Privacy Policy

1. Information We Collect

We collect strictly the minimum information required to deliver daily affirmations, cross-device synchronization, and an uninterrupted devotional experience:

• Account Information: You sign in with Google or Apple. We receive your email address — which, with Apple, may be a private relay address if you choose to hide yours — and your name as your provider shares it (Apple shares it only the first time you sign in), together with an account identifier from our sign-in service. We never see or store a password: your password stays with Google or Apple.
• Your Private Journal: Journal entries, reflection prompts, theme tags, and entry timestamps are stored securely in your account so they sync across your devices. Your journal is strictly private: it is never viewed by other users, never used for advertising, and never processed for algorithmic profiling.
• Practice & Streak History: Your streak is kept by showing up — a day counts once you have opened Edifice on it. So when you open the app, open a confession, or mark a practice step complete, we record a timestamp, the ID of the item involved, and the calendar date in your device’s time zone, on our servers. That is what keeps your streak correct across your devices and across reinstalls. We do not record whether or what you actually said aloud; see section 2.
• Saved Affirmations & Goals: Your bookmarked affirmations and the spiritual focus goals you select during onboarding are saved to personalize your daily practice.
• Member-Authored Stories: If you write a story and explicitly choose to publish it, the story and your first name become visible to others who possess the link. Publishing is entirely optional; uncompleted drafts remain private to you.
• Subscription Status: If you purchase an optional Edifice Glory subscription, payments are processed directly by the Google Play Store or Apple App Store. We receive only cryptographic transaction tokens and status indicators to unlock your subscription across your devices. We never receive or store credit card numbers or billing addresses.
• Preferences: Your selected narration voice preference and interface language.
• Feedback You Send Us: If you use Settings → Send feedback, we store the message you write, the category you chose for it, and the app version and platform you are running, on our servers. The message is free text, so whatever you put in it — your name, a description of your circumstances, another person — is stored as you wrote it; please share only what you are comfortable for us to read. It is linked to your account, which is what allows us to follow up with you if we decide to, and what ensures it is erased when your account is. Messages are limited to 1,000 characters. They are read only by the Edifice team, are never published, never shown to other members, and are never used for advertising or profiling. You do not have to use the form: you can email us instead, at the address in section 10.
• Usage, Diagnostics & Crash Data: The Android and iPhone apps send usage events (for example, which features you open and when you complete a step — identified by the content item, never by anything you wrote), crash reports (what failed, your device model, operating-system and app version, and the actions just before the crash), and performance measurements (app start time, how long network requests take, memory and processor use) to the analytics and crash-reporting providers named in section 5. When you buy a subscription, the product and its price are recorded too. This data uses random installation identifiers and is not linked to your name, email address, or account, and your journal, stories, and feedback are never included. Our analytics and performance providers also derive an approximate, city- or country-level location from your IP address. The web app sends none of this.

2. What We Deliberately Do NOT Collect

To protect your privacy and ensure compliance with Google Play and App Store standards:

• No Voice or Audio Recordings: Spoken confession practices are self-confirmed. The app does not record, capture, or transmit microphone audio.
• No Precise Location: We never ask for location permission or use GPS. The only location involved is the approximate, city- or country-level estimate our analytics and performance providers derive from your IP address (see section 1).
• No Contacts or Address Book: We never access your contacts.
• No Photos or Files: We never read or upload your photos or files. When you choose to save a share card, the app adds that one image to your photo library and nothing more.
• No Advertising Identifiers: We do not collect Google Advertising ID (AAID) or IDFA.
• No Passwords: You sign in with Google or Apple. Edifice never asks for, sees, or stores a password.

3. Security & Encryption

We implement rigorous technical safeguards to protect your personal information:

• Transit Encryption: Everything the Edifice apps send — to our servers and to the providers named in section 5 — is encrypted in transit using HTTPS (TLS). Cleartext network traffic is disabled.
• Device-Level Security: Session authentication tokens are stored securely using platform hardware cryptography — the Android Keystore on Android devices and the iOS Keychain on Apple devices. In the web app, sign-in tokens are kept in your browser’s local storage. Android may include app data in your own device backup, but sign-in tokens cannot be restored from one.
• Server Architecture: Our database is access-controlled, and security-relevant account events are recorded in an audit log.

4. How We Use Information (Legal Bases)

5. Third-Party Infrastructure & Processors

We do not share your data with third parties for marketing or advertising. The providers below process data on our behalf, to run the service:

• Hosting & Compute: Managed backend application servers running on secure cloud infrastructure (Render).
• Database: Managed PostgreSQL hosting with encryption at rest (Neon).
• Payment Gateways: Google Play Billing (Google LLC) and In-App Purchase (Apple Inc.), which process payments under their respective privacy policies.
• Sign-in: Firebase Authentication (Google LLC) verifies your Google or Apple sign-in and holds your email address, name, and an account identifier. Google and Apple handle the sign-in itself under their own privacy policies.
• Analytics, Crash Reporting & Performance: Google Analytics for Firebase, Firebase Crashlytics, and Firebase Performance Monitoring (Google LLC), and GameAnalytics. They receive the usage, crash, and performance data described in section 1, identified by random installation identifiers rather than by your account.

6. Data Retention & Account Deletion

You maintain full control over your data. You may delete individual journal entries at any time directly in the app.

When you request complete account deletion (available in the app via Settings → Delete Account or via our Web Account Deletion Page):

1. Immediate Invalidation: Your account is immediately deactivated and all active authentication sessions are revoked across all devices.
2. 7-Day Safety Cool-off: To protect members against accidental deletion or unauthorized account takeover, data is scheduled for permanent purge after an approximate 7-day window. Signing in during this window cancels the pending deletion.
3. Permanent Erasure: Following the cool-off, your account, profile, private journal entries, streak records, goals, saved content, and any feedback you sent us through the app are permanently and irreversibly expunged from all production databases. Feedback is deleted rather than kept in anonymised form, because a message you wrote is your words whether or not your name is still attached to it.

What remains after deletion. A deletion record that cannot be linked back to you (a salted, one-way hash of your former account ID, and the dates); purchase receipts with the link to your account removed, kept for billing disputes (Apple or Google may still connect their own transaction IDs to you); and security audit records that refer to an account ID which no longer exists. Database backups containing earlier data expire on our provider’s schedule. Usage, crash, and performance data held by our analytics providers is not linked to your account, so account deletion does not remove it; it expires under those providers’ retention settings.

Stories. Deleting a published story removes it from public view at once; the private record is kept until your account is deleted.

7. Your Privacy Rights

Under regulations including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA), you have the right to access, rectify, port, or erase your personal data. You can perform deletion directly in the app or contact our privacy desk at supernaturalbrian@gmail.com. The app has no self-serve data export; requests for a copy of your data are handled by email.

8. Children's Privacy

Edifice is not directed toward children under 13 years of age. We do not knowingly collect personal information from children under 13. If we discover that a user under 13 has provided personal data, we will promptly delete it.

9. Changes to This Policy

If we update this Privacy Policy, the revised version will be published here with an updated effective date. Material changes will also be notified within the Edifice app.

10. Contact Us

If you have any questions, inquiries, or privacy requests regarding this policy, please contact our support team:

Edifice Privacy Desk
Email: supernaturalbrian@gmail.com
Website: https://edificeapp.org