Privacy Policy

Introduction

At The Quiet Place, we take your privacy seriously. Your journal is a sacred space, and we're committed to protecting the personal and spiritual reflections you share with us.

This Privacy Policy explains:

• ✓ What information we collect
• ✓ How we use it
• ✓ Your rights and choices
• ✓ How we protect your data

---

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• • Email address (required for login and communication)
• • Password (encrypted and never stored in plain text)
• • Name (optional, for personalization)
• • Profile information (optional)

1.2 Journal Entries

Your journal entries contain:

• • Written reflections (your personal thoughts)
• • Associated Bible verses (the daily Scripture you journaled about)
• • Timestamps (when you wrote each entry)
• AI-generated summaries (spiritual guidance created for you)

1.3 Usage Data

We automatically collect:

• Device information (browser type, operating system)
• Log data (IP address, pages visited, time spent)
• Cookies (for session management and preferences)

1.4 Payment Information

If you subscribe to Premium:

• Payment details are processed by Stripe (we never store credit card numbers)
• We receive only: transaction ID, subscription status, billing email

1.5 Accountability Partner Data

If you use the accountability feature:

• Partner's email (to send invitations)
• Shared journal entries (only if you explicitly choose to share)

---

2. How We Use Your Information

2.1 To Provide the Service

• Deliver daily Bible verses
• Generate AI spiritual summaries and encouragement
• Save and display your journal entries
• Enable accountability partnerships
• Process premium subscriptions

2.2 To Improve the Service

• Analyze usage patterns (aggregate, not individual)
• Fix bugs and improve performance
• Develop new features based on user needs

2.3 To Communicate with You

• Send account-related emails (password resets, confirmations)
• Notify about subscription changes or expirations
• Share product updates (you can opt out)

2.4 AI Processing

We use OpenAI's GPT-4 to:

• Generate spiritual summaries of your entries
• Provide encouragement and action steps
• Recommend faith resources

Important: Your journal entries are sent to OpenAI's API for processing, but OpenAI does not train their models on your data per their API terms.

---

3. How We Share Your Information

3.1 We DO NOT Sell Your Data

Never. Your journal is not a product to be monetized through ads or data brokers.

3.2 Service Providers

We share limited data with:

• OpenAI (for AI-powered summaries)
• Stripe (for payment processing)
• Hosting providers (for data storage and delivery)
• Email service (for transactional emails)

All service providers are bound by strict confidentiality agreements.

3.3 Accountability Partners

If you invite an accountability partner and choose to share entries:

• Only entries you explicitly mark as "shared" are visible
• Your partner can see only what you allow
• You can revoke access at any time

3.4 Legal Requirements

We may disclose information if required by law, subpoena, or court order. We will notify you unless legally prohibited.

---

4. Data Security

4.1 Encryption

• In transit: All data is encrypted with TLS/SSL
• At rest: Database is encrypted
• Passwords: Hashed with bcrypt (industry standard)

4.2 Access Controls

• Only authorized personnel can access backend systems
• Multi-factor authentication required for admin access
• Regular security audits

4.3 Data Retention

• Active accounts: Data retained as long as account is active
• Deleted accounts: Data permanently deleted within 30 days
• Backups: Retained for 90 days for disaster recovery

---

5. Your Rights and Choices

5.1 Access Your Data

You can download all your journal entries at any time from Settings > Export Data.

5.2 Delete Your Data

You can delete your account from Settings > Delete Account. This permanently removes:

• All journal entries
• Account information
• AI summaries
• Subscription history (payment records retained for legal compliance)

5.3 Opt Out of Communications

You can unsubscribe from marketing emails (account-related emails still sent for security/billing).

5.4 GDPR Rights (EU Users)

If you're in the EU, you have rights to:

• Access your personal data
• Correct inaccurate data
• Request deletion (right to be forgotten)
• Data portability (export in machine-readable format)
• Restrict or object to processing

Contact privacy@thequietplace.app to exercise these rights.

---

6. Cookies and Tracking

6.1 Essential Cookies

Required for the app to function:

• Session cookies (keep you logged in)
• Preference cookies (remember your settings)

6.2 Analytics

We use privacy-focused analytics to understand:

• How many people use the app
• Which features are most popular
• Where bugs occur

We do not use:

• Third-party advertising cookies
• Cross-site tracking
• Behavioral profiling for ads

---

7. Children's Privacy

The Quiet Place is not intended for children under 13. We do not knowingly collect data from children. If you believe a child has created an account, contact us immediately at privacy@thequietplace.app.

---

8. International Users

The Quiet Place is operated in the United States. If you're accessing from outside the U.S., your data may be transferred to and stored in the U.S.

We comply with applicable data protection laws, including GDPR for EU users.

---

9. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated "Last Updated" date.

Material changes will be communicated via email.

Continued use of the service after changes indicates acceptance.

---

10. Contact Us

Questions about privacy? Concerns about your data?

Email: privacy@thequietplace.app
Support: support@thequietplace.app
Mail: The Quiet Place, [Your Address]

---