Privacy Policy

Introduction

This Privacy Policy explains how Christian Life Journal ("we," "our," or "the App") collects, uses, and protects your information. We are committed to protecting your privacy and the personal nature of your spiritual journey.

Information Collection and Use

1. Journal Data (Stored Locally on Your Device)

What We Store:

• Journal entries (Personal Time, Sermon Notes, Prayer Journal, etc.)
• Scripture memorization entries and progress
• Prayer requests and answered prayers
• Tags, speakers, prayer categories, and binders you create
• Scripture passage selections
• Entry dates and metadata
• Photos attached to journal entries

Where It's Stored:

• Locally on your device using Apple's SwiftData framework
• Optionally in a sync folder location YOU choose (see Folder-Based Sync section below)
• Optionally on our sync server, if you turn on Real-Time Sync (see Real-Time Sync section below)

Who Has Access:

• Only you, through the App on your devices
• Unless you turn on Real-Time Sync, we (the developers) do NOT have access to your journal content
• Your data never leaves your device unless you enable folder-based sync or Real-Time Sync

2. Folder-Based Sync (Optional)

How It Works:

• You can optionally enable folder-based sync by selecting ANY folder location on your device
• Common choices include iCloud Drive, Dropbox, Google Drive, OneDrive, or local folders
• The App creates a "ChristianLifeJournal" subfolder at your chosen location
• Each entry is stored as an individual JSON file in this folder
• You have complete control over where your data is stored and which cloud service (if any) you use

What Gets Synced:

• All journal entries, Scripture entries, prayer requests, and binders
• Tags, speakers, and prayer categories
• Optionally, app settings (if you enable settings sync)
• Photos attached to journal entries

Who Has Access:

• Only you, through the folder location you selected
• If you choose a cloud storage folder (iCloud Drive, Dropbox, etc.), that service's privacy policy applies
• We do NOT have access to your sync folder or its contents

3. Real-Time Sync (Optional)

How It Works:

• Real-Time Sync is optional and is off unless you turn it on in Settings → Data & Sync → Real-Time Sync
• No account, name, or email is required. The App creates a random household ID that is kept in your iCloud Keychain, so devices signed in to the same Apple ID share it automatically
• Devices on different Apple IDs can be linked with a one-time pairing code that expires after 15 minutes
• Changes sync within seconds when you are online and are sent when you reconnect if you were offline

What Gets Sent to the Server:

• Journal entries, including titles, text, Scripture, notes, and speaker names
• Prayer requests, including descriptions, updates, and answer notes
• Scripture memorization entries and progress, and binders
• Tags, speakers, and prayer categories
• The file names of photos attached to entries, but not the photos themselves
• Your random household ID, a random device identifier, and the date each item was last changed

Where It's Stored and Who Has Access:

• Your content is sent over encrypted HTTPS connections and stored on a server hosted by Convex, a third-party backend provider, so it can be delivered to your other devices
• It is identified only by your random household ID. It is not tied to your name, email, or Apple ID
• Because the server stores your content in order to deliver it to your devices, it is technically accessible to us as the operator of that server. We do not read it, sell it, or use it for advertising or analytics

Your Control:

• You can turn Real-Time Sync off at any time. Turning it off does not by itself delete the copy on the server.
• To remove your data from the server, choose Delete All Server Data in Settings → Data & Sync → Real-Time Sync. This permanently deletes the server copy and unlinks your devices. Your local journal is not affected

4. App Settings Sync (Optional)

iCloud Key-Value Storage:

• You can optionally enable iCloud sync for app settings ONLY (not journal data)
• This syncs your preferences across your Apple devices (translation choice, UI preferences, etc.)
• This feature is DISABLED by default
• Settings are stored in your personal iCloud account using Apple's iCloud key-value storage
• We do NOT have access to your settings data

What Gets Synced (when enabled):

• App preferences (Scripture translation, entry view style, haptic feedback preferences)
• Scripture memorization system settings
• User experience preferences (rich text editor, auto-fill settings)

5. Siri, Shortcuts & Spotlight

What This Does:

• So you can find and open your journal quickly, the App adds your journal entries, prayer requests, and memory verses to your device's Spotlight index and makes them available to Siri and Shortcuts
• This is on by default and shares everything, including the text you write. Photos are not included, and demo data is never shared
• This information stays on your device and is handled by iOS. We do not receive it

How to Control It:

• In Settings → Data & Sync → Siri & Spotlight, choose Everything, Titles & References Only (the text you write is not shared), or Off (nothing is shared, and anything already shared is removed)
• Depending on your iOS Siri & Search settings for the App, Spotlight results can appear on your Lock Screen. You can change this in the iOS Settings app
• How Apple handles Siri and Spotlight is described in Apple's Privacy Policy

6. Analytics Data (Optional)

When Analytics Are Enabled:

We collect anonymous usage statistics through PostHog to improve the App. Analytics are enabled by default but can be disabled at any time.

What We Collect:

• Feature usage (e.g., "user created a sermon notes entry")
• App interactions (e.g., "user enabled haptic feedback")
• Session information (such as when the App is opened)
• Device type and iOS version
• A random anonymous ID created by the App and stored on your device. It is not linked to your Apple ID, name, or any other identity

What We DO NOT Collect:

• The content of your journal entries
• Prayer requests or spiritual reflections
• Scripture passages you select or memorize
• Personal identifying information (name, email, location, etc.)
• Tags, speakers, or category names you create
• Any content you type into the App
• Which sync folder location you choose

How to Control Analytics:

• Analytics can be enabled or disabled at any time in Settings → Data & Sync
• When disabled, no analytics data is collected or sent
• Analytics are completely optional

7. Bible Content Data

Local Storage:

• Bible text (KJV, ESV, CSB) is stored locally in the App
• No internet connection is required for Scripture lookup
• We do not track which verses you read or search for (unless analytics are enabled, in which case we only track that the auto-fill feature was used, not which verses)

Data Usage

We use the collected information solely to:

• Provide the App functionality
• Sync your data across your devices (via the sync folder you choose, or our sync server if you enable Real-Time Sync)
• Make your journal findable on your device through Siri, Shortcuts, and Spotlight, according to your setting
• Improve the App experience through optional anonymous analytics
• Fix bugs and improve performance

Data Sharing

The only exceptions are:

• PostHog Analytics (when enabled): Anonymous usage data is sent to PostHog to help us understand how the App is used. PostHog is GDPR and privacy-compliant. No personal or journal content is shared.
• Convex (only if you turn on Real-Time Sync): Convex is the hosting provider that stores your synced content on our behalf so it can reach your other devices. We do not sell your content or use it for advertising.

Data Security

Local Storage

• All journal data is stored securely on your device using Apple's SwiftData framework
• Data benefits from iOS system-level encryption

Folder-Based Sync (Optional)

• When you enable folder-based sync, data is stored in the folder location you choose
• If you choose a cloud storage location (iCloud Drive, Dropbox, Google Drive, etc.):
  • That service's security measures and privacy policies apply
  • Data is protected by that service's encryption and authentication
  • You control access through that service's account settings
• If you choose a local folder, data is stored on your device only

Real-Time Sync (Optional)

• Data is sent between the App and the server over encrypted HTTPS connections
• The server identifies your data only by your random household ID, not by your name, email, or Apple ID
• Pairing codes can be used once, expire after 15 minutes, and are rate-limited after repeated wrong guesses
• You can remove your data from the server at any time (see Your Privacy Rights)

Settings Sync via iCloud (Optional)

• When enabled, app settings are synced via Apple's iCloud key-value storage
• Protected by Apple's security measures
• You control access through your Apple ID

Your Privacy Rights

You have the right to:

1. Access Your Data: All your data is stored locally on your device and (if enabled) in the sync folder you choose. You have complete access through the App.

2. Delete Your Data:

• Uninstalling the App will delete all local data
• Sync folder data can be managed by deleting files from the folder you selected
• Individual entries can be deleted within the App
• Data held on our sync server by Real-Time Sync can be removed with Delete All Server Data in Settings → Data & Sync → Real-Time Sync

3. Control Analytics: Enable or disable analytics at any time in Settings → Data & Sync

4. Control Folder-Based Sync: Enable or disable folder-based sync at any time in Settings → Folder-Based Sync

5. Control Settings Sync: Enable or disable iCloud settings sync at any time in Settings → Settings Sync

6. Export Your Data: Use Settings → Data & Sync → Export & Restore to export all of your data as a file. Sync data is also stored as readable JSON files in your sync folder (if enabled)

7. Control Real-Time Sync: Turn Real-Time Sync on or off, or delete your data from the server, at any time in Settings → Data & Sync → Real-Time Sync

8. Control Siri & Spotlight Sharing: Choose what is shared, or turn it off, at any time in Settings → Data & Sync → Siri & Spotlight

Children's Privacy

The App does not knowingly collect information from children under 13. The App is designed for personal spiritual reflection and is suitable for users of all ages when used appropriately. Parental guidance is recommended for younger users.

Data Retention

• Local Data: Retained on your device until you delete the App or individual entries
• Sync Folder Data: Retained in your chosen sync folder until you delete the files or disable sync
• Real-Time Sync Data: Retained on our sync server until you choose Delete All Server Data. Turning Real-Time Sync off does not by itself delete it
• Siri & Spotlight Index: Kept on your device until you set sharing to Off or delete the App
• Settings Data: If iCloud settings sync is enabled, retained in your iCloud account according to Apple's policies
• Analytics Data: Anonymous analytics data may be retained to improve the App, but contains no personal or journal content

Third-Party Services

Apple Services (Optional)

• iCloud Key-Value Storage: Used for optional app settings sync ONLY (not journal data) when you enable it (subject to Apple's Privacy Policy)

Convex (Optional)

• Purpose: Hosts the server used by Real-Time Sync, only if you turn that feature on
• What it holds: The content described in the Real-Time Sync section, identified by a random household ID
• Control: Off unless you enable it; you can delete your data from the server in the App

Cloud Storage Services (Optional)

If you choose to enable folder-based sync with a cloud storage folder:

• iCloud Drive: Subject to Apple's Privacy Policy
• Dropbox: Subject to Dropbox's Privacy Policy
• Google Drive: Subject to Google's Privacy Policy
• OneDrive: Subject to Microsoft's Privacy Policy
• Or any other folder location you select

PostHog (Optional)

• Purpose: Anonymous usage analytics when enabled
• Privacy: GDPR and privacy-compliant analytics platform
• Control: Can be disabled in App settings

International Users

The App is available worldwide. By using the App:

• Your data is stored on your device
• If you enable folder-based sync, your data is stored in the folder location you choose (subject to that service's data location policies)
• If you enable Real-Time Sync, your synced content is stored and processed on the infrastructure of our hosting provider, Convex, which may be in a different country from you
• Optional analytics data may be processed in the United States
• No journal content leaves your device except to the sync folder you explicitly choose or, if you turn on Real-Time Sync, to our sync server

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Updating the "Last Updated" date at the top of this policy
• Providing notice within the App (for material changes)

Continued use of the App after changes constitutes acceptance of the updated Privacy Policy.

Your Consent

By using Christian Life Journal, you consent to this Privacy Policy.

Data Breach Notification

In the unlikely event of a data breach affecting the App (such as a compromise of our analytics service or sync server), we will:

• Investigate the incident promptly
• Notify affected users if personal data was compromised
• Take steps to prevent future breaches

Note: Your journal content and personal data are stored locally on your device (and optionally in the sync folder you choose). If you turn on Real-Time Sync, a copy is also held on our sync server, identified only by a random ID and not by your name or email.

California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of sale of personal information (we do not sell your information)

European Privacy Rights (GDPR)

If you are in the European Union, you have rights under GDPR:

• Right to access your personal data
• Right to rectification
• Right to erasure ("right to be forgotten")
• Right to data portability
• Right to object to processing

Unless you turn on Real-Time Sync, we do not collect or store your journal content on our servers, and you maintain full control over your data through the App and the sync folder you choose (if enabled). If you use Real-Time Sync, you can erase the copy on our server at any time with Delete All Server Data. Because that data is tied only to a random ID and not to your name or email, we cannot look up a particular person's data by any other means.

Contact Us

If you have questions about this Privacy Policy or your data, please contact us through the feedback board or support email linked in the App settings.

---