Privacy Policy

1. Introduction

CovenantHeart ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and safeguard your personal information when you use our application and services. By using CovenantHeart, you agree to the practices described in this policy.

2. What Data We Collect

We collect the following types of information:

• Email address — used for account creation, authentication, and service-related communications.
• Name — used to personalize your experience within the app.
• Conversation data — the messages and interactions you have with our AI companion are stored to provide continuity and context in your conversations.
• Usage data — anonymized analytics to help us understand how the app is used and improve the experience.

3. How We Use Your Data

We use your data for the following purposes:

• To provide and maintain the CovenantHeart service, including personalized AI-driven relationship guidance.
• To improve AI responses and model performance by analyzing conversation patterns (in anonymized or aggregated form where possible).
• To send you important service updates, security alerts, and optional marketing communications (which you can opt out of).
• To process payments and manage subscriptions through our payment provider.

4. Data Storage & Security

We use Supabase as our backend infrastructure and database provider. Your data is stored securely on Supabase servers with industry-standard encryption in transit and at rest. Supabase is SOC 2 Type 2 compliant and follows strict security practices.

5. AI Processing

CovenantHeart uses the Anthropic Claude API to generate AI responses. When you send a message, your conversation data is transmitted to Anthropic's servers for processing. Anthropic does not use your data to train its models unless you explicitly opt in. For more details, please review Anthropic's Privacy Policy.

6. Payment Processing

We use Stripe to process payments for subscriptions. We do not store your full credit card details on our servers. Stripe handles all payment information in accordance with PCI-DSS standards. For more information, see Stripe's Privacy Policy.

7. Data Sharing & Selling

We do not sell, trade, or rent your personal data to third parties. We only share data with trusted service providers (such as Supabase, Anthropic, and Stripe) as necessary to operate our service, and only under strict confidentiality agreements.

8. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete information.
• Delete your account and all associated data at any time through the Settings page or by contacting us.
• Export your data in a portable format.
• Object to certain processing activities, such as marketing communications.

To exercise any of these rights, please contact us using the information below.

9. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with our services. If you delete your account, we will securely delete or anonymize your data within 30 days, except where retention is required by law.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the app. The "Effective date" at the top of this page indicates when the policy was last revised.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact us: