What SingKey knows about you

An account is optional

By default, SingKey still has no sign-up, no sign-in and no password, exactly as described below — nothing follows you to another phone, and there is nothing to recover if you lose this one.

An account is there if you want it: your voice measurements, your songs and your Sunday list can follow you to another phone or browser. It needs only an email address and a password, and creating one is always your choice — SingKey never asks before you tap to start.

If you forget your password, you can reset it by email from the sign-in screen. The link works once, for an hour.

Your voice stays on your phone

When you sing, the sound is analysed in your browser, on this device — the recording itself never leaves it, account or not.

What SingKey works out from your voice while you sing — the live picture on screen — stays on this device too. If you have an account, a short summary of a take you kept (the notes it found, not the sound) can follow you to another phone, the same way the rest of your account does. Section “What is stored, and where” says exactly what that summary is.

Recordings you choose to save are stored in this browser and nowhere else. They are never uploaded — not to SingKey, not to anyone, account or not.

The microphone is only ever opened at the moment you tap to sing, and it is released the moment you stop or leave the screen.

What is stored, and where

With no account: the singers on this device, the songs you add, the keys you chose, what you have practised and your Sunday running order are kept in this browser’s own storage. Clearing your browser data for this site deletes all of it, and so does the delete button in Settings.

With an account: that same list — your voice measurements, the singers you have added, the songs you have typed in, which key you settled on for each one and how it went, your Sunday and next-Sunday running order, songs you have put away, the character you picked, and small preferences like which key names you prefer — is also kept on SingKey’s server, so it can follow you to another phone. With one exception, it is yours alone and SingKey never shows it to anyone else’s account: songs you add are shared with every signed-in member — see “Songs you add are shared”, below.

That server-side copy lives in a Postgres database. SingKey’s database provider is Neon; SingKey itself is hosted on Vercel. “Who handles your data for us”, below, names everyone else involved.

Saved recordings are never part of that server copy, with or without an account — they stay only in this browser’s own storage, because audio is larger and, unlike the notes SingKey measures from it, is not something the product needs to move between your phones.

An account, in plain terms

Creating an account needs an email address and a password. Your password is never kept as you typed it — only a scrambled, one-way version that cannot be turned back into your password, with a random ingredient unique to your account so two people who happen to choose the same password do not end up with the same stored value. SingKey can check a password against this; it can never read one back out.

Signing in keeps you signed in with one small, protected cookie on your device. You can end that on just this device, or end it on every device you have ever signed in on, in one tap.

Deleting your account deletes everything it was keeping for you on SingKey’s server, straight away. What is already on this phone stays until you also choose to delete it here, exactly like the delete button described above.

What leaves this device, and when

The guided walk can speak its instructions out loud. When it does, your browser asks SingKey’s server for one step of one exercise — by name, not by text — and gets back the spoken audio. Where there is no pre-recorded clip, SingKey’s server asks a speech service, ElevenLabs, to say the line. The lines it speaks are SingKey’s own, written in advance; your voice, your recordings, your songs and your measurements are never part of that request.

If you have an account, the data listed under “What is stored, and where” also leaves this device, to reach SingKey’s server so it can follow you to another phone. Your recordings do not — see above.

With no account, that does not apply: nothing else on any screen sends anything anywhere.

What your profile holds

With an account, SingKey’s server keeps what you give it for your profile: your email address, the name you signed up with, a username, and — if you add them — an about line, a favourite verse, an encouragement, a location and the character you picked. It also keeps the role you chose (singer, instrumentalist, both, or serving another way) and where you serve.

It keeps your age and your gender if you give them, because onboarding and your profile ask. Age is a whole number, 13 or over; SingKey never asks for a birth date and does not keep one. Gender is one of woman, man, non-binary or prefer-not-to-say, and it is a choice you make, never something SingKey works out. Gender only decides which reference voice band SingKey draws as a guide; it does not change what a voice test measures.

Other members never see your email address, age, gender or location. They can see your name, username, character, role, where you serve, and — on your profile page, depending on your visibility setting — your about line, favourite verse and encouragement. They can also see whether you are online, which comes from the time you were last active.

Each device you sign in on is recorded as a session: when it started, when it was last used, and the browser’s own description of itself. Ending that session removes the record.

You can download everything the server holds for your account as one file from the Account screen (“Download my data”), and delete it from there too.

Who handles your data for us

Neon, our database provider, stores the server-side copy described above. Vercel hosts SingKey and handles the requests your phone makes to it.

Resend sends the one email SingKey can send: a password reset. When you ask for a reset on the sign-in screen, SingKey gives Resend your email address and the message with your reset link so it can be delivered. Resend is not used for anything else — SingKey sends no newsletters, no promotions and no notifications by email.

ElevenLabs makes the spoken voice for the guided walk and the daily encouragements, but only as a fallback, and only from SingKey’s server. When a line has no pre-recorded clip, SingKey’s server sends ElevenLabs that line — words SingKey wrote itself — and a voice name, and gets audio back. Your voice, recordings, songs, measurements, name and email are never part of it, and your phone never contacts ElevenLabs directly.

Kokoro, an open-source voice model, made the pre-recorded clips ahead of time on SingKey’s own computer. It runs nowhere near you and nothing about you is sent to it; the clips are simply files SingKey serves.

YouTube is separate, and only when you tap play on a link — see below.

YouTube, when you ask for it

A song or a Sunday playlist can carry a YouTube link. SingKey shows YouTube’s own player for it, from their privacy-preserving address, and only after you tap play.

Opening a screen with a link on it sends nothing to Google. Pressing play does, on YouTube’s terms, the same as opening YouTube yourself.

SingKey downloads nothing from YouTube and reads nothing back — it cannot even see what a playlist contains.

No tracking, no adverts

There is no analytics, no tracking pixel and no advertising in SingKey, and nothing here is ever used to watch what you do.

The only cookie SingKey can ever set is the one that keeps you signed in, and only once you choose to create an account — it carries nothing but a random code your account recognises, nothing that identifies you by itself, and it does nothing until you sign in.

Nobody is counting how often you open SingKey or which songs you sing.

Song stats in the Song Bank are community totals: how many published worship sets a song was in, and how many members hearted it. They never say who.

Your church

SingKey can hold more than one church. JIA DG Church – CMA was the first, and every account that existed on 7 October 2026 is a member of it. Anyone else asks to join a church: its Head or a SingKey super admin lets them in, adds them by @username, or shares a link. A person who wants a church space of their own asks for one, and a SingKey super admin decides.

You belong to one church at a time. To join another, you leave the first.

Members see their church’s People. The Community feed and the People list start with your own church, with “Everyone” one tap away; SingKey remembers your choice on this device. The Song Bank is shared with everyone, whatever church you are in.

Where you say you serve — media, tambourine, prayer, food and the rest — shows on your profile, and your church’s Head sees it beside each team so they can add you. Saying so does not put you on a team.

When you ask to join, that church’s Head is told, by your username. Everything else in SingKey works the same whether you are a member of a church or not.

Daily devotions

Your daily devotions — the verse, your answers, and the days you marked done — are saved to your account and are private to you. No other member, SingKey admins included, can read what you wrote in the app.

Unless you choose someone else, or nobody, your daily check goes to the Head of your own church. If you are in no church yet, it goes to the Head of JIA DG Church – CMA. Whoever receives it — the Head or the person you chose — they see which days you did your devotion, never what you wrote. You can change or stop that any time.

Whoever receives your daily check also sees how many days you did in each of the last four weeks, and a Head gets a Monday notice that last week’s check is ready. Days and counts only.

You can mark a day you did your devotion but forgot to tick, up to a week back, after confirming you did it. Whoever receives your tick sees that day as added later, and is not notified of it.

A Head is not told each time you tick. Instead they get one count a day — how many of their church did their devotion, in all and per team — and see today’s counts on their Home. Someone you choose instead still gets your tick each day. One church’s Head never sees another church’s people.

Your church’s Head and SingKey’s super admins can put you on a team of that church — Media, Intercessory Prayer, Serve and the rest — or you can join one from its invite link. They see who is on each team, and the Head can see the daily check of one team at a time.

Sharing a devotion is up to you: it becomes an ordinary post, in Community and on your profile, that every signed-in member can read. You can edit it before it posts.

Worship Sets

Every signed-in SingKey member can read any church’s published setlists, read-only — the songs, their chords and words, the service date, the rehearsal’s date and time, and who leads. That includes churches you do not belong to.

Three things stay with that church’s worship team: the rehearsal place and notes, who plays what, and drafts. A draft is only ever read by the people who may edit the set.

A church’s worship team is its own. Its Head and team leaders add, approve and remove people, and only people on the team can be given a part in one of its sets. Asking to join — from a link or from a set — waits until one of them says yes.

A set you plan on your own, with no church team, is read by you, your helpers and whoever you give its share link. The share link shows the same read-only view, without the rehearsal place and notes.

Once any set’s service day has passed, every signed-in SingKey member can read it as past worship, in that same read-only view. Who played what stays with the team.

Because chords and words are open to every signed-in member, please add to a set only what you are entitled to share.

Songs you add are shared

SingKey is one song library for the whole community. Once you are signed in, a song you add — its title, artist, key, words, chords and your notes on it — can be read by every signed-in SingKey member, in the Song Bank. This includes songs you added before this changed.

What is not shared: where you got the song (the link you pasted), your name, and your email address. Nobody else can change or delete a song you added. Reading the Song Bank needs a SingKey account.

Any member planning a worship set can add your song to it, with its words and chords. If that set’s leader opens it with a share link, anyone holding the link can read the set, your song included.

With no account, a song you add stays on this device only.

When you paste a link, SingKey reads that page for you and keeps what it found as your copy. It checks the site’s robots.txt first and stays away from pages the site asks automated readers not to open.

What you add or import is your copy, for your use. Please make sure you are entitled to the words and chords you bring, because SingKey has no way of knowing.