Privacy Policy

Check One Two is operated by Life Baptist Church for one purpose: evaluating and placing volunteers on its worship team. It is not a public service, it is not sold to anyone, and it serves only this one church. There is no advertising on it.

Life Baptist Church decides what is collected and why. This policy covers the app at this website and nothing else — not the church's other systems, and not any site we link to.

Your use of the app is also governed by our Terms of Service, of which this policy forms part. Where the two describe the same thing, they are meant to agree; if they ever do not, this policy governs how your information is handled.

Only what the app needs to run an evaluation:

• Account details — your name, email address, and an optional phone number. Passwords are never stored; we keep only a one-way argon2id hash that cannot be turned back into your password.
• Google account details, if you choose to sign in with Google — your name, email address, profile picture, and Google account ID. We never receive your Google password.
• Musical profile — your primary instrument, years of experience, and vocal range.
• Your testimony and written responses — including answers about your faith, church involvement, and beliefs. See section 4.
• Audio and video you record or upload for musical evaluations, and the pitch and timing analysis derived from them. See section 5.
• Evaluation results — scores, attempts, retries, and the timestamps of each.
• Messages you send to or receive from worship team leaders inside the app.
• Operational records — a log of emails the app sent you, and an audit log of administrative actions taken on your account.

We do not use tracking cookies, advertising pixels, or third-party analytics. The only cookie the app sets is the one that keeps you signed in. We do not track you across other websites, so we do not act on browser "Do Not Track" or Global Privacy Control signals — there is no cross-site activity here for them to apply to.

Each thing above is collected for the purpose it obviously serves: your account details to let you sign in and to contact you about your application; your profile, testimony, responses and recordings so leaders can review you for the worship team; messages so you and the leadership can talk; and the operational logs so we can tell whether an email actually reached you and who changed what on your account.

We do not use any of it for a different purpose without asking you first.

Your testimony and faith-related answers are, in substance, a statement of your religious beliefs. Privacy laws in several states treat information about religious belief as sensitive personal information that may only be processed with your consent, and we treat it that way regardless of where you live.

You provide it by choosing to submit it, and that consent is the basis on which we hold it. You can withdraw it: ask us to delete your testimony and we will, though we may then be unable to continue evaluating you for the team.

It is used only for the pastoral review described in these pages. It is not used to profile you, not shared outside the worship team leadership at Life Baptist Church, and never sold or disclosed for anyone else's purposes.

When you record a musical evaluation, the app stores the audio or video and measures the pitch and timing of what you played or sang in order to score it.

We do not create a voiceprint, faceprint, or any other biometric identifier from your recordings, and we do not use them to identify or authenticate anyone. The analysis measures musical accuracy in a single recording. It is not used to recognise you in any other recording, and we do not sell, lease, trade, or otherwise profit from your voice or image.

Recording only ever starts when you press a record button. You can re-record as often as you like and submit the take you prefer.

Worship team leaders at Life Baptist Church can see your profile, testimony, recordings, evaluation results, and messages. Leaders hold one of three roles — administrator, reviewer, or viewer — and the app limits what each can do.

Leader-only material — private review notes, ratings, placement decisions, and AI summaries — is never shown to candidates, including the candidate it is about.

Other candidates cannot see your information. No one outside Life Baptist Church is given access, except the service providers in section 7 acting on our instructions, or where the law requires us to disclose something.

Running the app means a small number of companies process data on our behalf. They may use it only to provide their service to us, and not for their own purposes:

• DigitalOcean — hosting, the database, and storage of your uploaded recordings.
• Mailgun and Amazon Web Services (Amazon SES, in the US West (Oregon) region) — delivering account emails such as verification, password resets, and invitations. Both are configured; whichever is active at the time handles the message. The AWS route keeps a copy of each message it sends in our own Amazon S3 storage, which means the body of an account email — a verification link, a password reset link, or an invitation — is retained there.
• Anthropic, reached through DigitalOcean's inference service — generating optional AI feedback and summaries. Text and pitch analysis sent for this purpose is not used to train their models.
• Google — only if you choose to sign in with Google.

All of them process your information in the United States. We do not transfer it anywhere else.

We do not sell your personal information, and we have not sold any in the last twelve months. We do not share it for cross-context behavioural advertising, and we do not use it for targeted advertising or profiling. There is nothing to opt out of — but if you want to tell us not to sell your information anyway, write to the address in section 16 and we will record your instruction.

Some feedback and summaries in the app are generated by an AI model and are labelled as such wherever they appear.

No decision about you is made automatically by that model. Every placement decision is made by a person at Life Baptist Church, who is free to disagree with anything the model produced. AI output is an aid to that person's judgement and never the sole basis for a decision.

You can ask what AI-generated text is held about you, ask a human to explain it, and ask for it to be corrected or removed.

• Your account, profile, testimony and evaluations — for as long as you have an account, so leaders can see your progress over time.
• Recordings — for as long as the evaluation they belong to is on your account.
• Messages — for as long as both accounts exist.
• Email delivery logs — deleted automatically after 30 days.
• Administrative audit records — kept while the account exists, so there is a record of who changed what.

Ask us to delete your account and we will remove your profile, testimony, recordings, and messages. Some records may persist briefly in encrypted backups before they age out, and we may keep the minimum needed to meet a legal obligation or to resolve a dispute.

You can ask us to:

• tell you what we hold about you, and give you a copy,
• correct anything that is wrong,
• delete your account and what is in it,
• stop processing your testimony or other sensitive information, by withdrawing the consent in section 4,
• confirm we have not sold or shared your information.

You can view and correct your own profile details in Settings at any time, and unlink a Google account once you have set a password. For anything else, write to us at the address in section 16.

We will acknowledge your request and respond within 45 days. If it is complicated we may take another 45 days, and we will tell you before we do. We may need to confirm who you are first — usually by asking you to write from the email address on the account — so that we do not hand your information to someone else.

Using any of these rights costs nothing and we will not treat you differently for it. If we refuse a request, we will tell you why, and you may appeal by replying to say so; a different person will review it and respond within 45 days.

Taking part in a worship team evaluation is voluntary, and you can stop at any time.

Traffic is encrypted in transit. Passwords are hashed with argon2id. Sign-in tokens are stored in HttpOnly cookies that scripts on the page cannot read, and are invalidated when you change your password. Recordings are stored privately and served through short-lived signed links rather than public URLs. Access is limited to worship team leaders, by role.

No system is perfectly secure, and we do not claim otherwise. If you believe your account has been accessed by someone else, contact us at once.

If we discover a breach that affects your personal information, we will notify you and any authority we are required to notify, without unreasonable delay, and tell you what happened and what to do about it.

Accounts are for people aged 13 and over. We do not knowingly collect information from a child under 13; if we learn we have, we will delete it promptly.

Anyone under 18 needs a parent or guardian's permission before creating an account. A parent or guardian can contact us to see what we hold about their child, correct it, or have it deleted, and we will treat that request exactly as we would the young person's own.

If we change how the app handles your information, we will update this page and the effective date at the top. If the change is material we will tell people with active accounts before it takes effect where we reasonably can, and we will not apply a materially different use to information already collected without asking you.

Questions about this policy, or a request about your information, go to the worship team leadership at Life Baptist Church. This is also the designated address for telling us not to sell your personal information, as described in section 8.

If you have an account, the Messages page inside the app reaches the leadership directly. If you cannot sign in, ask any member of the worship team leadership to pass your request on.