SoulScribe

Effective Date: February 7, 2025

SoulScribe ("we," "our," or "us") is a spiritual journaling application developed by Preston Lau. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the SoulScribe mobile application ("App"). By using the App, you consent to the practices described in this policy.

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• Email address (required for authentication)
• Password (securely hashed; we never store plaintext passwords)
• Full name (optional, provided during signup or profile setup)

1.2 Profile Information

You may choose to provide:

• Profile picture
• Religious denomination
• Church name
• Bio
• Timezone

1.3 Journal and Spiritual Content

The core of SoulScribe involves personal and spiritual content you create:

• Journal entries (title, text content, word count)
• Emotional state associated with entries (e.g., grateful, peaceful, anxious)
• Tags and categories
• Photos and images attached to entries
• Audio voice memos
• Prayer requests (title, content, status, category)
• Daily gratitude entries
• Service/acts of kindness logs

1.4 Habit and Goal Tracking

• Spiritual goals (title, description, progress)
• Habit tracking data (prayer, scripture, journaling, gratitude, service)
• Goal completion status and frequency counts

1.5 Reminders and Notifications

• Reminder titles, types, and schedules
• Notification preferences and custom notification text
• Push notification tokens (for delivering notifications to your device)

1.6 Device Permissions

We request access to the following device features only when needed:

• Camera: To capture photos for journal entries and your profile picture
• Microphone: To record voice memos for journal entries
• Photo Library: To attach existing images to journal entries and set your profile picture
• Push Notifications: To deliver reminders you configure within the App

You can revoke these permissions at any time through your device settings.

1.7 Subscription and Purchase Data

• Subscription status (free or premium)
• Purchase history and transaction identifiers
• Subscription plan type (monthly or annual)

Payment processing is handled entirely by Apple through the App Store. We do not collect, store, or have access to your credit card number, bank account, or other financial payment information.

1.8 Diagnostic and Crash Data

• Application crash reports and error logs
• Performance metrics
• User actions leading to an error (breadcrumbs)

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the App and its features
• Authenticate your identity and manage your account
• Store and sync your journal entries, prayers, and spiritual data across sessions
• Deliver reminders and notifications you configure
• Process and manage your subscription
• Diagnose and fix technical issues, crashes, and bugs
• Improve App performance and user experience

We do not use your personal data for advertising, marketing to third parties, or cross-app tracking.

3. Third-Party Services

We use the following third-party services to operate the App. Each service receives only the data necessary for its function:

3.1 Supabase (Backend and Authentication)

Supabase provides our backend database, user authentication, and file storage. All your account data, journal content, habits, reminders, and uploaded media are stored on Supabase's cloud infrastructure. Supabase processes your email, password (hashed), and all content you create within the App.

Supabase Privacy Policy: https://supabase.com/privacy

3.2 Sentry (Error Monitoring)

Sentry helps us identify and fix crashes and errors. In production builds only, Sentry receives crash reports, error stack traces, and diagnostic breadcrumbs. It may also receive your user ID, email address, and username to help us identify affected users. Performance data is sampled at a 20% rate. Sentry does not receive your journal content or spiritual data.

Sentry Privacy Policy: https://sentry.io/privacy/

3.3 RevenueCat (Subscription Management)

RevenueCat manages in-app subscriptions and purchase validation. It receives your user ID, purchase history, subscription status, and platform information. RevenueCat does not receive your journal content or personal profile data beyond your user identifier.

RevenueCat Privacy Policy: https://www.revenuecat.com/privacy

3.4 Expo (App Platform Services)

Expo provides push notification delivery, over-the-air updates, and build services. Expo receives push notification tokens and basic app usage data necessary for delivering notifications and updates.

Expo Privacy Policy: https://expo.dev/privacy

4. Data Storage and Security

4.1 Remote Storage

Your account data, journal entries, habits, reminders, goals, and uploaded media are stored on Supabase's cloud servers. All data in transit is encrypted via HTTPS/TLS. Database access is protected by Row-Level Security (RLS) policies, ensuring you can only access your own data.

4.2 Local Storage

Certain data is stored locally on your device for performance and offline functionality:

• Authentication tokens are stored securely using your device's secure keychain (via Expo SecureStore)
• User preferences (theme, notification settings, privacy level) are stored in local application storage
• Cached data for faster loading (automatically cleared after 24 hours)

4.3 Security Measures

• All network communication uses HTTPS encryption
• Authentication tokens are stored in your device's secure keychain
• Database queries are protected by Row-Level Security ensuring data isolation between users
• Passwords are hashed and never stored in plaintext
• Error monitoring (Sentry) is disabled during development

5. Data Sharing

We do not sell, rent, or share your personal data with third parties for marketing or advertising purposes.

We share data only with the third-party service providers listed in Section 3 above, solely for the purposes of operating and improving the App. We may also disclose information if required by law or to protect our rights, safety, or property.

6. Your Rights and Choices

6.1 Account Deletion

You can delete your account at any time through the App's Privacy Settings. Account deletion permanently removes all your data, including journal entries, habits, reminders, goals, prayer requests, gratitude entries, service logs, notifications, and your profile. This action is irreversible.

6.2 Notification Controls

You can enable or disable push notifications, prayer reminders, and scripture notifications individually within the App's settings. You can also disable all notifications through your device's system settings.

6.3 Privacy Level

You can set your account privacy level to private, friends, or public within the App.

6.4 Data Export

Premium subscribers can export their data in JSON, CSV, or PDF format.

6.5 Permission Revocation

You can revoke camera, microphone, photo library, and notification permissions at any time through your device's system settings.

7. Data Retention

We retain your data for as long as your account is active. When you delete your account, all associated data is permanently deleted from our servers. Cached diagnostic data in Sentry is retained according to Sentry's standard retention policies.

8. Children's Privacy

SoulScribe is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will take steps to delete that information promptly. If you believe a child under 13 has provided us with personal data, please contact us at support@soulscribe.info.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Effective Date" at the top of this page. We encourage you to review this policy periodically. Continued use of the App after changes constitutes acceptance of the updated policy.