PRIVACY POLICY
Last updated: July 2026
Devotion is a Christian faith companion that provides Scripture-grounded guidance through personalised conversations. Your privacy matters to us. This policy explains what data we collect, how we use it, and your rights.
Your first name (optional, for personalisation). Faith background and denomination preferences. Reasons for using the app. Bible translation and focus preferences. Prayer journal entries. Chat messages you send. Your approximate location, only if you use Find a Church, to show nearby congregations.
Conversation responses from your spiritual guide. User memory: a summary of key themes from your past conversations (e.g., "struggling with anxiety", "praying for a family member"). This never includes names of third parties, medical details, financial information, or intimate details. Safety flags: if the guide detects crisis-level distress, a temporary flag is stored to provide heightened sensitivity in future conversations. These flags expire automatically after 30 days. Usage analytics (message counts, feature usage, streaks). Feedback on responses (thumbs up/down and optional text reports).
Your preferences and onboarding choices. Chat history and conversation sessions. Prayer journal entries. User memory summaries. Saved verses. Activity and streak data. When you are signed in, this data is also synced to your account on our servers so it can be restored if you switch phones or reinstall the app. The core text of your chat messages, prayers, and companion-memory summaries is stored encrypted on our servers.
Chat messages: your messages are sent to our backend server and processed to generate responses. Conversations are stored encrypted in your account, so your history follows you across devices, until you delete them or delete your account. Safety flags: stored per user ID on our server and automatically deleted after 30 days. Feedback reports: thumbs-down feedback and optional text reports are stored on our server so we can review and improve response quality.
Devotion is operated from Canada. The servers, database, and file storage that process and hold your data are located in the United States, provided by our infrastructure partners (Railway, Amazon Web Services, and Cloudflare).
To generate personalised, Scripture-grounded responses. To remember context across conversations (user memory). To detect crisis situations and provide appropriate resources. To improve the quality and safety of responses. We do not sell your data to third parties. We do not use your data for advertising.
The App signs you into a Firebase account (anonymous at first; you can link it to your email, Google, or Apple sign-in). Its identifier associates your data with your account across app launches and devices. It is not shared with third parties for advertising purposes.
We rely on the following third-party service providers, each governed by its own privacy policy. Anthropic and OpenAI: process chat messages, sermon content, and prayer text to generate AI responses. Groq: transcribes uploaded sermon audio and video into text, for churches that use the sermon toolkit. Firebase (Google): authentication, push notification delivery (Firebase Cloud Messaging), and in-app analytics (which features are used; never the content of your messages, prayers, or journal). Stripe: billing for church plans, handled on our website. Cloudflare R2: storage of uploaded media such as sermon audio, images, and photos. Amazon Web Services (Amazon SES): delivery of transactional and notification emails. Sentry: error and crash monitoring. Google Places and YouTube APIs: church directory lookup and sermon content import. RevenueCat: mobile subscription management. PostHog: product analytics and conversion measurement to understand how our website is used, helping us improve it (hosted in the United States; website only, not the app). We do not sell your personal data, and we do not share it with any third parties other than the service providers listed above.
Delete your data: Reset Companion Memory in Settings erases the guide's memory of you from your device and our servers. You can delete individual chat sessions and prayer journal entries within the app. Export your data: Settings > Your Data > Export All My Data gives you everything we store about you as a file, free. Formatted prayer journal and saved-verses exports are available for Pro subscribers. Access your data: All data stored on your device is accessible within the app. Right to be forgotten: Settings > Your Data > Delete Account & Data permanently erases your account and all server-side data, no email required. You can also contact us at any time.
Devotion is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us so we can take appropriate action.
Local data persists until you delete it or uninstall the app. Synced data (conversations, prayers, memory, progress) is retained in your account until you delete it in the app or delete your account, which erases all server-side data, including your uploaded photos. Safety flags expire and are deleted after 30 days. Feedback reports are retained for quality improvement purposes. Two narrow exceptions: encrypted database backups are kept for up to 30 days for disaster recovery before rolling off, and completed church donation records are retained in anonymised form (with your name and account link removed) for the church's tax and accounting records.
Devotion is available worldwide. Regardless of where you access the App, you have the right to know what personal data we collect and how it is used, the right to request deletion of your personal data, the right to opt out of the sale of personal data (we do not sell your data), and the right to non-discrimination for exercising your privacy rights. If you are in the European Economic Area (EEA), you also have the right to data portability and the right to lodge a complaint with your local data protection authority. If you are a California resident, you have additional rights under the CCPA. To exercise any of these rights, contact us at the email below.
We may update this privacy policy from time to time. When we make significant changes, we will notify you through the App or by updating the "Last updated" date at the top of this page. Continued use of the App after changes are posted constitutes acceptance of the revised policy.
If you have questions about this privacy policy or your data, contact us at support@holydevotion.app