Privacy Policy

This Privacy Policy explains how Godsend ("we," "our," or "us") collects, uses, discloses, and protects your personal information when you use our faith companion service ("Service"), including our mobile application and messaging services.

1. Information We Collect

1.1 Information You Provide

Account Information:

• Name
• Phone number (required for account creation and messaging)
• Messaging preferences (iMessage or SMS)
• Preferred verse delivery time

Profile Information:

• Date of birth
• Gender
• Denomination preference
• Preferred Bible version (NIV, ESV, KJV, etc.)
• Areas of focus or struggles (optional)

Location Information:

• Timezone (for verse delivery timing)

Conversation Data:

• Messages you send to Godsend (our AI faith companion)
• Your reflection history
• Questions and topics you discuss

1.2 Information Collected Automatically

Device Information:

• Device type and operating system
• App version
• Timezone settings
• Push notification token (for delivering notifications to your device)

Usage Data:

• Features used and session duration
• Interaction patterns (anonymized via PostHog)

Technical Data:

• IP address (for rate limiting and security)
• Error logs (for troubleshooting)

1.3 Information from Third Parties

Payment Information:

• Subscription status and purchase history from RevenueCat
• We do NOT store payment card details—all payments are processed by Apple

2. How We Use Your Information

We use your information to:

Provide the Service:

• Generate personalized daily verses and reflections
• Deliver verses at your preferred time via iMessage or SMS
• Enable conversations with Godsend, our AI faith companion
• Process and respond to your questions
• Send push notifications about your verse and subscription

Manage Your Account:

• Verify your phone number
• Process subscriptions and manage entitlements
• Send service-related notifications
• Provide customer support

Improve Our Service:

• Analyze usage patterns (anonymized)
• Improve AI response quality
• Fix bugs and technical issues
• Develop new features
• Generate aggregated, de-identified statistics about service usage

Ensure Security:

• Detect and prevent fraud or abuse
• Enforce rate limits
• Protect against unauthorized access

Legal Compliance:

• Comply with applicable laws and regulations
• Respond to lawful requests from authorities
• Enforce our Terms of Service

3. How We Share Your Information

3.1 Service Providers

We share data with trusted service providers who process data on our behalf:

AI and Content Generation:

• Google (Gemini AI): Processes your profile data, conversation history, and messages to generate personalized reflections and responses. For our paid usage of the Gemini API, Google does not use your prompts or responses to improve its products or train AI models.

Messaging Services:

• Telnyx: Delivers SMS messages and handles phone number verification.
• LoopMessage: Delivers iMessage and SMS messages to Apple devices.

Subscription Management:

• RevenueCat: Manages subscription purchases, entitlements, and renewals.

Infrastructure:

• Supabase: Securely stores your account data with encryption at rest.
• Vercel: Hosts our backend API services.
• Upstash Redis: Provides rate limiting and message deduplication.

Analytics and Monitoring:

• PostHog: Provides anonymous analytics to understand how users interact with the app.
• Sentry: Monitors errors and performance.

3.2 Legal Requirements

We may disclose your information if required by law, court order, or government request.

3.3 Business Transfers

If Godsend is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

3.4 What We Do NOT Do

• We do NOT sell, rent, or trade your personal information to third parties for their marketing purposes.
• We do NOT share your profile or conversation history with other users.
• We do NOT use your data for targeted advertising.

4. Communications and Consent (TCPA)

By providing your phone number and using the Service, you expressly consent to receive automated text messages from Godsend, including:

• Daily verse deliveries at your selected time
• Responses to your messages and questions
• Service-related notifications

Opt-Out: You can stop receiving messages at any time by texting "STOP" to any Godsend message, disabling messages in app Settings, or deleting your account.

Message Rates: Message and data rates from your carrier may apply.

5. Data Security

We implement industry-standard security measures to protect your data:

• Encryption in Transit: All data transmitted uses TLS encryption.
• Encryption at Rest: Stored data is encrypted in our database.
• Access Controls: Strict authentication and authorization for all API endpoints.
• Rate Limiting: Protection against abuse and unauthorized access attempts.

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

6. Data Retention

6.1 Active Accounts

We retain your data for as long as your account is active and as needed to provide the Service.

6.2 Account Deletion

When you delete your account:

• Your profile information is pseudonymized within 30 days
• Your preference data is deleted within 30 days
• Your conversation history is retained but de-identified for up to 7 years

6.3 Legal Retention

We retain a minimal record linking your phone number to your internal subscriber ID for up to 7 years after account deletion for legal compliance and fraud prevention.

7. Your Privacy Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data
• Portability: Request your data in a portable format
• Opt-out: Opt out of certain processing activities

7.1 How to Exercise Your Rights

In the App: Settings → Profile → Delete Account

By Email: Send requests to support@trygodsend.com with "Privacy Request" in the subject line. We will respond within 30 days.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your own, primarily the United States. For transfers from the EEA, UK, or Switzerland, we rely on Standard Contractual Clauses.

9. GDPR Rights (European Economic Area)

If you are in the EEA, you have additional rights under GDPR, including the right to object to processing and lodge complaints with your local data protection authority.

10. California Privacy Rights (CCPA/CPRA)

California residents have additional rights, including the right to know, delete, correct, and opt-out. We do not sell personal information.

11. Children's Privacy

Godsend is NOT intended for children under 13 years of age (or 16 in the EEA). We do not knowingly collect personal information from children.

12. Automated Decision-Making

Our Service uses AI (Google Gemini) to generate reflections and chat responses. This is automated processing but does not constitute automated decision-making with legal effects.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy and updating the "Last Updated" date.

14. Contact Us

For privacy-related questions or to exercise your rights:

Email: support@trygodsend.com

Please include "Privacy Request" in the subject line for faster processing.