Privacy Policy

Your spiritual journey is deeply personal. We're committed to protecting your testimonies and challenges with the highest standards of privacy and security.

Your Data is Protected

Your testimonies and challenges are encrypted at rest and restricted to your account. We don't access your personal content as part of normal operation.

Encrypted & Access-Controlled

• Testimony and challenge content is encrypted in transit and at rest
• Only your account can access your testimonies and challenges through the app
• Content is decrypted only to serve your requests or power features you use
• Secure authentication protects your account

Data Storage

• Industry-standard cloud security (Back4App/Parse)
• Automatic backups with encryption
• GDPR and privacy law compliant
• You own your data completely

No Data Mining

• We don't sell or share your data
• No advertising and no cross-site tracking
• Anonymous error reporting only — never your content
• Minimal data collection

Your Control

• Export your data anytime
• Delete your account and data
• Control notification preferences
• Update privacy settings

What We Collect

Account Information

Email address and password for secure authentication. We never share your email with third parties.

Your Content

Testimonies, challenges, and related data that you create. This content is private and encrypted.

Error Diagnostics

When something goes wrong, we log privacy-limited error reports (the type and stack, a page pattern such as /testimonies/[id], and a status code) to help us fix bugs. Error messages, breadcrumbs, page URLs, and journal content are removed before a report is sent. When you are signed in, a random identifier lets us count how many people hit the same crash; it is not your email or account ID.

How We Protect Your Data

Encryption

All data is encrypted in transit (HTTPS). At rest, your testimony and challenge content and your reminder phone number are additionally encrypted using industry-standard AES-256 encryption in our database. Other account data, such as your email address, is protected by access controls but is not separately encrypted at rest.

Access Controls

Database-level rules mean that when you query testimonies or challenges through the app, only records belonging to your own account are returned. Your content is decrypted on our server only to serve your own requests or to power features you use, such as AI verse suggestions — this is a matter of access control and internal policy, not a technical guarantee that content can never be viewed server-side.

Secure Infrastructure

We use Back4App/Parse, a secure cloud platform with enterprise-grade security, regular security audits, and compliance with privacy regulations.

Your Rights

Access Your Data

You can view, edit, and export all your data at any time through your account settings.

Delete Your Data

You can delete individual testimonies, challenges, or your entire account. Deleted data is permanently removed from our systems.

Control Notifications

You can enable or disable email and SMS reminders at any time through your reminder settings.

Turn Off AI

You can turn off AI features at any time in your privacy settings. With them off, nothing you write is sent to OpenAI — no verse suggestions, reflection prompts, follow-up questions, rewrites, or related-testimony matching. You can still write, save, and edit everything as normal, and add Scripture yourself.

Third-Party Services

Back4App/Parse

Our secure cloud database provider. They process your data only as directed by us and maintain strict security standards.

OpenAI (AI Features)

For Bible verse suggestions, follow-up questions, and testimony rewrites, we send the full title and text of the relevant testimony or challenge to OpenAI so it can generate a response. OpenAI is the only third party your testimony and challenge content is sent to, and only for the purpose of generating that response. You can turn AI off entirely in your privacy settings; while it is off, nothing you write is sent to OpenAI for any feature.

Email/SMS Services

For reminders, we use secure email and SMS services. Your content is only included in messages you've chosen to receive.

Sentry (Error Tracking)

We use Sentry only to receive error reports from the website and mobile app. It never receives your testimonies, challenges, email, phone number, page URLs, error messages, or breadcrumbs. Reports retain the error type and stack, the route pattern (for example /testimonies/[id]), a status code, and (when you are signed in) a random identifier so we can tell how many people hit the same crash. That identifier is not your email or account ID. Session recording, screenshots, and content capture are turned off.

Important Disclaimers

Not a Substitute for Professional Support

Grace Journal is a personal reflection tool designed to help you remember and rehearse God's goodness in your life. It is not intended to replace the role of professional counsellors, licensed therapists, pastors, or other qualified professionals. If you are experiencing a crisis, emotional distress, or need spiritual guidance, we encourage you to seek support from a trusted pastor, counsellor, or mental health professional.

AI-Powered Features

Grace Journal uses AI to suggest relevant Bible verses and connect your testimonies with challenges. While we strive for accuracy, AI can sometimes get things wrong — verse references, text, or relevance explanations may occasionally be inaccurate or incomplete. We encourage you to always verify suggested Scripture with a trusted Bible translation and to use your own discernment.

Questions About Privacy?

We're committed to transparency about how we handle your data. If you have any questions about our privacy practices, please contact us.

Last updated: 8/23/2026