We take privacy seriously — perhaps more seriously than most. This policy explains what we collect, why, and the controls you have. Plain language version: your sermons are yours, we don't train shared AI models on your content, and we collect the minimum data required to operate.
1. Information We Collect
- Account data: name, email, church/organization name, billing details (processed by Stripe).
- Content: sermons, outlines, and other materials you create or upload to the Service.
- Usage data: anonymized telemetry about app stability and feature usage. You can opt out in Settings.
- Device data: macOS version, app version, and locale, used solely for compatibility and bug reports.
2. How We Use Information
- To provide and operate SundayFlow (drafting, sync, support).
- To process payments and prevent fraud.
- To send essential service notices (we do not send marketing without your consent).
- To improve the Service in aggregate. We do not train shared AI models on Your Content.
3. Payments & PCI
Payments are processed by Stripe, a PCI-DSS Level 1 service provider. We never see, store, or transmit raw card numbers, CVVs, or full card data. Tokens returned by Stripe are stored only to manage your subscription.
4. AI Processing
When you use generative features, prompts and relevant context are sent to our AI providers under contractual no-training agreements. Your Content is not used to train shared models. You can disable cloud generation entirely from the Mac app and use only on-device features.
5. Data Storage & Security
- All data in transit is encrypted with TLS 1.2+.
- Data at rest is encrypted with AES-256.
- Sermon content sync is end-to-end encrypted with keys held only on your devices when E2EE sync is enabled.
- Access to production systems requires hardware-key MFA and is logged.
- We perform regular vulnerability scanning and dependency audits.
6. Sharing
We do not sell personal data. We share data only with subprocessors required to operate the Service (hosting, payments, AI providers, email delivery), and only under contractual data-protection terms. A current list of subprocessors is available on request.
7. Your Rights
You may access, export, correct, or delete your personal data at any time from inside the app or by emailing privacy@sundayflow.app. We respond within 30 days. Residents of the EU/UK and California have additional rights under GDPR and CCPA, which we honor regardless of your location.
8. Retention
Your Content is retained while your account is active. After cancellation, you have 30 days to export, after which we permanently delete or anonymize your data within 90 days, except where retention is required by law (e.g. tax records).
9. Children
SundayFlow is not directed to children under 13. We do not knowingly collect personal information from children.
10. Changes
We will notify you by email at least 30 days before any material change to this policy.
11. Contact
Privacy questions or requests: privacy@sundayflow.app