FaithlifyThis policy describes exactly what the app does today. If anything changes, we'll update it here and tell you in the app first.
The short version
You sign in with Apple or Google so your plan and progress are saved to your account, on every device where you sign in. Your journal is private to you. It’s encrypted on your device before it leaves it, so only you can read it. What you write in Plan Studio or Ask, and photos of notes you make a plan from, are sent to our AI provider, OpenAI, only after you allow it. There are no ads, and we never sell or share your data for advertising. No church, group leader, friend or parent can see your journal.
What stays on your phone
Everything you do in Faithlify is on your phone first: your name (if you give one), reflections, Victory Notes, your prayer list, completed actions, XP, plan progress, reminders and settings. They are also part of your iPhone backup. When you sign in, your journal is also saved to your account, encrypted on your device before it leaves it. You can delete all of it from the phone in Settings. If you continue without an account (the app offers it after two sign-in attempts that don’t finish), we keep no copy, so we can’t restore it for you.
Your account
After you choose your first plan, you sign in with Apple or Google to save it. Your journal stays private to you: it’s encrypted on your device before it’s uploaded, so only you can read it. Dates, progress, XP and your highlighted verses aren’t encrypted, so your devices can stay in sync. Ask sends your latest reflections (up to seven) only when you tap “What do my reflections say?”, and only for that answer. If a device can’t open your journal, those entries stay locked, and we can’t open them for you. We also keep a few app settings, your theme, light or dark mode and reading voice, so they come with you. We also keep your email address, a user ID, and the name Apple or Google shares with us. We never use your journal for advertising or share it with a church or anyone else. You can sign out anytime. This phone keeps its copy. You can delete your account in Settings, which removes everything we keep for it.
When you build a plan or use Ask
The first time you send what you write in Plan Studio or Ask, Faithlify asks your permission in a short note that links to this policy. Tapping “Continue” is your permission to send what you write to OpenAI, our AI provider, and we don’t ask again. Nothing is sent before that. To withdraw that permission, use “Delete everything” in Settings → Privacy & data: it clears what Faithlify keeps on this phone, and the app asks again before sending anything. Without it, you can still use every reviewed plan, the Bible and prayer.
When you build a plan
What you type is sent to our server and to OpenAI to understand where you are and build the plan. When your plan is built, we keep what you typed with that plan for as long as we keep the plan, so we can check that plans follow what people ask for and keep a record of what was asked and what we built. When the plan is deleted, what you typed goes with it. It’s kept apart from your account, with no name, email, device ID or IP address. Only the people who review plans at Faithlify can read it; it’s never shown to other users or used for advertising. You can turn it off in Settings under “Keep what I write to improve Faithlify.” If what you type shows signs of crisis, nothing is built and nothing is kept. We also keep a general category (for example “grief”) and the finished plan. After human review, a plan the AI built may be added to the free library for others. It never includes what you wrote.
When you make a plan from your notes
If you make a plan from photos of your notes, each photo is sent to our server and to OpenAI only to read its text. The first time you take or choose a photo, Faithlify asks your permission in a short note, apart from the one for what you write. We don’t keep the photos or what’s read from them: the text comes back to your phone, where you can change it before you build your plan. When you build it, that text goes to our server and to OpenAI to make the plan, like what you type, and we don’t keep it, with the plan or anywhere else. If you don’t allow it, or a photo can’t be read that way, your phone reads it and the photo doesn’t leave it. Typing or pasting your notes works like any plan.
When you use Ask
Your messages are sent to our server and to OpenAI to write each answer. So we can check that answers are right and see what people ask about, we keep each question with its answer, a general topic (for example “prayer”), the plan and passage it was about, and a random ID for that conversation, for 12 months. It’s kept apart from your account, with no name, email, device ID or IP address. Only the people who review Ask at Faithlify can read it; it’s never shown to other users or used for advertising. If you tap “What do my reflections say?”, your latest reflections (up to seven) are sent for that one answer and then discarded, and we don’t keep that answer. If a message shows signs of crisis, we keep none of its words. You can turn this off anytime in Settings under “Keep what I write to improve Faithlify,” and we keep only the topic. So that Ask can suggest prayer or talking with real people when you use it a lot, the app also sends a general signal (for example, “used a lot today”), never how many messages or which days. Ask is AI: it can make mistakes, and it isn’t a pastor, counselor or therapist.
Faithlify Plus
Faithlify Plus is a subscription you buy through Apple. Apple handles the payment, and we never see your card or billing details. To unlock Plus, the app sends our server the signed purchase record Apple gives your phone, and Apple tells our server when a subscription renews, ends or is refunded. We keep the subscription’s ID, whether it’s monthly or yearly, its status, when the current period ends, whether it renews, and whether it began with a free trial or an offer, linked to your account if you’re signed in. We use it only to give you Plus and to count subscriptions in totals. If you delete your account, we unlink the subscription from you; it keeps renewing with Apple until you cancel it in your Apple account settings.
If you join a group
Groups are optional and need you to sign in. When you start or join one, the group sees the name you use in Faithlify, when you finish a day of the group’s plan (you can turn that off), and what you post there: what you write about each day, your prayer requests, that you prayed for theirs, your reactions and the encouragement you send. It never sees your journal, actions, XP or streak. If you start a group with a plan made for you in Plan Studio, the group gets that plan (its title, passages, teaching and actions) so everyone can do it; never the words you wrote to ask for it. We keep what you post on our server, linked to your account, only so your group can see it. We also keep which days of the group’s plan you finished, linked to your account, to count how groups do, for example how many people finish a plan together; we only look at it in totals, and it stays if you leave the group until you delete your account. Prayer requests are deleted 30 days after they expire, or 90 days after they’re answered. Before anything is posted, it’s checked for signs of crisis. If you allowed Faithlify to send your writing to AI, it’s also checked by OpenAI’s moderation tools for content that doesn’t belong in a group, like hate, explicit content, ads or selling; we keep nothing from that check, and OpenAI uses it only for that check (see “Who helps us”). If you didn’t, nothing you post goes to OpenAI: our server checks it with its own fixed rules, and a member of the Faithlify team may review a post before your group sees it. Until then, only you see it, marked “In review.” If someone reports a post, the people who review reports at Faithlify see only what was reported. If you leave a group, what you posted there is deleted with you; if you delete your account, everything you posted in groups is deleted. We send a notification to your phone when someone prays for you, encourages you, asks your group for prayer, joins your group or finishes the day’s reading (only if they show when they finish a day). It never shows what anyone wrote.
Your profile and friends
A profile is optional and needs you to sign in. It has a username, a name and, if you add one, a photo. Anyone who searches for your username, opens your profile link, or shares a group with you sees those three things. People can find you by name only if you already share a friend or a group, and you can turn off “Let people find me” so no one finds you by searching. Friends are mutual: someone only becomes your friend when you accept. If you use Add nearby, your phone shares your username (and the group you’re inviting to, if any) with phones close by that have Add nearby open at the same time, over Bluetooth or your local network; nothing is shared once you close it, and your location never leaves your phone. Your friends also see when you became friends, the friends and groups you have in common, and the plan you’re on, unless you turn that off; plans for hard seasons, like grief or recovery, and plans written for you are never shown. If you turn on “Friends see my rank,” your friends see your rank’s name and number on your profile; never your XP. A profile never shows your journal, actions, XP, streak or how many friends you have. Your photo is resized and stripped of its location and camera details on your phone before it’s sent, then, if you allowed Faithlify to send your writing to AI, checked by OpenAI’s moderation tools, which use it only for that check (see “Who helps us”); a photo that can’t be checked isn’t posted. If you didn’t, a member of the Faithlify team reviews the photo before anyone else sees it, and your profile keeps the one you had until then. Photos are stored with a random web address and shown in the app; if someone reports a profile, the people who review reports at Faithlify see its photo, name and username. Your friends can poke you: a notification that says who it’s from and that today’s reading is ready. To skip it once you’ve done the day, when you finish a day your phone sends us the date and your time zone offset, linked to your account; we keep only the latest one. If you’re 13 or 14 and linked to a parent, it also sends your streak that day, which only that parent sees (see “Age and families”). A friend who pokes you never learns whether you did the day, and you can turn pokes off with “Friends can poke me.” We count pokes, and whether a day got done after one, only in totals. Blocking someone ends the friendship and hides you from each other. If you delete your account, your profile, photo, friends, invitations and pokes are deleted.
If you give or get a month of Plus
Giving a month of Plus to a friend is optional and needs you to sign in. Your gift link has a code tied to your account, made the first time you open Give a month of Plus, along with a one-way scrambled version of the random ID described in “Limits and usage counts,” so opening your own link on that phone doesn’t gift you. Anyone who opens your link sees what your profile link shows. An invitation to your profile, or to a group you started, can also carry a month of Plus from you. When someone accepts a gift, the app sends our server the invitation it came from (the gift code, the username or the group code), whether it came from a link, the App Clip or was typed in, and that random ID; on iPhone and iPad it also sends a one-time token from Apple’s DeviceCheck. We keep a one-way scrambled version of that ID, linked to your account if you’re signed in or once you sign in, so each phone and each account gets one gift; it stays if you delete your account, so a phone can’t take a gift twice. We also keep which invitation each gift came from, linked to the account of the person who invited, to apply limits and the thank-you; no one else sees it, and after about a year we remove who invited. We keep a one-way scrambled version of your IP address too, counted by day and deleted after two days, to stop automated abuse. DeviceCheck lets Apple keep one yes-or-no mark for your device that says it already got a gift; it says nothing about who you are, and we don’t keep the token. Each gift is a one-time Apple offer code you redeem with Apple, like any subscription (see “Faithlify Plus”); when your phone sees it redeemed, it tells our server, so a code is never given twice. Whoever invited you gets a note that a friend accepted and sees how many friends did; never who, and never anything you do in Faithlify. We count gifts, opens and redemptions only in totals. If you delete your account, your gift link is deleted and gifts are unlinked from you.
When you send feedback
If you use Send feedback in Settings or answer “How was this plan?” when you finish one, we receive what you tapped and wrote, which plan it was about, and the app version. Nothing else comes with it: not your name, account, journal or notes, and nothing that identifies your phone. We use it only to improve Faithlify, and the stars you give a plan only as an average with everyone else’s, shown with that plan. To prevent abuse we count sends per IP address, scrambled one way and deleted after two days.
If you’re in crisis
Before any AI step, what you write is checked for signs of crisis. If it finds them, Faithlify stops and shows you where to get help right away in your country, such as 988 in the US and Canada or Samaritans in the UK and Ireland. That check keeps none of your words; in Ask, we only count that the help screen was shown.
Limits and usage counts
To prevent abuse, Plan Studio and Ask requests carry a random ID the app creates and your IP address. We keep only one-way scrambled versions of them, grouped by day, for 90 days. That random ID stays on this device even if you delete the app or use “Delete everything,” so those limits keep working. It contains nothing about you, and these limits are needed for Plan Studio and Ask to work.
Anonymous usage
We count how plans are used (for example, how many people finish day three), never who and never what anyone writes. The app also sends simple usage events with a separate random ID: opening the app, reading, starting a plan, finishing a day or a plan (and whether you’re doing it with a group, never which one), how you chose your first plan, opening the app from a reminder, your reminder setting, and whether you have a widget. Once a day, with the first of them, it also sends your country (the one you chose in Settings → Profile or, if you didn’t, the one your phone’s time zone points to, then your App Store region or your phone’s region; never your location) and your phone’s language. With each event, the service that helps us understand usage also records basic details it collects on its own: when the app opens, goes to the background or is updated, your phone model, iOS version, app version, screen size and time zone. They tell us whether Faithlify helps people come back, and who it’s reaching. No name, no text, and nothing is sent before you agree to this policy. We keep these events for about 13 months. You can turn them off in Settings under “Share anonymous usage.”
About you (optional)
In Settings → Profile, or on the screen that asks when you were born after you sign in, you can tell us your gender, and in Settings your birthday if you haven’t signed in. Gender is optional and starts at “Prefer not to say.” You can also confirm the country you live in; it sets your crisis lines and seasons, and leaves your phone only as described here. From your birthday the app works out an age range (for example 25–34); only that range travels, never the date. If you answer, they travel with the anonymous usage above, with the same random ID, and are never linked to your email, your account or your name. We only look at them in totals of 10 people or more, for example how many people in their twenties come back after a week. We never send them to the service that helps us understand app usage. If you tell us you’re under 18, we keep nothing about your age and the app stops sending usage information.
Emails from us
When you sign in, the screen that asks when you were born has a switch for occasional news from Faithlify, at most twice a month, with your account’s email; it only shows if you’re 18 or older. If you live in the United States, Puerto Rico or the U.S. Virgin Islands, the switch starts on, with a note that says so, and if you leave it on we add your account’s email without a confirmation email. Everywhere else it’s off until you turn it on. You can also turn on “Email me updates” in Settings → Profile, or join the list on our website; then we send one email to confirm it’s you, and nothing else until you tap its link. We keep your email address, what you asked for (for example the launch note or occasional news), when and where you signed up, and the exact words and sender details you saw, which the law asks us to keep as proof of your consent or of the note you saw. If you sign up in the app, we also keep your country (worked out the same way) and your phone’s language. If you turned emails on yourself, the app also tells us once a week whether you opened it that week, never how often or what you did, so we don’t send you what you already have. None of this is linked to your journal, your plans, what you write in the app, your age or gender, or the anonymous usage above. Every email has a one-tap unsubscribe, and turning the switch off in Settings unsubscribes you right away. After you unsubscribe, or if you ask us to erase your data, we keep only a one-way scrambled version of your email, so we never write to you again, and the record of your consent for three years. Addresses that never confirm are deleted after 30 days. If you delete your account, we also delete any subscription with the same email. A service provider sends the emails for us. Our emails don’t track whether you open them; when you tap a link in one, we count one more tap for that link, never who tapped it. If an email bounces or is marked as spam, we stop writing to that address.
Notifications
Faithlify asks to send notifications when you first open it: your daily reminder at the time you pick, and news from your friends and groups. News about Faithlify itself, at most once a week, is separate and off until you turn it on: we offer it once when you finish a plan, and it’s in Settings → Reminders. You can turn everything off in iOS Settings. For the news we keep your phone’s notification address, which copy of the app it is, your country (worked out as above) and, if iOS shares it, your language; never your account or your name. When you tap one, we count one more tap for that message, never who tapped it.
Who helps us
A few trusted service providers help us run Faithlify. Each provider gets only what it needs for its job, may use it only to provide its service to us, and is bound to protect it at least as this policy does. Supabase hosts our server, database, sign-in and profile photos, and receives everything we keep, as described above. OpenAI writes plans and Ask answers and, only if you gave Faithlify permission to send your writing to AI, checks group posts, profile photos and names; it receives what you write for a plan or in Ask, photos of notes you make a plan from, and the posts and photos it checks, only with that permission. Apple handles sign-in, payments, gift codes and their device check, notifications and your age range, and receives what it needs for each. Google signs you in, if you choose it, and receives what it needs to sign you in. Our analytics provider counts the anonymous usage described above, only if you allow it. Our email provider sends our emails and receives your email address and the email. Our web host hosts our website and receives standard web request data. OpenAI’s API does not use what we send to train its models by default, and may keep it for a limited time for abuse monitoring. We don’t use advertising tools, and we never sell your data.
Our website
Our website uses no cookies or ads. The only thing it counts is taps on links in our emails, as totals for each email and link, never who. If you join the waitlist or ask for news there, what’s described in “Emails from us” applies. If you came from one of our links (for example from TikTok), we note which link when you sign up; your browser remembers it only in that tab.
Age and families
Before you sign in, Faithlify asks the year you were born (and, if you turn 13 this year, the month and day). That answer stays on this device, even if you delete the app or use “Delete everything,” and can’t be changed there; it never leaves your phone and only decides whether an account is offered. When you create an account, we ask when you were born. We keep the date, linked to your account, to apply the rules for your age; no one else sees it, and it never goes to the services that help us understand app usage. Accounts made before October 12, 2026 may have only the month and year. Accounts are for people 13 and older: if you tell us you’re younger, no account is offered, or the account is deleted, and Faithlify keeps working on your phone without it, with every reviewed plan, the Bible and prayer, but without Ask, plans made for you or groups, so nothing you write is sent to our AI provider. Where the law requires it, Faithlify also asks Apple for your age range (for example “13 to 14”), which you or your parent can choose to share; it stays on your phone and only decides what the app shows there. People under 18 can’t be found by name, and people under 15 can’t be found by searching at all. Under 15, Together needs a parent or guardian to link the account with a code from their own account. That parent sees whether their child has been active and their streak, sees their groups and friends, approves new friends and groups, and decides whether Together and a profile photo are on. A parent never reads what their child writes in groups. From 15, a linked parent can still see groups and friends and turn Together off. No parent ever sees their child’s journal, actions or posts. A child always sees what their parent sees, in Together and in Settings, and who their account is linked to, with that person’s username, and can undo it with “Not my parent,” which also tells the people who review reports at Faithlify. One account can link up to eight children.
Changes and questions
If we ever change what leaves your phone, we’ll update this policy and tell you in the app before it applies to you. To see or erase what we hold about your email, write to support@faithlify.app. Send any other question from Settings → Send feedback.