Privacy

Malva Live · in effect from 3 November 2026

Malva Live is a mixing console for churches. Each church's desk runs on its own Mac. Our relay server, in Toronto, Canada, connects that desk to the people who mix it and look after it from elsewhere. This page says what that involves knowing about you, and why.

What we keep, and why

• Your account — a username, the name you go by, and your password, stored only in a scrambled form that cannot be turned back into the password. To let you sign in.
• Your agreement to our terms — your username, which version you agreed to, and when. So we can show who agreed to what.
• Each church — its name, when its desk connects, which version of Malva Live it runs and which version of the app its Mac has, and its plan: which one, until when, and who changed it. To run the desks, keep them up to date, and know what each church has.
• Who mixed what, and when — who had a church's desk and for how long, and a short record of each service: when it started and ended, and figures about how it went, such as its loudness, its peaks, any dropouts, the audio interface and the project used. So a church and its engineers can see what happened on a Sunday, and so the work can be paid for.
• Messages people send each other in the console, so a conversation can be read back.
• Presets and templates engineers save, so they can use them at any desk.
• To keep the service safe — a short-lived count of sign-in attempts and where they come from, so nobody can guess passwords, and records of what the server did, such as a church connecting or taking an update.

Payments

Payments are made through Stripe. We never see or store card numbers. We keep Stripe's reference numbers for a church's customer record and subscription, and whether it is paid up. Stripe handles the rest under its own privacy policy.

Sound

Malva Live works on your church's sound on your church's own Mac. When an engineer listens from elsewhere, the sound passes through our relay to them as it plays; we do not record it or keep it. Recordings you make with Malva Live are saved on your church's Mac and are never sent to us.

What stays on your church's Mac

Your projects, presets, recordings, passphrase and the desk's own record of what it was doing stay on that Mac, unless your church chooses to send them to someone.

Your browser

The console remembers your settings and that you are signed in, in your browser on your own device. There is no advertising, no analytics and no tracking of any kind.

Who else is involved

• DigitalOcean runs the computer our relay is on, in Toronto, Canada.
• Stripe takes payments.
• Cloudflare answers for our domain name; it does not see what passes over the connection.

We do not sell personal information, and we do not share it with anyone else.

How long we keep it

For as long as you or your church use Malva Live. When a church stops, we delete what we hold about it on request, except what the law requires us to keep, such as payment records. Backups are kept for 30 days and then deleted.

How it is protected

Every connection to the relay is encrypted. Passwords are stored scrambled. The server only lets in people holding the right keys, and it is backed up every night.

Your choices

You can ask what we hold about you, have it corrected, or have it deleted. Write to malvalive.official@gmail.com and we will answer within 30 days. If you are not satisfied, you can complain to the Office of the Privacy Commissioner of Canada.

Changes

If this changes, this page will say so, with a new date at the top.