Privacy Policy

• Account data — your email address and authentication records managed through Supabase.
• Content you choose to save — conversations, journal entries, prayer requests, favourite verses, highlights, notes, and optional personal context.
• Usage analytics — when this optional feature is enabled, limited events may be used to understand feature adoption and service performance. It is disabled for the controlled beta. We do not use private journal or prayer content as analytics labels.
• Feedback — what you write in “Send feedback”, the type you choose, and the page you sent it from (the page address only, never what you typed on that page). Your email is stored with it only if you tick “You may email me about this”. Feedback is visible only to the Shalom team, and is deleted if you delete your account.
• Payment data — if you subscribe, Paddle processes payment and billing information as merchant of record. We do not store complete card details.
• Technical data — device/browser information, security logs, approximate network identifiers used for rate limiting, fraud prevention, and service reliability, plus local browser storage for preferences and guest features.

We process information where necessary to:

• provide the service you request and maintain your account;
• generate and verify Scripture-grounded responses;
• protect Shalom, its users, and our infrastructure from abuse;
• process subscriptions and comply with financial obligations;
• improve reliability and product experience;
• comply with applicable Nigerian law; and
• send optional communications where you have consented or where otherwise permitted by law.

We do not sell your personal data. Where consent is the legal basis, you may withdraw it without affecting processing already carried out.

When you talk to Shalom or use prayer points, the message you send and relevant Scripture context may be transmitted to Google's AI services to generate and validate a response. Search text may also be used to create embeddings for Bible retrieval. Avoid including information you do not want processed by an external AI provider. AI output may still be imperfect — see our Disclaimer.

• Supabase — authentication, database, and related infrastructure.
• Google — AI generation, validation, and embeddings.
• Paddle — subscription billing and payments.
• Hosting and email providers — to operate Shalom and deliver service communications.

Some providers may process data outside Nigeria. Where required, we use contractual, technical, and organisational safeguards intended to provide an appropriate level of protection.

We retain saved content while your account remains active or until you delete it, subject to limited backup, fraud-prevention, dispute, tax, and legal-retention obligations. Public verified answers expire under the product's publishing rules and may be removed earlier using the available revocation control. Local-only guest information remains on your device until you clear it.

Subject to applicable exceptions, you may request access to your personal data, correction, deletion, restriction or objection to processing, portability, and information about relevant safeguards. You may also withdraw consent where processing depends on consent.

Shalom provides account export and deletion controls. You may also contact us to exercise a right. We may need to verify your identity before completing a request.

You may lodge a complaint with the Nigeria Data Protection Commission (NDPC) if you believe your data has been processed unlawfully. We encourage you to contact us first so we can investigate and resolve the issue.

Shalom is not directed to children under 13. A person below the age required to consent independently under applicable law should use the service only with appropriate parent or guardian involvement. If you believe a child has submitted personal data improperly, contact us so we can investigate and remove it where required.

We use technical and organisational measures including encryption in transit, access controls, server-side secrets, database row-level security, and abuse prevention. No system is completely secure. Where a personal-data breach creates a legal notification obligation, we will take the steps required by applicable law.

We may update this policy as Shalom changes. Material revisions will be identified through the “Last updated” date and, where appropriate, an in-product notice.

Privacy questions or requests may be sent to shalom.4.app@gmail.com.