Privacy Policy — After Amen

Notice: This policy is pending review by qualified legal counsel and may be revised. We collect only what is necessary to run After Amen, and we never sell your personal information.

1. What We Collect

We collect the following categories of information:

Account info: email address, display name (optional), hashed password
Church affiliation: which church(es) you have joined via join code
Your content: prayer requests, journal entries, sermon transcripts, questions you ask the AI
Usage data: session timestamps, last-active time, IP address (for security and rate limiting)
Billing info: processed by Stripe; we do not store full payment card numbers

2. How We Use Your Data

To operate the Service (authentication, AI responses, prayer wall, journal, etc.)
To send transactional emails (verification, password reset, billing receipts)
To improve the doctrinal lens and AI tuning (in aggregate, never your identity)
To prevent abuse and enforce these terms

We do not:

Sell your personal data to advertisers or data brokers
Train external AI models on your content
Share church-specific data (prayer requests, sermons) outside your church without consent

3. Third Parties That Process Your Data

To deliver After Amen, certain third parties process data on our behalf:

Anthropic (AI generation): the questions you ask are sent to Claude for response generation. Anthropic's privacy practices apply.
OpenAI (text embeddings): your questions and Bible verses are embedded as numerical vectors for semantic search. OpenAI's privacy practices apply.
Render (hosting + database): your account and content are stored in Render's managed Postgres database.
Hostinger (marketing site + transactional email): pilot signups and password reset emails are sent via Hostinger.
Stripe (billing): payment information is processed by Stripe under their privacy policy.

4. Data Retention

We retain your data as long as your account is active. If you delete your account, we will remove your personal data and content within 30 days, except where retention is required by law (e.g., billing records for tax purposes).

5. Your Rights

You can:

Access your data — view it in the app or request an export by emailing us
Correct inaccurate information — edit it in the app
Delete your account — via in-app settings or by emailing us
Export your journal, prayer requests, and other content — email us to request
Withdraw consent by closing your account

EU and California residents have additional rights under GDPR and CCPA, including the right to portability and the right to lodge a complaint with a supervisory authority. Contact us to exercise these rights.

6. Children's Privacy

After Amen is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If you believe we have, please contact us at info@after-amen.com and we will delete it.

7. Security

We use industry-standard security practices: passwords are hashed with Argon2id, data is transmitted over HTTPS, session tokens are stored encrypted on your device, and database access is restricted via row-level security policies. No system is perfectly secure, however, and we cannot guarantee absolute security.

8. International Data Transfers

Our service is hosted in the United States. If you access After Amen from outside the US, your data will be transferred to and processed in the United States.

9. Changes to This Policy

We may update this privacy policy as our practices change. Material changes will be communicated via email and in-app notice. The "Last updated" date at the top reflects the most recent revision.

10. Contact

Questions about your privacy? Email info@after-amen.com.