Privacy Policy

1. Information We Collect

We collect the minimum information necessary to operate the service:

• Account information you provide: email, optional display name, hashed password.
• Children's profile information voluntarily provided by a parent or legal guardian: first name or nickname, age range, language preference. We do not require a child's full legal name or photograph.
• Reading and engagement data: which stories were opened, completion progress, favorites, and quiz interactions.
• Device information: operating system family, app version, and language locale. We do not collect precise GPS location.
• Payment receipts and transaction identifiers: we do not store full payment-card numbers. Payments are processed by Apple App Store, Google Play, or Stripe.

2. How We Use Information

We use information to:

• Provide, personalize, and improve the service.
• Sync reading progress and the Faith Garden across your devices.
• Process subscriptions and in-app purchases.
• Send important service announcements (e.g., subscription receipts, security notices).
• Recommend age-appropriate stories.
• Detect and prevent fraud, abuse, and security incidents.

We do not use children's profile data for behavioral advertising. We do not sell personal information.

3. Information Sharing

We share information only with:

• Payment providers (Apple, Google, Stripe) — strictly what is necessary to process and verify transactions.
• Cloud infrastructure and storage providers — for hosting, image delivery, and backups, bound by data processing agreements.
• Email and push-notification delivery providers — only for messages you opt into or that are essential to the service.
• Legal authorities — only when required by valid legal process and proportionate in scope.

We never sell, rent, or trade personal information.

4. Children's Privacy (COPPA / GDPR-K / PIPL)

FaithSow is designed for children but operated under parental control:

• A parent or legal-guardian account is required to register a child's profile.
• We collect only the minimum information necessary for the service.
• We do not display third-party behavioral advertising to children.
• Parents can review, edit, or delete a child's profile at any time in Settings.
• We comply with COPPA (United States, under 13), GDPR-K (EU/UK, under 16), and applicable provisions of China's PIPL for minors.

If you believe a child under the applicable age has provided us personal information without verifiable parental consent, please contact us at privacy@faithsow.com and we will delete it.

5. Data Security and Retention

We protect personal information using industry-standard safeguards: TLS in transit, encryption at rest for sensitive fields, hashed passwords (bcrypt or stronger), least-privilege access controls, and routine security review.

We retain account data while your account is active and for up to twelve (12) months after account deletion to handle disputes and refunds, except where longer retention is legally required (for example, tax records may be retained for seven (7) years).

No system is perfectly secure. We will notify affected users without undue delay in the event of a data breach affecting personal information, as required by applicable law.

6. Your Rights

Depending on where you live (GDPR, UK GDPR, CCPA/CPRA, PIPL, LGPD, and similar), you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion (subject to limited exceptions).
• Object to or restrict certain processing.
• Data portability in a machine-readable format.
• Withdraw consent at any time, without affecting prior lawful processing.
• Lodge a complaint with your local data-protection authority.

To exercise these rights, email privacy@faithsow.com. We will respond within the timelines required by applicable law (typically 30 days).

7. Cookies and Tracking

Our website uses strictly necessary cookies for authentication and session management. Analytics cookies are optional and require your explicit consent on first visit; you can withdraw it at any time.

Our mobile app does not use browser cookies; authentication tokens are stored in the device's secure storage (Keychain on iOS, EncryptedSharedPreferences on Android).

8. Third-Party Services

We rely on these processors, each under contract:

• Apple App Store / Google Play / Stripe — payment processing and receipt validation.
• Sentry — crash and error reporting; we configure it to scrub user-message content.
• S3-compatible object storage — story images, audio, and watermarked thumbnails.
• Transactional email delivery (e.g., for receipts, password resets).

Each provider operates under its own privacy policy. We encourage you to review them.

9. International Data Transfers

FaithSow operates globally; your data may be processed in regions where our cloud providers operate. For cross-border transfers from the EEA/UK or China, we rely on the European Commission's Standard Contractual Clauses or equivalent safeguards.

10. Changes to This Policy

We will notify users of material changes via in-app notice or email at least 30 days before they take effect, unless an earlier change is required by law. The latest version is always available at https://www.faithsow.com/privacy.