Privacy Policy

1. Introduction

This Privacy Policy is designed to help you understand how FaithGPT AI Inc. collects, uses, shares, and protects your personal information when you interact with our Service. We take your privacy seriously and are committed to handling your data responsibly and transparently.

By accessing or using our Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our policies and practices, please do not use our Service. This Privacy Policy may change from time to time. Your continued use of the Service after we make changes is deemed acceptance of those changes.

2. Information We Collect

We collect several types of information from and about users of our Service:

2.1 Account Information

• Registration Data: Name, email address, and authentication credentials
• Profile Information: Profile pictures, biographical information, display name, and account preferences
• Authentication Data: Single sign-on information if you connect through third-party authentication providers

2.2 Conversation and Content Data

• Chat Messages: Messages you send to and receive from our AI assistants
• Prayers and Devotionals: Prayers you write, prayer requests, and devotional content
• Bible Study Data: Scripture notes, bookmarks, highlights, and study progress
• User Memories: Information you share about yourself that our AI learns to personalize your experience (faith background, preferences, personal details)
• Images and Media: Images you upload or generate through the Service
• Audio Data: Voice recordings if you use speech-to-text features

2.3 Payment Information

• Subscription Data: Subscription plan, billing cycle, and subscription status
• Transaction Records: Purchase history, credit purchases, and payment amounts
• Payment Processing: Payment processing on our website is handled by Stripe, and on our mobile applications by RevenueCat (which integrates with Apple App Store and Google Play Store). We do not store complete credit card numbers on our servers. Please review Stripe's Privacy Policy and RevenueCat's Privacy Policy for details on how they handle your payment data.

2.4 Technical and Usage Information

• Device Information: Device type, operating system, browser type, unique device identifiers
• Log Data: IP address, access times, pages viewed, links clicked, and referring URLs
• Usage Analytics: Features used, session duration, interaction patterns, and error logs
• Location Data: General geographic location based on IP address (country, region, city)

2.5 Cookies and Tracking Technologies

We use cookies, web beacons, and similar tracking technologies to collect information about your browsing activities. For complete details, please see our Cookie Policy.

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 Service Delivery

• Providing, maintaining, and improving our AI-powered faith assistance features
• Processing your conversations and generating personalized AI responses
• Managing your account, subscriptions, and credits
• Enabling Bible study, prayer journaling, and devotional features
• Generating images, audio, and other media content you request

3.2 Personalization

• Learning your preferences and interests to provide personalized experiences
• Generating personalized daily devotionals and content recommendations
• Remembering your faith background and spiritual journey to provide contextually relevant responses

3.3 Communications

• Sending transactional emails (account confirmations, password resets, receipts)
• Delivering product updates, newsletters, and promotional content (with your consent)
• Sending push notifications about prayers, devotionals, and reminders (if enabled)
• Responding to your inquiries and support requests

3.4 Safety and Security

• Detecting, preventing, and addressing fraud, abuse, security risks, and technical issues
• Content moderation to maintain a safe and respectful environment
• Enforcing our Terms of Service and other policies
• Complying with legal obligations and protecting our legal rights

3.5 Analytics and Improvement

• Analyzing usage patterns to improve our Service and user experience
• Conducting research and development for new features
• Generating aggregated, anonymized statistics about Service usage

3.6 AI Model Training

We do not train our AI models on your user-generated content. Your conversations, prayers, Bible study notes, and other personal content are not used to train or improve AI models. We only use your data to provide the Service to you and as otherwise described in this Privacy Policy.

4. Data Sharing with Third-Party AI Providers

FaithGPT uses third-party artificial intelligence services to power our conversational AI features. When you send messages, the content is transmitted to these providers for processing:

• Google (Gemini API): Primary AI provider for conversations and content generation. Google Privacy Policy
• OpenAI: AI processing for certain features. OpenAI Privacy Policy
• Anthropic: AI assistant capabilities. Anthropic Privacy Policy

Data shared with these providers includes:

• Your message content and conversation history
• Images you upload for analysis (if using vision features)
• Context about your preferences and memories (to personalize responses)
• System instructions that define how the AI should respond

These providers process data according to their own privacy policies and data processing agreements we have in place. Data may be processed in the United States and other countries where these providers operate.

5. Other Third-Party Service Providers

In addition to AI providers, we work with other third parties to deliver our Service:

• Convex: Backend database and real-time data infrastructure
• Clerk: Authentication and user management
• Stripe: Payment processing (web)
• RevenueCat: Payment processing and subscription management (mobile apps)
• Resend: Transactional email delivery
• ElevenLabs: Speech-to-text transcription and text-to-speech
• Fal.ai: Image generation and video processing
• Exa: Web search functionality
• Sentry: Error monitoring and performance tracking

These service providers are bound by contractual obligations to keep your information confidential and use it only for the purposes for which we disclose it to them.

6. Other Sharing and Disclosure

We do not sell your personal information. Beyond service providers described above, we may share your information in the following circumstances:

• Legal Requirements: When required by law, subpoena, court order, or other legal process
• Protection of Rights: To protect the rights, property, or safety of FaithGPT AI Inc., our users, or the public
• Business Transfers: In connection with a merger, acquisition, bankruptcy, or sale of all or a portion of our assets
• With Your Consent: When you have given us explicit consent to share
• Aggregated Data: We may share aggregated, anonymized data that cannot identify you

7. International Data Transfers

FaithGPT AI Inc. is headquartered in British Columbia, Canada. Your personal information may be transferred to, stored, and processed in Canada, the United States, and other countries where our service providers operate.

When we transfer personal data from the European Economic Area (EEA), United Kingdom, or Switzerland, we use appropriate safeguards such as Standard Contractual Clauses approved by the European Commission, or we transfer to countries that have been deemed to provide an adequate level of data protection.

By using our Service, you consent to the transfer of your information to Canada and other countries that may have different data protection rules than your country.

8. Data Retention

We retain your personal information for as long as necessary to provide our Service and fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Retention periods vary based on the type of data:

• Account Data: Retained while your account is active and for a reasonable period thereafter
• Conversation Data: Retained to provide chat history functionality; you may delete individual conversations
• Payment Records: Retained as required for tax, legal, and accounting purposes (typically 7 years)
• Analytics Data: Retained in aggregated, anonymized form for service improvement
• Security Logs: Retained for security and fraud prevention purposes

When you delete your account, we will delete or anonymize your personal information within 90 days, except where retention is required for legal, tax, or security purposes.

9. Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including:

• Encryption of data in transit using TLS/SSL
• Secure authentication mechanisms
• Regular security assessments and monitoring
• Access controls and authentication requirements for our systems
• Employee training on data protection

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.

10. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

10.1 Rights for All Users

• Access: Request access to the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Export: Request a copy of your data in a portable format
• Opt-Out: Opt out of marketing communications at any time

10.2 Additional Rights (EEA, UK, and Similar Jurisdictions)

• Restriction: Request restriction of processing of your personal information
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent at any time where processing is based on consent
• Lodge Complaint: Lodge a complaint with your local data protection authority

10.3 California Privacy Rights (CCPA/CPRA)

California residents have additional rights under the California Consumer Privacy Act and California Privacy Rights Act, including:

• The right to know what personal information we collect, use, and share
• The right to delete personal information (with some exceptions)
• The right to correct inaccurate personal information
• The right to opt out of the sale or sharing of personal information (note: we do not sell personal information)
• The right to non-discrimination for exercising your privacy rights

To exercise any of these rights, please contact us at hello+privacy@faithgpt.io. We will respond to your request within the timeframe required by applicable law (typically 30-45 days).

11. Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13 without verifiable parental consent.

Kids Mode: FaithGPT may offer features designed for children. Use of such features by children under 13 requires verifiable parental consent in accordance with the Children's Online Privacy Protection Act (COPPA). Parents and guardians are responsible for supervising their children's use of the Service.

Parental Rights: Parents and guardians may:

• Review their child's personal information
• Request deletion of their child's personal information
• Refuse further collection or use of their child's information

If we learn that we have collected personal information from a child under 13 without parental consent, we will promptly delete that information. If you believe we have collected information from a child under 13, please contact us at hello+privacy@faithgpt.io.

12. Third-Party Links

Our Service may contain links to third-party websites, services, or applications that are not owned or controlled by FaithGPT AI Inc. This includes links to Bible resources, churches, and other faith-related content. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party sites or services.

We strongly advise you to review the privacy policies of any third-party websites or services that you visit or use.

13. Do Not Track Signals

Some browsers have a "Do Not Track" feature that signals to websites that you visit that you do not want to have your online activity tracked. Our Service does not currently respond to "Do Not Track" signals. However, you can manage your cookie preferences through your browser settings and our cookie consent mechanisms.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Provide notice through the Service or via email for significant changes
• Obtain consent where required by applicable law

We encourage you to review this Privacy Policy periodically. Your continued use of the Service after any modifications constitutes your acceptance of the updated Privacy Policy.

15. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us:

For data protection inquiries from European residents, you may also contact your local data protection authority.