SLC Unite
This Privacy Policy explains how SLC Unite, the choir operations application for St Luke's Chorale, handles information used to provide the service.
Information SLC Unite uses
SLC Unite may process choir member information such as name, email address where provided, voice or instrument, role and access permissions, event responses, participation records, app-usage records, and other information entered by authorised choir administrators.
Google user data and Google Drive
When an authorised user chooses Connect Google Drive, SLC Unite requests Google Drive access so the connected uploader can use the configured SLC Unite choir library and its existing/new song and event folders without repeated folder-selection prompts. The access token stays in that browser session and is not stored in Firestore. SLC Unite uses Drive access only for authorised choir file-management operations initiated through the app.
Google OAuth access tokens for this limited permission are kept in the user's browser session and are not intentionally stored in Firestore as long-lived Google credentials. SLC Unite stores application metadata needed to reference choir files, such as Google Drive file IDs, filenames, links, file types, sizes, related song/event identifiers, and the SLC Unite user who uploaded the file.
How Google user data is used
Google user data is used only to provide or improve user-facing SLC Unite choir file features requested by the user. SLC Unite does not sell Google user data, does not use Google user data for advertising, and does not use Google user data to build advertising profiles.
Sharing and visibility of choir files
The choir's Google Drive library is managed by St Luke's Chorale. Where configured by the Super Admin, uploaded choir files may be set to anyone with the link can view so choir members can access them without connecting their own Google Drive account. Users should upload only content appropriate for that sharing setting.
Firebase and application data
SLC Unite uses Google Firebase services, including Authentication, Firestore and Hosting, to operate the application. Access to private application data is controlled by SLC Unite authentication, roles and Firestore security rules.
Retention and deletion
Choir messages: Announcements and Choir Chat are shared with signed-in choir users, not private or end-to-end encrypted conversations. Messages store text, the sender's roster name and record ID, authentication-session ID and posting time. Name-only Member Access does not verify personal identity. Avoid sensitive personal information. Authors can remove their messages from the authentication session that sent them; Super Admin can remove any message. Removal blanks the message body but retains a moderation marker, sender information, deletion time and deleting account. Copies previously exported in backups may remain. Message content is excluded from new general audit logs when the v2.14.55 audit function is deployed.
Unread markers and message-alert preferences are stored on this device per sign-in identity. Optional room alerts use registered notification tokens and contain no message text or sender name. Mute a room in Messages or disable device notifications to stop its alerts. Alerts can continue while the app is closed. Message history is retained until moderated; older messages can be loaded on demand.
Home Screen badges and event reminders: Supported devices store local account/member identifiers, recent message identifiers and read positions to update the app-icon badge, including when a message alert arrives while the app is closed. This badge record does not contain message text or member names. Counts are per device and are refreshed when messages reconnect. Registered device records include the notification token, account/member identifiers, device details, app origin/version and selected alert preferences. Event reminders may display the event title, venue and start time on the lock screen. New-poll alerts may display the poll title and indicate that a vote is requested; they are sent only for polls addressed to the registered member or their groups when poll alerts are enabled on that device. Delivery records are retained to record sends and prevent duplicate broadcasts. Signing out clears the local badge but does not revoke device notification permission or remove the notification registration. Use Notifications → Disable on This Device before sharing the device, or change notification access in the phone/browser settings.
Remember me on this device: When enabled, Firebase Authentication retains your sign-in session in this browser or installed app. For name-based Member Access, SLC Unite also remembers the selected member record ID and checks that record when reopening. SLC Unite does not save or replay your password. Unchecking Remember me uses a session-only sign-in. Use Sign out / Switch user on a shared device to clear the remembered login. Browser storage settings, clearing site data or an invalidated sign-in may require you to log in again.
Choir application records are retained while needed for SLC Unite operations and choir administration. Authorised administrators may update or delete records according to their assigned role. Google Drive files remain subject to the choir Drive account's retention and permissions. Revoking Google authorization stops SLC Unite from using that user's Google authorization token.
Google API Services User Data Policy
SLC Unite's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
Contact
For privacy questions or requests relating to SLC Unite, contact stlukeschoralemp@gmail.com.