PRIVACY · CURRENT RELEASE
Your words should not become a hidden cost.
This notice describes the owner-only Gate A evaluation as of August 30, 2026. Named pilot participation is prepared in code but is not activated by this release.
Anonymous first use
Text entered on the Begin page stays in page memory. It is not sent to a server, stored in the product database, or used to train AI. It clears when you leave or reload. Only a named starting choice can be carried into account setup, and only after a separate explicit choice.
Voice transcription
Voice transcription is disabled in this controlled release. If it is later enabled, microphone access will be requested only after you choose Start recording. A finished recording would be sent to the OpenAI API for transcription, processed in memory by this app, not written to its database or object storage, and shown for review before the transcript can be sent or saved. Provider retention and applicable data controls must be verified before activation.
Accounts and private space
Supabase provides email verification, sign-in, and account recovery. This site never stores your password. Private entries are account-scoped, excluded from analytics text, never exposed to church roles, and follow the retention choice shown before saving.
AI memory and Talk
Talk uses the OpenAI API only for the owner tester or a separately approved, named pilot participant with an active account and explicit current consent. Church participants also require an active church release and connection. Before a request is sent, direct contact details are removed and a verified public-domain Scripture passage is selected by the application. OpenAI generates commentary—not Scripture—and both input and output pass moderation. API storage is not requested. Non-authorized and anonymous use receives the reviewed fallback path. The current conversation remains in the browser tab and is not saved as history. Memory is off by default, unavailable for ages 13–17, and limited to exact facts an adult separately approves.
Reminder delivery
Reminder preferences begin paused. Email and web push can be used only for an authorized pilot account when the relevant provider, explicit release switch, browser permission, encrypted device record, and scheduled worker are all ready. Saving a preference is not treated as delivery. Provider acceptance, retries, suppression, and dead-letter outcomes are recorded separately, and lock-screen copy remains neutral.
Gifts, receipts, and finance access
Stripe and payment collection are disconnected by owner decision. Payment records remain structurally separate from spiritual-care content. Before any future activation, merchant identity, disclosures, webhooks, receipts, reconciliation, permissions, refund terms, and qualified review must be complete.
Offline data
The shared offline package contains only public reviewed Scripture, a fallback Daily Moment, public journey steps, and emergency phone actions. It contains no private entries, saved contacts, highlights, notes, progress, account data, care requests, payment records, or queued private writes.
Church firewall and care requests
A church connection never grants access to Talk, AI memories, check-ins, journey progress, private prayers, journal entries, privacy settings, or mission-gift records. Church Edition care begins only when you deliberately connect a church, enter a request, review the exact text and selected profile fields, and confirm submission. External caregiver delivery is not claimed unless a provider has accepted it.
Device settings
Theme, contrast, text-size, install dismissal, and service-worker caches stay in your browser. Clearing site data removes them. Uninstalling removes the installed app, but browser-managed site data may remain until cleared.
Review status
Minor privacy, mandatory-reporting representations, jurisdictional differences, final legal identity, accessibility conformance, care and finance retention, charitable language, and production data flows still require qualified external review before public traffic or live payments.