Terms of Service

1. Who these terms are with

PewPin is operated by Roberto Aguilera, trading as PewPin ("PewPin", "we", "us"), based in the United States.

These terms are an agreement between PewPin and the church or organisation using it ("you", "your church"). By creating a church in PewPin, or by signing in to one, you accept these terms. If you are accepting on behalf of a church, you confirm you are authorised to do so.

How we handle personal information is described separately in our Privacy Policy, which forms part of these terms.

2. What PewPin does

PewPin lets volunteers mark seats during a service on their phones, and combines those marks into live attendance counts across devices. It records seats, services, layouts, a breakdown by adult, child and visitor, and optionally a visitor's first name.

It is a counting tool. It is not church management software, it does not handle giving, membership records, rosters or communication, and it is not a system of record for anything other than approximate attendance.

3. Accounts and roles

• Whoever creates a church becomes its owner. Owners control settings, issue and change the join code, and add or remove members.
• People join with a 6-character code from an owner, and get the usher role. Owners may change a member's role or remove them.
• You are responsible for who you admit to your church, for what they do with the access you give them, and for keeping the join code within your team.
• You are responsible for the security of your own sign-in credentials.
• Keep at least two owners. PewPin cannot restore access to a church whose only owner has lost access to their account. There is no account-recovery process beyond the standard password reset on your sign-in email.

4. Your responsibilities as a church

Your church decides what is recorded about the people who attend it. That makes your church responsible for:

• telling your visitors and members what you record and why — a link inside an app they never open is not sufficient notice;
• having a lawful basis for recording a visitor's name, and asking before recording it;
• instructing volunteers never to enter phone numbers, addresses, dates of birth, health, prayer or safeguarding information into the visitor name field;
• responding to requests from your own visitors about information you have recorded.

Write to privacy@pewpin.app and we will send you a notice template you can adapt.

5. Acceptable use

You agree not to:

• use PewPin to record information about identified children, or any sensitive personal information;
• attempt to access another church's data, or probe, scan or test the security of the service;
• use automated means to create accounts, or share a join code publicly;
• resell, sublicense or white-label the service without our written agreement;
• use PewPin unlawfully, or in a way that damages it or other churches using it.

We may suspend or remove a church that breaches this section. Where it is reasonable to do so, we will contact you first.

6. Your data

• Your church's data belongs to your church. We claim no ownership of your attendance records, layouts or visitor names.
• You can export it at any time from Settings → Data Management → Backup, which downloads everything as a file. We recommend doing this regularly.
• We do not use your data for our own purposes, including to train or improve anything beyond operating the service.
• An owner can delete data from within the app at any time. To have a church's data removed entirely, write to us.

Keep your own backups anyway. We take a daily backup of the whole database, kept for 30 days, but it exists so we can restore the service after a failure on our side — not to undo a deletion made inside your church. Do not treat PewPin as the only copy of anything you would be sorry to lose.

7. Availability, changes and cost

PewPin is currently provided free of charge and is offered on an as-is, as-available basis.

• There is no uptime guarantee and no service level agreement. The service runs on third-party infrastructure whose free tiers have usage limits; reaching one can interrupt or suspend the service, including during a service on a Sunday.
• We may change, suspend or discontinue any part of PewPin. If we discontinue the service entirely, we will give at least 30 days' notice to church owners by email so you can export your data.
• We may introduce charges in future. If we do, we will give at least 30 days' notice, and no church will be charged without agreeing to pay first.
• We may update these terms. Significant changes will be notified to church owners and the date at the top will change. Continuing to use PewPin after that means you accept the updated terms.

8. Disclaimer

To the fullest extent permitted by law, PewPin is provided without warranties of any kind, whether express or implied, including any implied warranties of merchantability, fitness for a particular purpose, or non-infringement.

We do not warrant that the service will be uninterrupted, timely, secure or error-free, that counts will be accurate, or that data will not be lost. Counts depend on volunteers marking seats correctly and on devices being connected.

9. Limitation of liability

To the fullest extent permitted by law, PewPin will not be liable for any indirect, incidental, special, consequential or punitive damages, or for any loss of data, revenue, goodwill or anticipated savings, arising out of or relating to your use of the service.

Our total liability for all claims relating to the service, in aggregate, will not exceed the greater of the amount you paid us in the twelve months before the claim arose, or fifty US dollars ($50).

Nothing in these terms excludes or limits liability that cannot lawfully be excluded or limited, including liability for death or personal injury caused by negligence, or for fraud.

Some jurisdictions do not allow certain exclusions or limitations, so parts of sections 8 and 9 may not apply to you.

10. Ending it

• You may stop using PewPin at any time. An owner can delete the church's data from within the app, or ask us to remove it.
• We may end your access if you breach these terms, or if we discontinue the service on the notice described in section 7.
• Export anything you want to keep before you go. After a church's account is closed we remove its data on the timescales in the Privacy Policy.
• Sections 6, 8, 9 and 11 survive the end of this agreement.

11. General

• These terms, together with the Privacy Policy, are the whole agreement between us about PewPin.
• If any part is found unenforceable, the rest continues to apply.
• Not enforcing something once does not waive our right to enforce it later.
• You may not transfer these terms to anyone else without our agreement. We may transfer them if PewPin is acquired or reorganised, on notice to you.
• Nothing here creates a partnership, employment or agency relationship.
• These terms are governed by the laws of the State of California, United States, without regard to its conflict-of-laws rules. The state and federal courts located in California will have exclusive jurisdiction, except where the law of your own state or country gives you rights that cannot be overridden.

12. Contact

Questions about these terms: privacy@pewpin.app