Privacy Policy — OpenLP Cloud Sync plugin

Last updated: October 1, 2026

The OpenLP Cloud Sync plugin (the "app") is an open-source plugin for OpenLP, the free church presentation software. It synchronizes a user's OpenLP song library between the user's own computers by storing encrypted-compressed backup files in the user's Google Drive. This policy explains what data the app touches, where that data lives, and what the developer does with it.

1. Information the app accesses

The app authenticates with Google using OAuth 2.0 and requests exactly one scope:

• https://www.googleapis.com/auth/drive.file — permission to view and manage only the Google Drive files the app created itself, or that the user explicitly opened with the app.

Under this scope the app can see, upload, download, and delete its own song-library backup files. It cannot see, list, read, modify, or delete any other file in the user's Google Drive, including files owned by other people and shared with the user.

The app does not request access to the user's Gmail, Google Calendar, contacts, profile information, or any other Google service.

2. Information the app collects and stores

All data the app handles stays on the user's own computers and in the user's own Google Drive. The developer operates no server and receives no data.

• On the user's computer (in OpenLP's local plugin data folder):
  • Google OAuth tokens (access and refresh tokens) used to authenticate Drive uploads and downloads. Tokens are stored only locally and are never transmitted anywhere except to Google's servers during authentication.
  • A local snapshot of the song database used to merge changes between the user's machines.
  • Plugin settings (e.g. sync preferences).
• In the user's Google Drive: the song-library backup files the app uploads, stored in a folder the app creates. These backups contain the user's OpenLP song data (song titles, lyrics, authors, themes, and related metadata the user entered into OpenLP).

3. How the information is used

Data is used solely to provide the app's core function: keeping the user's OpenLP song library synchronized across the user's own computers. Specifically:

• OAuth tokens authenticate the app to Google Drive so it can upload and download backup files.
• The local song snapshot is compared against Drive backups to merge additions, edits, and deletions between machines.

The app performs no analytics, no profiling, and no behavioral tracking of any kind.

4. Information sharing and disclosure

The developer does not sell, rent, share, or disclose any user data to third parties, because the developer never receives any user data in the first place. There is no account system, no telemetry pipeline, and no third-party SDK embedded in the app. The only network communication the app performs is with Google's OAuth and Drive APIs, governed by Google's Privacy Policy.

The app's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

5. Data security

OAuth tokens are stored in the user's local OpenLP data folder with normal filesystem permissions; backup files in transit use HTTPS. Because there is no developer-operated server, there is no central database of user data that could be breached. Users are responsible for the security of their own computers and Google accounts.

6. Data retention and deletion

• Local data: uninstalling or removing the plugin deletes its local data folder, including stored OAuth tokens and the song snapshot.
• Drive backups: backup files in the user's Google Drive remain the user's property. They can be deleted at any time from Google Drive; deleting them stops synchronization but does not affect the local OpenLP library.
• Revoking access: the user can revoke the app's Google access at any time at myaccount.google.com/permissions. Revocation immediately invalidates the stored tokens.

7. Children's privacy

The app is a utility for OpenLP operators and is not directed at children under 13. It collects no personal information from anyone, including children.

8. Changes to this policy

If this policy changes materially, the updated policy will be posted at this URL with a revised "Last updated" date. Continued use of the app after a change constitutes acceptance of the updated policy.

9. Contact

Questions about this policy or the app's data practices: open an issue at github.com/avandever/openlp-cloudsync.