to enquiries, privacy requests and complaints
• Maintain, secure and improve Yudah
• Comply with applicable legal obligations

Where European or UK privacy law applies, we process personal data when necessary to provide the requested service or perform a contract, comply with legal obligations, protect legitimate security and operational interests, or act with the user’s consent. Users may withdraw consent where processing is based on consent, although this may prevent certain features from operating.

6. When information may be disclosed

We may disclose information only when reasonably necessary to infrastructure, hosting, authentication, storage or technical-service providers that support Yudah; Google when a user chooses Google authentication or Drive; authorised team members; professional advisers subject to confidentiality; or authorities where required by law. Information may also be used to investigate security incidents or transferred as part of a business transfer with appropriate notice and safeguards.

We do not sell personal information. Service providers may process information only for legitimate service, security and support purposes and must not use it for independent advertising.

7. Team and shared-folder responsibilities

When you join a church, ministry or organisational team, authorised team members may be able to view, edit or synchronise information in the shared Yudah workspace or connected folder. The relevant organisation may independently determine how some team information is used and may have its own privacy obligations.

Team administrators are responsible for giving access only to authorised people, removing access when no longer required, obtaining permission before entering another person’s information, avoiding unnecessary sensitive information, and ensuring song lyrics and other materials are used under appropriate licences.

8. Storage and international data transfers

Yudah may use service providers whose systems or personnel are located outside Australia, including Google and internet-hosting providers. Information may therefore be processed in Australia, the United States or other countries in which those providers operate.

Privacy protections in another country may differ from Australian law. Where required, we take reasonable steps to use appropriate contractual, technical and organisational safeguards. Google Drive files remain subject to the user’s Google account settings and Google’s applicable privacy terms.

9. Security

We take reasonable technical and organisational measures to protect personal information from misuse, interference, loss, unauthorised access, modification and disclosure. Measures may include encrypted connections, restricted administrative access, secure credential management, access controls, monitoring and account-authentication protections.

No online service can guarantee complete security. Users must protect their passwords, devices and Google accounts and notify us promptly if they suspect unauthorised access.

10. Retention and deletion

We retain personal information only as long as reasonably necessary to provide Yudah, maintain account and synchronisation functionality, meet legal, accounting or security obligations, resolve disputes and enforce applicable agreements.

Users may disconnect Google Drive through Yudah when that feature is available and may revoke Yudah’s access through their Google Account security settings. Disconnecting stops future access but may not automatically delete files already in Google Drive, files shared with team members, necessary legal or security records, or temporary backups awaiting scheduled deletion.

Users may request deletion of personal information held directly by Yudah. We will delete or de-identify it unless retention is required or permitted by law.

11. Access and correction

You may request access to personal information we hold about you or ask us to correct inaccurate, incomplete or outdated information. We may need to verify your identity. Where the law permits us to refuse a request, we will explain the reason where legally permitted.

12. International privacy rights

Depending on where you live, you may have rights to be informed, access and correct information, request deletion or restriction, object to certain processing, receive eligible information in a portable format, withdraw consent and lodge a complaint with a privacy regulator. These rights may be subject to legal limitations and identity verification.

13. Data breaches

We maintain processes for assessing and responding to suspected data breaches. Where the Australian Notifiable Data Breaches scheme or another applicable law requires notification, we will notify affected individuals and the relevant regulator when the applicable threshold is met.

14. Children’s privacy

Yudah is intended for authorised church, ministry and organisational users and is not directed to children under 16. A parent, guardian or authorised organisation must provide any required consent before a child’s personal information is entered into Yudah. If information was collected without appropriate authority, we will take reasonable steps to delete it.

15. Cookies and operational technologies

Yudah may use cookies, local storage, session storage or similar technologies where necessary to keep users signed in, maintain security, remember settings, support offline operation and synchronisation, and diagnose technical issues. Yudah does not use Google Drive information for targeted advertising.

16. Third-party links and services

Yudah may link to or integrate with third-party services, including Google. Those services operate under their own privacy policies and terms. This policy applies to information handled by Yudah and does not replace the policies of Google or a user’s organisation.

17. Privacy complaints

If you believe Yudah has mishandled your information, contact us with your name, contact details, a description of your concern, relevant dates or supporting information, and the outcome you seek. We will acknowledge and investigate the complaint within a reasonable period.

If you are not satisfied with our response, you may be entitled to contact the Office of the Australian Information Commissioner at www.oaic.gov.au or the privacy regulator in your region.

18. Changes to this policy

We may update this policy when Yudah’s features, legal obligations or information-handling practices change. The current version will be published with its effective date. If a change materially affects our use of Google user data or other personal information, we will provide appropriate notice and obtain consent where required.

19. Contact us

For privacy questions, access or correction requests, complaints, or deletion requests, contact: