Terms of Service
PewPin attendance tracking · Last updated 29 September 2026
1. Who these terms are with
PewPin is operated by Roberto Aguilera, trading as PewPin ("PewPin",
"we", "us"), based in California, United States.
These terms are an agreement between PewPin and the church or
organization using it ("you", "your church"). By creating a church in PewPin, or by signing
in to one, you accept these terms. If you are accepting on behalf of a church, you confirm
you are authorized to do so.
How we handle personal information is described separately in our
Privacy Policy, which forms part of these terms.
PewPin is not a child check-in or safeguarding system
It counts seats. It does not identify who is sitting in them, it does not record which
children are present, and it must never be used to determine whether a specific child has
been collected, is in the building, or has been released to a particular adult. It is also
not a fire-safety, evacuation or roll-call system. If you need any of those, use a system
designed and certified for that purpose. Attendance figures in PewPin are an estimate of
how many people were seated, nothing more.
2. What PewPin does
PewPin lets volunteers mark seats during a service on their phones, and combines those
marks into live attendance counts across devices. It records seats, services, layouts, a
breakdown by adult, child and visitor, and optionally a visitor's first name.
It is a counting tool. It is not church management software, it
does not handle giving, membership records, rosters or communication, and it is not a
system of record for anything other than approximate attendance.
3. Accounts and roles
- Whoever creates a church becomes its owner. Owners control settings,
issue and change the join code, and add or remove members.
- People join with a 6-character code from an owner, and get the usher
role. Owners may change a member's role or remove them.
- You are responsible for who you admit to your church, for what they do with the
access you give them, and for keeping the join code within your team.
- You are responsible for the security of your own sign-in credentials.
- Keep at least two owners. PewPin cannot restore access to a church
whose only owner has lost access to their account. There is no account-recovery process
beyond the standard password reset on your sign-in email.
4. Your responsibilities as a church
Your church decides what is recorded about the people who attend it. That makes your
church responsible for:
- telling your visitors and members what you record and why — a link inside an app they
never open is not sufficient notice;
- having a lawful basis for recording a visitor's name, and asking before recording it;
- instructing volunteers never to enter phone numbers, addresses, dates of birth,
health, prayer or safeguarding information into the visitor name field;
- responding to requests from your own visitors about information you have recorded.
Write to privacy@pewpin.app and we will send
you a notice template you can adapt.
5. Acceptable use
You agree not to:
- use PewPin to record information about identified children, or any sensitive personal
information;
- attempt to access another church's data, or probe, scan or test the security of the
service;
- use automated means to create accounts, or share a join code publicly;
- resell, sublicense or white-label the service without our written agreement;
- use PewPin unlawfully, or in a way that damages it or other churches using it.
We may suspend or remove a church that breaches this section. Where it is reasonable to
do so, we will contact you first.
6. Your data
- Your church's data belongs to your church. We claim no ownership of
your attendance records, layouts or visitor names.
- You can export it at any time from Settings → Data Management →
Backup, which downloads everything as a file. We recommend doing this regularly.
- We do not use your data for our own purposes, including to train or
improve anything beyond operating the service.
- An owner can delete data from within the app at any time. To have a church's data
removed entirely, write to us.
Keep your own backups anyway. We take a daily backup of the whole
database, kept for 30 days, but it exists so we can restore the service after a failure on
our side — not to undo a deletion made inside your church. Do not treat PewPin as the only
copy of anything you would be sorry to lose.
7. Availability, changes and cost
PewPin is offered on an as-is, as-available basis. A church can use it
free of charge, or an owner can subscribe the church to the paid plan below.
The paid plan
- What each plan includes. Free: counting seats, and counting
people who aren't in a seat, for any number of ushers and viewers; reports for services
from the last 4 weeks; and a full Backup of your church's data at any time.
Paid: everything in free, plus reports for every past service, trends across
services, CSV export and printing, visitor names, and parking heads-up.
- Price. $19 a month, or $190 a year, in US dollars, plus any tax that
applies. You pay in advance, by card, through our payment provider, Stripe.
- It renews automatically. A monthly plan renews every month and a
yearly plan every year, charged to the same card at the same price, until you cancel.
The price only changes with the notice described below.
- Renewal reminder. Before a yearly plan renews, we email the owner who
subscribed between 15 and 45 days ahead, with the amount and how to cancel.
- Cancel any time, online — from Settings › Your plan
in the app, or by emailing
privacy@pewpin.app. Cancelling stops the next
renewal, and the plan continues until the end of the period you have already paid
for.
- Refunds. Payments are not refunded, including for part of a month or
year — with one exception: if you ask within 30 days of paying for a
yearly plan, we refund that payment in full and the plan ends. This does not affect any
refund the law entitles you to.
- Price changes. If the price changes, we will email the owner who
subscribed 30 days before the new price first applies, with how to
cancel, so you can cancel first.
- If a paid plan ends, nothing is deleted. Reports for services older
than 4 weeks are hidden until you subscribe again, no new visitor names can be recorded
(names already recorded are still deleted on the schedule in the Privacy Policy), and
parking heads-up switches off.
- Other changes to the paid plan. Before any other material change to
the paid plan takes effect, we will email the owner who subscribed, with how to
cancel.
Availability and changes
- There is no uptime guarantee and no service level agreement, on the
free or the paid plan. The service runs on third-party infrastructure, and a problem
there can interrupt or suspend the service, including during a service on a Sunday.
- We may change, suspend or discontinue any part of PewPin. If we discontinue the
service entirely, we will give at least 30 days' notice to church
owners by email so you can export your data, and refund any part of a paid period
that falls after the service ends.
- We may change what free use includes. If we do, we will give at least
30 days' notice, and no church will be charged without agreeing to
pay first.
- We may update these terms. Significant changes will be notified to church owners and
the date at the top will change. Continuing to use PewPin after that means you accept
the updated terms.
8. Disclaimer
To the fullest extent permitted by law, PewPin is provided without warranties of any
kind, whether express or implied, including any implied warranties of merchantability,
fitness for a particular purpose, or non-infringement.
We do not warrant that the service will be uninterrupted, timely,
secure or error-free, that counts will be accurate, or that data will not be lost. Counts
depend on volunteers marking seats correctly and on devices being connected.
9. Limitation of liability
To the fullest extent permitted by law, PewPin will not be liable for any indirect,
incidental, special, consequential or punitive damages, or for any loss of data, revenue,
goodwill or anticipated savings, arising out of or relating to your use of the service.
Our total liability for all claims relating to the service, in
aggregate, will not exceed the greater of the amount you paid us in the twelve
months before the claim arose, or fifty US dollars ($50).
Nothing in these terms excludes or limits liability that cannot
lawfully be excluded or limited, including liability for death or personal injury caused by
negligence, or for fraud.
Some jurisdictions do not allow certain exclusions or limitations,
so parts of sections 8 and 9 may not apply to you.
10. Your indemnity to us
You will defend, indemnify and hold us harmless against any third-party claim, demand,
loss, liability, damage or reasonable cost, including legal fees, arising from:
- your breach of section 4 (your responsibilities as a church) or section 5 (acceptable
use);
- information recorded in PewPin by anyone you have admitted to your church, including
anything entered into the visitor name field contrary to these terms;
- your failure to tell your visitors and members what you record and why, or to have a
lawful basis for recording it;
- any use of PewPin's attendance figures as though they were a check-in, safeguarding,
roll-call or evacuation record.
We will tell you promptly about any claim we want covered, let you control the defense of
it with counsel of your choosing, and give you reasonable assistance at your expense. You may
not settle a claim in a way that admits fault on our part, or that places an obligation on
us, without our agreement.
11. Ending it
- You may stop using PewPin at any time. An owner can delete the church's data from
within the app, or ask us to remove it.
- We may end your access if you breach these terms, or if we discontinue the service on
the notice described in section 7.
- Export anything you want to keep before you go. After a church's account is closed we
remove its data on the timescales in the Privacy Policy.
- Sections 6, 8, 9, 10 and 12 survive the end of this agreement.
12. General
- These terms, together with the Privacy Policy, are the
whole agreement between us about PewPin.
- If any part is found unenforceable, the rest continues to apply.
- Not enforcing something once does not waive our right to enforce it later.
- You may not transfer these terms to anyone else without our agreement. We may
transfer them if PewPin is acquired or reorganized, on notice to you.
- Nothing here creates a partnership, employment or agency relationship.
- These terms are governed by the laws of the State of California,
United States, without regard to its conflict-of-laws rules. The state and federal
courts located in California will have exclusive jurisdiction, except where the law of
your own state or country gives you rights that cannot be overridden.