Privacy Policy

Last updated: August 5, 2026

Faithline ("Company," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, applications, and services (collectively, the "Service") available at faithline.ai. Please read this Privacy Policy carefully. By using the Service, you consent to the practices described in this policy.

1. Information We Collect

1.1 Account Information

When you create an account, we collect information you provide directly, including:

• Name and email address
• Profile information (denomination, reading level, church home — all optional)
• Authentication credentials (managed securely through Supabase Auth)
• Google account information if you choose to sign in with Google

1.2 Conversation Data

When you interact with our AI companion Emet, we collect and store:

• Your messages and questions ("prompts")
• AI-generated responses
• Conversation metadata (timestamps, conversation titles)

Your conversation data is used exclusively to provide the Service to you (e.g., maintaining conversation history, enabling follow-up questions). We do not use individual conversations to train or improve general-purpose AI models.

1.3 Payment Information

When you subscribe to a paid plan, payment information (credit card number, billing address) is collected and processed directly by our payment provider, Stripe. We do not store your full credit card number on our servers. We receive and store only a tokenized reference, card type, last four digits, and expiration date for display and billing management purposes.

1.4 Usage & Analytics Data

We automatically collect certain information when you access or use the Service, including:

• Device information (browser type, operating system, device type)
• IP address and approximate geographic location
• Pages visited and features used within the Service
• Session duration and interaction patterns
• Referring URLs and search terms that led you to the Service

1.5 Cookies & Similar Technologies

We use cookies and similar tracking technologies to collect and store certain information. For full details, please see our Cookie Policy.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Process your subscription and manage billing
• Generate AI responses to your questions using your conversation context
• Save and display your conversation history
• Personalize your experience based on your profile preferences
• Send you service-related communications (e.g., billing confirmations, security alerts, feature updates)
• Monitor and analyze usage trends to improve the Service
• Detect, prevent, and address technical issues, fraud, and security concerns
• Comply with legal obligations

We do not use your information to:

• Sell your personal data to third parties
• Display targeted advertisements
• Train general-purpose AI models on your individual conversations
• Create user profiles for marketing by third parties

3. Data Storage & Security

Your data is stored using Supabase, a secure, open-source backend platform. We implement the following security measures:

• Encryption in transit: All data transmitted between your device and our servers is encrypted using TLS (Transport Layer Security).
• Encryption at rest: Data stored in our database is encrypted at rest using AES-256 encryption.
• Row-Level Security (RLS): Our database enforces row-level security policies ensuring that each user can only access their own data.
• Access controls: Administrative access to production data is strictly limited and requires multi-factor authentication.
• Regular audits: We periodically review our security practices and infrastructure to identify and address potential vulnerabilities.

While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security.

4. Third-Party Services

We use the following third-party services to operate the Service. Each processes data as described below:

• Google Gemini (AI Processing): Your conversation prompts are sent to Google's Gemini API to generate AI responses. Google processes this data according to their Privacy Policy. We use the API in a configuration that does not allow Google to use your prompts to improve their general models.
• ElevenLabs (Voice Synthesis): Narrated audio content (such as audio stories and devotionals) is generated by sending text scripts prepared by our team to ElevenLabs' voice-synthesis API. Your personal data and conversations are not sent to ElevenLabs. See their Privacy Policy.
• Postmark (Email Delivery): Transactional emails (account confirmation, sign-in links, notifications) are delivered through Postmark, which processes your email address and message content for delivery. See their Privacy Policy.
• Stripe (Payment Processing): Stripe processes your payment information when you subscribe to a paid plan. We do not have access to your full credit card details. Stripe's handling of your payment data is governed by their Privacy Policy.
• Supabase (Data Storage & Authentication): Supabase provides our database, authentication, and backend infrastructure. Your account data and conversation history are stored in Supabase. See their Privacy Policy.
• Vercel (Hosting): Vercel hosts our web application and may collect standard server logs (IP addresses, request timestamps, user agents). See their Privacy Policy.

We do not sell, rent, or trade your personal information to any third party for their marketing purposes.

5. Cookies & Tracking Technologies

We use cookies and similar technologies to maintain your session, remember your preferences, and understand how you use the Service. For comprehensive information about the cookies we use, how to manage them, and your choices, please see our Cookie Policy.

6. Data Retention

We retain your information as follows:

• Account information: Retained for as long as your account is active, plus 30 days after account deletion to allow for recovery if requested.
• Conversation data: Retained for as long as your account is active. Deleted within 30 days of account deletion.
• Payment records: Retained for up to 7 years after the transaction to comply with tax and financial reporting obligations.
• Usage analytics: Aggregated and anonymized analytics data may be retained indefinitely. Individual usage logs are deleted within 90 days.
• Server logs: Automatically deleted after 90 days.

You may request earlier deletion of your data at any time (see "Your Rights & Choices" below).

7. Your Rights & Choices

Depending on your location and applicable law, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of any inaccurate or incomplete personal information.
• Deletion: Request deletion of your personal information. You can delete your account and all associated data from your account settings or by contacting us.
• Export: Request a portable copy of your data in a commonly used, machine-readable format.
• Restriction: Request that we limit the processing of your personal information under certain circumstances.
• Objection: Object to the processing of your personal information for certain purposes.
• Withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time.

To exercise any of these rights, please contact us at support@faithline.ai. We will respond to your request within 30 days (or sooner if required by applicable law).

8. California Privacy Rights (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights regarding your personal information:

• Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which the information was collected, the business purpose for collecting the information, and the categories of third parties with whom we share the information.
• Right to Delete: You have the right to request the deletion of personal information we have collected from you, subject to certain exceptions.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.
• Sale of Personal Information: We do not sell your personal information as defined under the CCPA.

To submit a CCPA request, contact us at support@faithline.ai with the subject line "CCPA Request." We may need to verify your identity before processing your request.

9. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) provides you with additional rights. Our legal bases for processing your personal information include:

• Contract performance: Processing necessary to provide the Service you have requested (e.g., account management, conversation processing).
• Legitimate interests: Processing necessary for our legitimate business interests (e.g., analytics, security, fraud prevention), provided these interests do not override your rights.
• Consent: Where you have given explicit consent for specific processing activities (e.g., optional marketing communications).
• Legal obligation: Processing necessary to comply with applicable laws and regulations.

In addition to the rights listed in Section 7, GDPR provides you with the right to lodge a complaint with your local data protection supervisory authority. Our data processing activities are conducted primarily in the United States. By using the Service, you acknowledge that your data may be transferred to and processed in the United States.

10. Children's Privacy

The Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child under 13 has provided us with personal information, please contact us at support@faithline.ai, and we will take steps to delete such information.

Users between 13 and 18 years of age may use the Service with the consent and supervision of a parent or legal guardian. We encourage parents and guardians to monitor their children's online activities and to help enforce this Privacy Policy.

11. International Data Transfers

Your information may be transferred to and maintained on servers located outside your state, province, country, or other governmental jurisdiction where data protection laws may differ from those in your jurisdiction. If you are located outside the United States and choose to provide information to us, please note that we transfer the data to the United States and process it there.

Where required by applicable law, we implement appropriate safeguards for international data transfers, such as Standard Contractual Clauses approved by the European Commission.

12. Do Not Track Signals

Some web browsers transmit "Do Not Track" (DNT) signals. Because there is no universally accepted standard for how to respond to DNT signals, we do not currently respond to them. However, we do not engage in cross-site tracking of our users. We will update this policy if a uniform standard for responding to DNT signals is established.

13. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email (sent to the email address associated with your account) or by posting a prominent notice within the Service at least 30 days before the changes take effect. Your continued use of the Service after the effective date constitutes your acceptance of the updated Privacy Policy.

We encourage you to review this Privacy Policy periodically. The "Last updated" date at the top of this page indicates when this policy was last revised.

14. Contact Information

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:

Faithline — Privacy Team Email: support@faithline.ai Website: faithline.ai

For GDPR-related inquiries, please include "GDPR" in the subject line. For CCPA-related inquiries, please include "CCPA Request" in the subject line.