Privacy Policy

Your email address and password (the password is stored only as an encrypted hash we cannot read). Your display name and, if you add one, your portrait. What you write: journal entries, petitions, decrees, assizes. What you mark: highlighted verses, bookmarks, territory assignments. Your answers to the daily question. If you subscribe, a customer reference from our payment processor — we never see or store your card number. If you invite an accountability partner: the partnership record, and which items you have chosen to share. If you speak an entry rather than type it, the recording itself is kept privately with that entry. Your speech is turned into words by your own browser; the audio is never sent to a transcription service or to anyone else. If you arrived from a link that identified where it was shared, we keep that short label (for example, a video name) with your account so we know which content is helping people find this.

We do not sell your data. We do not share it with advertisers. We do not use anything you write to train artificial intelligence models. We do not read your entries except where you explicitly send them to us as feedback.

You, and nobody else — unless you deliberately choose otherwise.

Our database restricts every entry to the person who wrote it, enforced at the database level rather than only in the app. No other user can reach your writing by default, and most of it can never be shared at all.

If you invite an accountability partner, you may choose to show them specific things: a standing order you have set, whether you held an assize and when, how many days the King has had the first word, which territories you govern, and — one at a time, only when you deliberately choose it — an individual journal entry or an answered petition. Nothing is shared until you turn it on, item by item. Ending a partnership removes their access immediately.

Some things can never be shared with anyone, under any setting: journal entries you have not individually marked, petitions you have not individually marked, the answers you write in an assize, any recording you make with your voice, unsaved drafts, your highlights and reading position, and anything you send us as feedback.

As with any hosted service, the operator has technical access to the database. We do not read your entries. Administrative access to member records is logged, and we will never read, publish, sell, or share what you write. What the operator does use is account-level information: your email address, display name, plan, and how many entries you have written.

If we receive a valid legal order compelling us to produce your information, we will comply with it. Where the law permits us to do so, we will tell you before we hand anything over.

Export everything you have written at any time, in Markdown and JSON, from Settings. No email required, no fee. Delete your account at any time; we offer you the export first. Deleted entries are recoverable for 30 days, then permanently removed.

We use a session cookie to keep you signed in. For product measurement we use PostHog, hosted in the European Union and configured without tracking cookies. It records only that an action happened — that an entry was written, that a chapter was opened — never what you wrote, never the verse you chose, never your email address. We use no advertising trackers and no third-party marketing pixels.

For stability we use Sentry to receive error reports. Those reports carry the technical fault and an anonymous account identifier only. Journal text, petitions, decrees, assize answers and email addresses are stripped before a report leaves your device, and session recording is switched off entirely.

This service is not directed at children under 13, and we do not knowingly collect their information.

If this policy changes materially, we will tell you in the app before the change takes effect.