Privacy Policy

1. Data We Collect

We collect only what we need to operate the Service:

• Account data — email address and authentication identifiers (Google, Sign in with Apple, or email/password), and optional display name. Sign in with Apple may provide a relay email instead of your real address.
• Journal content — prayers, devotionals, and related text you create or save
• Sermon content — audio you record or upload, notes you take, URLs you submit for transcript processing, and generated transcripts/notes
• AI outputs — Real Talk devotionals, sermon notes, transcripts, and listen-back audio generated when you use those features
• Usage and plan data — subscription plan (Grace, Daily, Faithful, or Unfiltered), whether the plan was granted, purchased on the website, or purchased on iPhone, monthly usage meters (e.g. sermon processing time, Real Talk counts, voice plays), and similar operational metrics needed for quotas and support
• Purchase identifiers— when you subscribe on the website, a Stripe customer and subscription identifier; when you subscribe on iPhone, Apple's original transaction identifier and product identifier; when you subscribe on Android, Google Play purchase token and product / base-plan identifiers. We do not store full card numbers.
• Technical data — basic logs and device/browser information typical of web and native applications (e.g. for security, debugging, and performance)

2. How We Use Your Data

• Provide, secure, and improve the Service (including authentication and storage)
• Process content you submit for features you use (e.g. AI Real Talk, transcription, sermon notes, text-to-speech)
• Enforce plan limits and show usage in your account
• Enable features you choose, such as public share links (anyone with the link can view the shared entry until it expires or you revoke it)
• Respond to support and legal requests where required

We do not sell your personal information. We do not use your private journal content for third-party advertising. We do not use your content to train our own foundation models; third-party AI providers process content only as needed to return results for the features you use, subject to their terms and policies.

3. Third-Party Services

We use service providers to operate the app. They process data only as needed for their role:

AI provider selection. Real Talk devotionals are routed to xAI Grok or Google Gemini, selected by our server configuration. Sermon notes always use xAI Grok. Only the active provider for that feature processes the relevant text; we do not send the same request to both.

• Supabase — authentication, database, and storage
• xAI (Grok) — sermon notes, speech-to-text, text-to-speech, and Real Talk when xAI is the active Real Talk provider. Your prayer text, sermon audio/transcripts, and (for listen-back) devotional text are sent to xAI only for the features you use.
• Google Gemini — alternative model for Real Talk only, when configured as the active provider. In that case your prayer text is sent to Google to generate the devotional. Gemini is not used for sermon notes, speech-to-text, or text-to-speech.
• Supadata — optional YouTube/Facebook transcript retrieval when you paste a supported video URL
• Railway & Vercel — application hosting
• Vercel Web Analytics — on our website only, not in our iPhone or Android apps. It is cookieless and collects aggregated page views, referrer, country, and device/browser type, with no cross-site tracking.
• Stripe — website checkout and customer portal for Daily, Faithful, and Unfiltered when you subscribe in a browser. Stripe processes card details; we store Stripe customer and subscription identifiers, not full card numbers.
• Apple— Sign in with Apple, and App Store In-App Purchase on the iPhone app. Apple processes the payment with your Apple ID. We receive a signed transaction so we can apply the matching plan to your Unfiltered Grace account, including Apple's original transaction identifier and product identifier. Apple's privacy policy applies to data Apple collects for sign-in and purchases. Family Sharing is not enabled for these subscriptions.
• iPhone app — the App Store app presents the same Service. Paid plans on iPhone are sold through Apple In-App Purchase, not through Stripe Checkout inside the app. Restore Purchases re-applies an existing Apple subscription to the signed-in Unfiltered Grace account.
• Android app— the Play-distributed app presents this Service. Paid plans on Android are sold through Google Play Billing (not through Stripe Checkout inside the app). We receive a verified purchase token so we can apply the matching plan to your Unfiltered Grace account, including Google's purchase token and product / base-plan identifiers. Google's privacy policy applies to data Google collects for Play purchases. Website Stripe Checkout remains available in a regular browser (Chrome) outside the Play shell.

Text-to-speech authorization.Audio generated for the "Listen" / Real Talk playback control on devotionals is delivered from our servers for authorized sessions only. Each listen request uses a short-lived signed token derived from your authenticated session; the token expires on its own and is not reused outside the listen request.

4. Data Retention

Journal entries and account data are retained until you delete them or we delete the account at your request (including via in-app account deletion) or as required for legal/security reasons. Temporary audio and processing artifacts are kept only as long as needed for transcription and notes generation, then removed according to our processing pipeline. Usage metrics may be retained for the current and prior billing periods for quotas, abuse prevention, and operational reporting.

5. Security

We use industry-standard measures appropriate to a web application (including encrypted transport, authenticated APIs, and access controls). No method of transmission or storage is 100% secure; please use a strong unique password and protect your devices.

6. Your Rights and Choices

• Edit or delete individual journal entries in the app
• Update profile information (e.g. display name) in Edit profile
• Revoke share links you created
• Manage or cancel a website subscription from Usage & billing → Manage billing (Stripe Customer Portal)
• Manage or cancel an iPhone subscription in iPhone Settings → [your name] → Subscriptions, or Restore Purchases in Usage & billing
• Manage or cancel an Android / Google Play subscription in Google Play → Payments & subscriptions → Subscriptions, or Restore Purchases in Usage & billing on Android
• Delete your account and data in the Service: Avatar → Edit profile → Delete account → type DELETE → Permanently delete. You may also request deletion by contacting us (see Contact). We will process reasonable requests subject to legal retention requirements. Deleting the Unfiltered Grace account does not automatically cancel an Apple, Google Play, or Stripe subscription; cancel those where you subscribed.

Depending on where you live, you may have additional rights under applicable privacy laws (access, correction, deletion, portability, etc.). Contact us to exercise those rights.

7. Children

The Service is not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children under that age. If you believe we have done so, contact us and we will take appropriate steps to delete it.

8. International Processing

We and our providers may process data in the United States and other countries where infrastructure is located. By using the Service, you understand that your information may be transferred to and processed in those locations.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will revise the "Last updated" date and, for material changes, provide additional notice when appropriate. Continued use of the Service after an update means you acknowledge the revised Policy.

10. Contact

For privacy questions or data deletion requests: info@unfiltered-grace.com. For Terms of Service questions: info@unfiltered-grace.com.