Privacy policy
Last updated 11 November 2026
Fermata Flow is a live running-order tool for churches. This page says what information we keep, why, who helps us handle it, and how you can ask us to change or remove it. We are in beta, so we keep this short and plain, and we will tell you if it changes in a way that matters.
What we collect
We only collect what we need to run the service you asked for.
- When you ask to join the beta: your name, email, church and the optional answers you choose to give about your church and how you run services.
- When you have an account: your email address, your role in your church, and the sign-in sessions on your devices.
- What your church puts in: running orders (item titles, people's names, notes, durations), templates, share links, and the history of shows you have run.
- Names typed in by team members who open a team link without an account.
- Technical information that keeps the service reliable: connection and reliability events (for example when a screen lost its connection), the type of device and browser, and error reports. Viewers following a link are not asked for their name or email.
- If you turn on notifications: the address your device gives us so we can send you a notification.
What we use it for
We do not sell your information, and we do not use it for advertising.
- To run Fermata Flow: show the right running order to the right people, keep timers correct, and sign you in.
- To contact you about the beta, reply to your questions and send the setup and tips emails you can ask us to stop.
- To keep the service healthy: find and fix faults, watch for outages, and understand how the product is used so we can improve it.
- To keep it secure: spot guessing of share codes, abuse of the sign-up form and other misuse.
Who helps us handle it
We use a small number of providers to run the service. They handle your information only to provide their part of it.
- Supabase: our database, sign-in and live updates.
- Netlify: serves the website and the app.
- Fly.io: runs the small service that delivers live updates to congregation screens.
- Cloudflare: our domain, email forwarding, the bot check on the sign-up form and an outside health check.
- Resend: sends our emails.
- Sentry: receives error reports so we can fix faults.
- Anthropic: if you import a running order from a document or pasted text, the text of that import is sent to Anthropic's Claude model to read it into rows. We send only what you chose to import.
- ntfy: delivers operational alerts to our own phones about how the service is running (for example a fault, or a screen reporting a problem). They are not a copy of your running orders.
Cookies and storage on your device
We use only what the service needs: a sign-in session, and small preferences kept on your device, such as your chosen theme or list view. We do not use advertising or tracking cookies. If we later add website analytics, we will use a kind that sets no cookies and update this page.
How long we keep it
- Reliability and connection events: 90 days. Attendance counts for a running order are kept for as long as that running order exists.
- Your church's running orders and settings: for as long as your church uses Fermata Flow. If your church stops, we keep its data for 90 days so you can come back or export it, then delete it.
- When a church deletes its organisation, its data is removed.
- Beta requests: kept while we run the beta, then deleted unless you ask us to keep you informed.
Who can see your information
Your church's information is private to your church. People you give a congregation or team link to can see what that link shows and nothing more, and you can switch a link off at any time. Our small team can access the system to run and support it, and we do so only when needed.
Your choices
You can ask us to see, correct, export or delete the information we hold about you, or to stop emailing you. Church admins can also export their church's data themselves from the Admin console. Write to us at the address below and we will reply within a reasonable time.
Children
Fermata Flow is built for the people who run church services. It is not aimed at children, and we do not knowingly ask children for personal information.
Changes to this page
If we change this policy in a way that matters, we will tell church admins by email before the change takes effect. The date at the top shows when it was last updated.
Contact
Questions or requests about your information: hello@fermataflow.app. To report a security problem: security@fermataflow.app.