Privacy Policy

You can read every devotional without an account or any personal information. We collect data only when you choose to use a feature that needs it.

• Account: email, first name, last name, username, and a securely hashed password, or your Google account identifier if you sign in with Google. Used to run your account.
• Favorites: the devotionals you save. They are private, have no public count, and are never used for advertising or targeting. Because reading history can reveal religious beliefs, we treat favorites as sensitive and collect nothing beyond what is needed.
• Comments: the text you submit, its date, and your username. Only your username is shown publicly, never your name or email.
• Newsletter: your email, language, cadence, time zone, and delivery window, plus delivery status such as bounces and unsubscribes. We do not track email opens by default.
• Billing: your subscription status and PayPal reference numbers. Payment is handled by PayPal; we never receive or store your card details.
• Messages you send us through the contact page.

Comments are checked by OpenAI models for moderation before they appear. Only the comment text is sent for this purpose, and the result is used solely to decide whether to publish it. Devotionals themselves are generated without any reader data.

We use privacy-friendly analytics to understand overall usage. They do not track you across other websites and are not used for advertising.

If you react to a devotional, your choice is remembered in your browser’s local storage on that device, not in a cookie, and the server keeps only anonymous total counts. Signing in uses a necessary session cookie.

We rely on a small number of providers that process data on our behalf. Some are located outside your country, so your data may be transferred internationally with safeguards required by applicable law.

• Railway: hosting and database.
• PayPal: subscription payments.
• Resend: email delivery.
• OpenAI: AI processing, including comment moderation.
• Sentry: error monitoring, configured to scrub personal data from error reports.

We keep personal data only as long as needed for the purpose it was collected. When you delete your account, we remove your identity data and favorites and anonymize your public comments. Records we are legally required to keep, such as billing and consent evidence, are retained only as long as the law requires. Specific retention periods will be confirmed during legal review.

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, to object to or restrict certain processing, and to complain to a data protection authority. You can delete your account in your settings or send a privacy request through the contact page.

The service is not directed at children, and we do not knowingly collect personal data from children below the minimum age required in their country to create an account. If you believe a child has given us personal data, please contact us so we can remove it.

For privacy questions or requests, choose the privacy request category on the contact page or write to [email protected]. This policy is governed by the laws of [jurisdiction], pending legal review, and we will note the date of any material change at the top of this page.