Privacy Policy
Effective date: November 1, 2026 · Version 1.0
The short version
- PewPush is run by Lofty Services Inc. in Calgary, Alberta, Canada.
- We collect what we need to run the service: your sign-in email and name, your church's settings, the recordings you upload, and what we make from them.
- Your church's database is in Canada. Recordings, clips and other media are stored in the United States.
- Nothing is posted to social media until a person at your church approves it.
- We do not sell personal information, and we do not use your church's content to train AI models.
- Uploaded recordings are deleted after 30 days. If your church cancels, its content is deleted 30 days later.
- You can ask to see, correct or delete your information by writing to [email protected].
1. Who we are and what this covers
PewPush is a service that helps churches turn sermon recordings into clips, captions and graphics, and post them to social media after a person approves. It is operated by Lofty Services Inc. ("we", "us"), a company based in Calgary, Alberta, Canada.
This policy covers the website at pewpush.com, including the invite request form, and the PewPush app, where churches sign in, upload recordings and approve posts. We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Alberta's Personal Information Protection Act (PIPA).
Two roles. For your own account details, such as your email, name and billing information, we decide how they are used. For the content your church uploads, such as recordings and photos of people, we process it on your church's behalf and only to provide the service. Your church decides what to upload and what to post.
2. Information we collect
We collect information you give us, information your church uploads, and a small amount of technical information.
| Type | What it includes | Where it comes from |
|---|---|---|
| Account | Email address, name, role (Owner, Admin or Reviewer), the churches you belong to | You, or the person who invited you |
| Church settings | Church name, logo, brand colour, time zone, notification email, posting schedule, word list for captions | Your church's Owner or Admins |
| Recordings and media | Sermon and service recordings, transcripts, clips, quote graphics, captions, photos and videos in the media library. These may show or name people in your congregation | Your church |
| Social media connections | Account and Page names and IDs, encrypted access tokens, post status, and post statistics such as views | You, and the platforms you connect |
| Comments and tags | Public comments on your church's posts, posts that tag your church, and public posts on hashtags your church follows, including the author's username and text | The connected platforms, once a day |
| Billing | Billing name and address, country, province or state, postal code, card brand and last 4 digits, payment history. Your full card number is held by our payment processor, not by us | You, and Helcim |
| Activity records | Who approved, changed or posted what, and when; when you accepted this policy, with a one-way coded (hashed) IP address | The app |
| Technical | IP address, browser type, pages visited, error reports with personal details removed, server logs | Your device |
| Invite requests | Name, email, church name, city, province or state, attendance range, role, and anything you write in the form | You, on the website |
We do not ask for sensitive information such as health details. Sermon recordings can still contain it, for example a prayer request read aloud. Your church decides what to upload.
3. How we use it
We use information only to run, secure and improve PewPush:
- Run the service: sign you in with an emailed link, process recordings, find clips, write captions, make graphics, and post what your church approves.
- Approvals: show each item to the right people and record who approved it. Nothing is posted until a person with the right role says yes.
- Comments and tags: once a day, gather new public comments and tags and point out the ones worth answering. PewPush does not reply for you.
- Billing: take payments, charge the right sales tax for your province or state, and keep tax records.
- Email: send sign-in links, team invites, alerts your church turns on, and notices about your account or price changes. We do not send marketing email without your consent.
- Security: prevent abuse, limit request rates, and fix errors.
- Invite requests: reply to churches that ask to join.
AI processing. PewPush uses AI services to transcribe recordings (Groq) and to suggest clips, write captions and sort comments (Anthropic). We send these services only what each task needs, such as audio or transcript text. We do not use your church's content to train AI models, and we do not allow our AI providers to use it for training. AI suggestions are drafts: a person at your church reviews them before anything is posted.
We do not sell or rent personal information, and we do not use it for advertising.
4. Connected social media accounts
Your church can connect YouTube, Facebook, Instagram and TikTok. We use these connections only to post what your church approves, show how posts performed, and gather comments and tags as described above. Access tokens are stored encrypted. You can disconnect any account in PewPush settings at any time, and we then delete its tokens.
YouTube and Google. PewPush uses YouTube API Services. By connecting YouTube, you agree to the YouTube Terms of Service, and Google's use of your data is covered by the Google Privacy Policy. PewPush's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. You can also remove PewPush's access on your Google security settings page.
Facebook and Instagram (Meta). We use Meta's APIs to post to your church's Facebook Page and linked Instagram professional account, and to read comments, tags and post statistics. You can remove PewPush in your Facebook settings under Business integrations. When you do, Meta tells us, and we delete the tokens and data we received from Meta for that connection. You can check the status of a deletion request at https://studio.pewpush.com/privacy/deletion.
TikTok. We use TikTok's APIs to post approved clips and read your church's video list and post statistics. You can remove PewPush in the TikTok app under Settings and privacy, Security, Manage app permissions.
When a post goes out, the platform receives the clip, caption and any other content your church approved. The platform's own privacy policy then applies to that post.
5. Who we share it with
We share information only with the service providers below, who work for us under contracts that limit how they can use it.
| Provider | What they do for PewPush | Where |
|---|---|---|
| DigitalOcean | App servers and the main database | Canada (Toronto) |
| Cloudflare | Website, network security, storage for recordings and media, encrypted database backups | United States (storage); worldwide network |
| Groq | Turns recording audio into text | United States |
| Anthropic | Suggests clips, writes captions, sorts comments | United States |
| Resend | Sends sign-in links, invites, alerts and invite-request emails | United States |
| Helcim | Processes card payments and subscriptions | Canada |
| Sentry | Error reports, with personal details removed | United States |
We also share information:
- With the platforms your church posts to, when your church approves a post (see section 4).
- Within your church: people in your church's PewPush workspace can see its recordings, clips, approvals and activity, depending on their role.
- When the law requires it, such as a valid court order, or to protect people's safety or our rights.
- If our business changes hands, such as a merger or sale. The new owner must protect your information as this policy describes, and we will tell you before that happens.
6. Where your information is stored
Your church's database is in Canada, on DigitalOcean servers in Toronto. Recordings, clips, graphics, library files and the encrypted nightly copies of the database are stored in the United States on Cloudflare R2. Several of our service providers in section 5 also process information in the United States.
Information stored or processed outside Canada is subject to the laws of that country, and authorities there may be able to access it. We protect it with contracts and encryption, but we cannot change those laws. By using PewPush, your church agrees to this storage. If you are in Quebec, we name the United States storage before you sign up, as Quebec law asks.
7. How long we keep it, and how to delete it
We keep information only as long as we need it for the purposes above.
| Information | How long we keep it |
|---|---|
| Uploaded recordings and their preview copies | 30 days after upload, then deleted. A church can choose a shorter time |
| Transcripts, clips, graphics, captions, posts, library files | While the church's account is open; deleted 30 days after the church cancels or is deleted |
| Backup copies of media | 30 days after each copy is made |
| Encrypted nightly database copies | 30 days |
| Social media access tokens | Until you disconnect the account, or the platform tells us access was removed |
| Billing and tax records | As long as tax law requires, generally 6 years |
| Activity records (who approved what) | Kept for the church's records; the person's name is removed when their account is deleted |
| Server logs | 7 days |
| Invite requests from the website | Up to 12 months if the church does not join |
How to delete information
- Your own account: delete your sign-in from Settings in the app. An Owner must first delete the church or hand ownership to someone else.
- Your church: the Owner can delete the church from Settings. We cancel the subscription and disconnect social accounts right away. The church then has 30 days to download its content, and after that we delete it.
- By email: write to [email protected] and we will reply within 30 days.
- Facebook and Instagram data: remove PewPush in your Facebook settings, or email us. You can check a request's status at https://studio.pewpush.com/privacy/deletion.
When a church is deleted, its name becomes "Deleted church". People who belonged only to that church lose their sign-in, and their name becomes "Deleted person". Older activity records stay so the church's history and our tax records still make sense, without naming the person. Deleting something in PewPush does not delete posts already published on social media; remove those on each platform.
8. Cookies
The app uses only the cookies it needs to work: one that keeps you signed in, and a short-lived one while you connect a social media account. Your browser also remembers display choices such as your colour theme, and on this website whether you paused the animations. The website uses no advertising or tracking cookies.
9. How we protect it
- All connections use encryption (HTTPS).
- Social media access tokens are encrypted before we store them, and stored media is encrypted.
- Access is limited by role inside each church. Our own administrative access needs a second sign-in step.
- We record important actions, such as approvals and settings changes.
No system is perfectly secure. If a breach creates a real risk of significant harm, we will tell the people affected and report it to the Privacy Commissioner of Canada and, where required, Alberta's Information and Privacy Commissioner.
10. Children and the people in your recordings
PewPush accounts are for adults acting for a church. We do not knowingly create accounts for anyone under 18.
Sermon recordings and photos often show members of the congregation, including children at events such as Sunday school. Your church is responsible for having permission from the people who appear, and from a parent or guardian for children, before uploading or posting content. If someone asks us to remove content of them, we will pass the request to their church and help the church act on it.
11. Your rights
You can ask us to show you the personal information we hold about you, correct information that is wrong, delete your information (subject to the records we must keep by law), or stop using your information for a purpose you agreed to, where that does not stop the service from working.
Write to [email protected]. We may ask you to confirm who you are, and we will reply within 30 days. For content your church uploaded, we may ask the church to act on the request with us.
If you are not happy with our answer, you can complain to the Office of the Privacy Commissioner of Canada or the Office of the Information and Privacy Commissioner of Alberta.
12. Contact us
Privacy OfficerLofty Services Inc.
Calgary, Alberta, Canada
[email protected]
13. Changes to this policy
When we change this policy, we update the date at the top. For important changes we tell you by email or in the app before they take effect, and each church's Owner accepts the new version at their next sign-in.