Legal

Privacy Policy

Last updated: 15 May 2026

OneTrueFaith is an Orthodox Christian companion app. We collect only the information needed to make the app work — your account, your spiritual progress, and the content you choose to create or save. We do not sell your data, and we do not use third-party advertising or tracking analytics.

1. Who we are

OneTrueFaith ("we", "us", "our") is the operator of the OneTrueFaith web app, PWA, and any future iOS or Android apps published under the same name (the "Service"), available at onetruefaith.app.

For any privacy question or request, contact us at contact@onetruefaith.app.

2. Information we collect

Account & profile. When you create an account we store your email address and an encrypted (hashed) password. If you sign in with Google, we receive your Google account email and basic profile information. You may add a display name, unique username, nickname, short bio, profile photo, country, and patron saint.

Spiritual activity. To power features like streaks, progress tracking, and saved content, we store, against your account:

  • Prayer and fasting completions
  • Bible reading progress and verse highlights
  • Reading-plan progress
  • Saved prayers, verses, quotes, videos, and akathists
  • Recently viewed items (your in-app history)
  • App settings, preferences, and reminder configurations

AI Spiritual Companion. If you use the AI bot, the messages you send and the model responses are saved to your account so you can return to past conversations. Messages are sent to AI providers (see Section 5) to generate replies. Do not share information you would not want processed by a third-party AI provider. The AI is informational and never replaces the guidance of a priest or spiritual father.

Videos and social interactions. If you upload a video, we store the video file, thumbnail, title, description, category, and your public creator name. Likes, comments, saves, and follows are stored to make the feed work. Comments and uploaded videos are publicly visible to other users of the Service.

Notifications. If you enable push notifications, we store the push subscription endpoint provided by your browser or operating system, your time zone, and your user agent so we can deliver reminders.

Technical data. Our hosting and backend providers automatically log basic request data (IP address, user agent, timestamps) for security, abuse prevention, and debugging. We do not run third-party analytics, advertising, or tracking SDKs.

3. Information stored only on your device

Some data never leaves your device and is stored only in your browser or app local storage:

  • Your private confession examination notes and check marks
  • Theme (light/dark), font size, and other appearance preferences
  • Onboarding completion flag
  • Local fallbacks for prayer, reading-plan, and reflection reminders if you are not signed in

Clearing your browser storage or uninstalling the app will permanently delete this local data. We have no copy of it.

4. How we use your information

  • To provide and operate the features you use (account, prayer, Bible, saints, fasting, videos, AI bot)
  • To save your progress, streaks, milestones, and saved content across devices
  • To send the reminders and notifications you have enabled
  • To moderate, secure, and prevent abuse of the Service
  • To respond to your support requests
  • To comply with legal obligations

We do not use your data for advertising and we do not sell or rent your personal information to anyone.

5. Sharing & third-party services

We share data only with the service providers we need to run the Service:

  • Lovable Cloud (Supabase). Hosts our database, authentication, and file storage (profile pictures, uploaded videos, audio).
  • Lovable AI Gateway. Routes AI bot requests to underlying model providers, currently Google (Gemini) and OpenAI. The conversation text you send is processed by these providers to generate a response.
  • Google OAuth. Used only if you choose to sign in with Google.
  • Web Push services. Operated by your browser or operating system vendor (e.g. Apple, Google, Mozilla) to deliver notifications.
  • App stores. If you install the mobile app, Apple and Google receive standard install and crash data per their own policies.

We may also disclose information when required by law, to protect the rights, safety, or property of OneTrueFaith or our users, or in connection with a corporate transaction (e.g. merger or acquisition), in which case we will notify users in advance.

6. Children

The Service is not directed to children under 13 (or under 16 in the European Economic Area and the United Kingdom). We do not knowingly collect personal information from children below those ages. If you believe a child has provided us with personal information, please contact us and we will delete it.

7. Your rights

You can exercise the following rights at any time:

  • Access and review your profile and saved content from inside the app
  • Correct your profile information from Profile → Edit profile
  • Delete individual items (saved prayers, verses, quotes, videos, comments, AI threads, highlights, history) from inside the app
  • Delete your entire account and all associated data from Settings → Account
  • Request a copy of your data, ask for correction, or ask us to restrict or object to processing by emailing contact@onetruefaith.app
  • If you are in the EEA or UK, lodge a complaint with your local data protection authority
  • If you are in California, exercise the rights granted by the CCPA/CPRA — we do not sell or share personal information for cross-context behavioural advertising

8. Data retention

We keep your account data for as long as your account is active. When you delete your account, we delete or irreversibly anonymise your personal information from our active systems within 30 days, except where we are required by law to retain it longer (for example, security or fraud-prevention logs). Backups are rotated regularly and overwritten in the normal course of operation.

9. Security

All connections to the Service use HTTPS/TLS. Passwords are hashed by our authentication provider and never stored or visible in plain text. Database access is restricted by row-level security so each user can only read or modify their own records. No system is perfectly secure — please use a strong, unique password and tell us immediately if you suspect your account has been compromised.

10. International data transfers

Our service providers may process and store data in countries outside your own, including the United States and the European Union. Where required, transfers rely on Standard Contractual Clauses or other lawful transfer mechanisms.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will change the "Last updated" date at the top and, for material changes, give prominent notice inside the app. Continued use of the Service after an update means you accept the revised policy.

12. Contact us

Questions, requests, or complaints about this policy or your data:

contact@onetruefaith.app

About OneTrueFaith · Home