With Faith App Privacy Policy

Effective Date: August 27, 2026
Company Name: With Faith LLC ("we," "us," or "our")

This Privacy Policy explains what information the With Faith App (the "App") collects, stores, and shares, and what it does not. It should be read together with our User Agreement (Terms of Use). We designed the App to collect as little information as possible.

1. Our Approach to Privacy, In Short

• You do not need to register or create an account to use the App.
• We do not collect your name, email address, phone number, or any other information that identifies you.
• Your Bible reading plan progress and age category are stored only in local storage on your own device — never on our servers. Your daily AI chat message count is tracked locally on your device and also independently on our servers, solely to enforce our 10-message daily limit (see Section 3).
• When you use the AI Assistant, the text of your message is relayed through our backend to OpenAI's API to generate a response, and back to you. By default, our backend does not log or store the content of that message or the response. The one exception is described in Section 4a: messages that our automated safety systems flag as indicating a possible risk of self-harm may be retained for safety review, even though ordinary messages are not.
• We also log a small number of feature-usage checkpoints — such as opening today's reading plan chapter, opening the Bible Geo Map, opening an Explore item, or sending an AI Assistant message — together with a device identifier and a timestamp, so we can understand how the App is used. See Section 6.
• We do not sell your information, because we do not collect information to sell.

2. Information We Do Not Collect

We do not ask for, and the App does not collect:

• Your name, email address, phone number, or mailing address;
• A username, password, or any account credentials;
• Your birthdate (only a self-reported "under 18" / "18 or older" category, stored locally — see Section 3);
• Payment information (unless and until the App offers paid features, in which case a payment processor would handle that information directly, as described in a future update to this Policy);
• Your precise location.

3. Information Stored Locally on Your Device

The App stores the following directly on your device, using standard local app storage:

• Age category: whether you indicated you are under 18 or 18 years of age or older, collected once as described in our User Agreement;
• Bible reading plan progress: which chapters or readings you have completed;
• Daily AI Assistant message count: the number of messages you have sent to the AI Assistant today, tracked locally for display purposes.

Your age category and Bible reading plan progress are never transmitted to or stored on our servers. Your daily AI Assistant message count is different: in addition to the local, on-device count above, it is also independently tracked on our servers (tied to a device identifier, not to any personal information) so that the 10-message daily limit can be enforced even if the on-device count is reset or cleared. See Section 5 for further detail on this and other information collected by our backend infrastructure.

Because your age category and reading plan progress live only on your device, uninstalling the App permanently deletes them, and we have no ability to access, recover, or delete that information on our end, because we never receive it. Your server-side message count is deleted on its own daily reset schedule, as described in Section 10 (Data Retention).

4. Information Processed for the AI Assistant

When you send a message to the AI Assistant:

• The text of your message is transmitted from your device, through our backend server, to OpenAI's API, solely to generate a response.
• Our backend acts only as a relay for this purpose. It does not log, save, or retain the content of your messages or OpenAI's responses, except in the limited safety-related circumstance described in Section 4a below.
• OpenAI processes this data under its own API terms and data usage policy, which governs how long OpenAI itself retains this information and for what purposes. As of OpenAI's published policies, OpenAI does not use API data to train its models by default, and retains API inputs and outputs for up to 30 days for abuse-monitoring and safety purposes before deletion, unless a longer period is required by law. See OpenAI's current API data usage policy at developers.openai.com/api/docs/guides/your-data for the most up-to-date terms, since OpenAI may change this independently of us.
• Please avoid sharing information in the AI Assistant that you would not want processed by a third-party AI service (for example, full names, addresses, or other identifying details about yourself or others).
• The AI Assistant is available only to users who indicate they are 18 years of age or older, as described in Section 8 and our User Agreement.

With Faith LLC does not operate or train its own AI model, and does not use the content of your messages to train, fine-tune, or improve any AI model. OpenAI is the only party that processes your message text to generate a response, under OpenAI's own data usage policy described above. The one exception is the limited, non-training safety-review process described in Section 4a, where flagged messages may be reviewed by us to improve our own keyword- and rule-based detection logic — not to train an AI model.

A note about accuracy: The AI Assistant generates responses by predicting likely word sequences in response to your message, not by looking up verified facts. This means its responses — including scriptural references, historical claims, or theological framing — may sometimes be inaccurate even when they appear confident or detailed. You should not rely on the factual or theological accuracy of AI Assistant output without independently verifying it. See Section 3 of our User Agreement for the full disclaimer.

4a. Safety Review of High-Risk Messages

The App is not a crisis intervention service (see our User Agreement, Section 4a, for the full disclaimer and crisis resources such as 988). However, because the AI Assistant may be used during difficult emotional moments, we use limited automated methods to help respond appropriately when a message suggests a possible risk of self-harm or suicide:

• Keyword-based detection, run on our backend, checks message text against a list of terms associated with self-harm or suicidal ideation.
• AI-based analysis: as part of generating its response, the AI Assistant itself also assesses whether a message suggests risk, even when no specific keyword is present.

If either method flags a message, two things happen:

• The App displays crisis resources (such as the 988 Suicide & Crisis Lifeline and Crisis Text Line) in addition to the AI Assistant's response.
• The flagged message and the App's response are stored on our servers — together with the associated device identifier (Section 5), a timestamp, and which detection method(s) triggered the flag — for the purpose of safety review, improving our detection systems, and maintaining a record in case of legal or safety-related need. This is the only circumstance in which we retain AI Assistant conversation content.

This detection is automated and imperfect: it may occasionally flag messages that are not actually high-risk (a "false positive"), and it may occasionally miss messages that are (a "false negative"). It is not a substitute for professional judgment or human crisis intervention.

Records created under this section are treated as sensitive information internally: access is restricted to a limited number of authorized personnel who may review flagged records as part of this safety-review process, retention is limited as described in Section 10, and no decision that significantly affects you is made by an automated system alone.

A note on mandatory reporting: Missouri's mandatory child-abuse-and-neglect reporting statute (RSMo § 210.115) applies to an enumerated list of professionals and roles (such as physicians, nurses, mental health professionals, social workers, teachers and school officials, and clergy) and covers suspected abuse or neglect of a minor; for anyone outside that list, Missouri law makes reporting permissive, not mandatory. With Faith LLC and the App are not among the enumerated categories, and the AI Assistant is available only to users who represent they are 18 or older, so this statute does not appear to impose a reporting duty on the safety-review process described above. This is a general statement about how the statute is structured, not a case-by-case legal determination, and we may still choose to report a specific message to appropriate authorities if circumstances warrant it, independent of any strict legal duty to do so.

5. Information Collected by Our Backend Infrastructure

Our backend infrastructure collects the following limited technical information:

• Access logs: Our hosting and networking infrastructure (such as load balancers and hosting-provider access logs) may automatically generate standard technical logs containing information like IP address and timestamp, consistent with common industry practice, even though our own application code does not log or retain ordinary message content. These logs are retained only as long as reasonably necessary for security and abuse-prevention purposes.
• Message-count enforcement: To enforce the 10-message daily limit described in Section 3, our backend also stores a device identifier together with your current daily message count. This is used solely for rate-limiting and is not linked to your name, message content, or any other personal information.
• Safety review records: As described in Section 4a, messages flagged as high-risk (together with the associated device identifier) are stored separately from ordinary technical logs, with restricted access.
• Usage-checkpoint events: As described in Section 6, our backend records when you open today's chapter from the Whole Bible Reading Plan, open the Bible Geo Map, open an item from the Explore tab, or send a message to the AI Assistant, together with the device identifier and a timestamp — not your name or any other personal information.

We do not currently use any third-party analytics, advertising, or tracking SDKs; see Section 6 for the limited usage-checkpoint events we log ourselves.

6. Analytics, Advertising, and Other Third-Party SDKs

The App does not use any third-party analytics, advertising, or tracking SDKs (for example, Firebase Analytics, Google Analytics, Sentry, or any ad network) at this time.

Our own backend does record a small number of feature-usage checkpoints, so we can understand which parts of the App are used and how often:

• Opening today's chapter from the Whole Bible Reading Plan;
• Opening the Bible Geo Map;
• Opening an item from the Explore tab;
• Sending a message to the AI Assistant.

Each checkpoint records only the type of action taken, the device identifier described in Section 5 (not your name or any other personal information), and a timestamp. No message content, reading content, or other personal information is included in these records. This information is used only in aggregate or per-device-identifier form to understand usage patterns and improve the App, and is not shared with third parties or used for advertising.

If this changes in the future — for example, if we begin using a third-party analytics or advertising SDK — we will update this Policy to describe what is collected and why before any such SDK begins operating in the App.

7. How We Use Information

Because we collect so little information, our uses are correspondingly limited:

• To operate the AI Assistant feature, by relaying your message to OpenAI and returning the response to you (Section 4);
• To identify and respond to possible self-harm risk, and to retain and review the limited records described in Section 4a;
• To understand which features of the App are used and how often, via the limited usage-checkpoint events described in Section 6;
• To maintain the security and reliability of the App (Section 5);
• To comply with legal obligations, if required.

We do not use any information to build advertising profiles, and we do not use it for automated decision-making that produces legal or similarly significant effects on you.

8. Children's Privacy

• The App is a general-audience app and is not directed to children. The Bible reading plan and related devotional content are available to users of any age.
• The AI Assistant is available only to users who confirm they are 18 years of age or older, as described in our User Agreement. Users who indicate they are under 18 do not have access to the AI Assistant, and no message content is ever transmitted to OpenAI — nor processed under the safety review described in Section 4a — on their behalf.
• Because we do not collect registration information, payment information, or any personal information from any user regardless of age, we do not knowingly collect personal information from children under 13, consistent with the Children's Online Privacy Protection Act (COPPA).
• If you believe a child has provided us with personal information, please contact us at the address below and we will investigate and delete it as appropriate.

9. Data Sharing and Third Parties

• OpenAI: Processes AI Assistant message text to generate responses, as described in Section 4. This is the only third party that receives your message content.
• Hosting/infrastructure providers: May process limited technical data (such as IP address in transient logs) as described in Section 5, solely to operate and secure the App.
• We do not sell, rent, or share personal information with third parties for advertising or marketing purposes.
• We may disclose information — including safety review records described in Section 4a — if required by law, court order, or governmental request, or to protect the rights, property, or safety of With Faith LLC, our users, or others.
• If With Faith LLC is involved in a merger, acquisition, or sale of assets, information described in this Policy (if any exists at the time) may be transferred as part of that transaction, subject to this Policy or a successor policy.

10. Data Retention

• Information stored locally on your device (age category, reading plan progress, daily message count) remains on your device until you clear it by uninstalling the App, as described in Section 3.
• The server-side device identifier and daily message count described in Section 5 are retained only as needed to enforce the daily limit and reset on a daily basis; uninstalling the App does not itself clear this server-side count, though it resets on its normal daily schedule regardless.
• Except as described immediately below, we do not retain a copy of your AI Assistant conversations on our servers at any point.
• Safety review records (Section 4a) — messages flagged as indicating possible self-harm risk, together with the App's response — are retained for 2 years from the date they are created, after which they are automatically deleted, unless a longer retention period is required for an active legal or safety matter.
• Usage-checkpoint events (Section 6) are retained for 90 days from the date they are created, tied to a device identifier rather than your identity.
• OpenAI's retention of message content is governed by OpenAI's own policies, described in Section 4.
• Any technical infrastructure logs described in Section 5 are retained only as long as necessary for the security purposes described there.

11. Data Security

We take reasonable measures designed to protect information in transit between your device, our backend, and OpenAI's API, including the use of encrypted connections (HTTPS/TLS). Safety review records described in Section 4a are subject to restricted internal access. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. As noted in Section 4, you should take care in deciding what information you share with the AI Assistant, since that text is processed by a third-party AI service.

Missouri's data breach notification law (RSMo § 407.1500) requires notice to affected Missouri residents only when a security incident exposes a first name or initial and last name in combination with specific sensitive identifiers, such as a Social Security number, driver's license or state ID number, or a financial account or card number together with any required security code. Because we do not collect names, Social Security numbers, driver's license numbers, or financial account information, our current data practices are not expected to trigger this statute. If that changes — for example, once the App offers paid features that involve payment information — we will revisit this and update this Policy accordingly.

Independent of whether any specific law's notice trigger is met, if we experience a security incident that we determine poses a meaningful risk to your information, we will provide notice through one or more of the following methods, as appropriate under the circumstances: (a) an in-app notice; (b) a notice posted on our website (with-faith.com); or (c) another method reasonably calculated to reach affected users. Because the App does not collect an email address or other direct contact information from most users, we are typically not able to notify individual users by email or another one-to-one channel — this is a tradeoff of the App's anonymous-by-design approach, and one more reason we encourage you not to share identifying contact information with the AI Assistant, as noted in Section 4.

12. Your Rights and Choices

Because we do not maintain accounts or store personal information on our servers, we generally hold very little for you to exercise rights over — the main exceptions being the limited safety review records described in Section 4a and the usage-checkpoint events described in Section 6, both of which are tied to a device identifier rather than your identity. Depending on where you live, you may have some or all of the following statutory rights in relation to any Personal Data we do hold:

• Access: the right to know what data we hold about you and how it is processed.
• Deletion: the right to have your data deleted from our records.
• Correction: the right to update or correct inaccurate data.
• Portability: the right to receive a copy of your data in a portable format.
• Restriction: the right to limit how we process your data.
• Objection: the right to object to certain processing.
• Complaint: the right to lodge a complaint with your local data protection authority.

In practice, since we do not hold account-linked personal data, most of these requests will return "we do not have data matching your request" — but you are welcome to submit a request at any time via the contact information below, and we will respond.

Practical steps you can take yourself:

• You can clear your locally stored age category and reading progress at any time by uninstalling the App.
• Your server-side message count (Section 5) is not tied to your identity and resets automatically on its own daily schedule.

Missouri residents: Missouri does not currently have a comprehensive consumer privacy law comparable to the CCPA. A proposed bill (the Enhanced Personal Privacy Act) has not been enacted as of this Policy's effective date. Regardless, you are welcome to contact us with any privacy question or request using the information below, and we will update this Policy if Missouri law changes.

California residents: the California Consumer Privacy Act (CCPA), as amended, may give you additional rights regarding personal information; given the App's minimal data collection, we do not currently expect to hold data responsive to most such requests, but you may still contact us at the address below with any request or question.

EEA / UK / similar jurisdictions: you may have rights under laws such as the GDPR; the same practical point applies — we hold very little to act on, but we will respond to any request.

13. International Users

The App may be used by individuals outside the United States. Any AI Assistant message content is processed by OpenAI, which may process data on servers located in the United States or other countries where OpenAI or its infrastructure providers operate. By using the AI Assistant, you understand that your message text may be transferred to and processed in a country other than your own.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will indicate changes by updating the "Effective Date" above, and for material changes, we will provide additional notice within the App where practicable. Your continued use of the App after changes take effect constitutes acceptance of the revised Policy.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:
support@with-faith.com
with-faith.com