Privacy Policy
Last updated May 1, 2026. Policy version 2026-05-01.
This page explains the personal data Kingdom Habits collects, why it is collected, how it is shared, and how to make privacy requests. This policy should be reviewed by legal counsel before it is treated as final legal compliance language.
What We Collect
Account data
Name, email address, Supabase Auth identifiers, profile photo URL, onboarding status, faith statement status, zip code, church search selections, group placement details, and billing customer identifiers when applicable.
Group and activity data
Group membership, roles, invitations, disciple relationships, module progress, reflections, memorization activity, notifications, and related timestamps.
Support and communications
Support chat messages, admin replies and notes, AI support context, waitlist name/email, waitlist consent evidence, invitation emails, and transactional email delivery metadata.
Payment data
Stripe customer, checkout, subscription, and billing portal records. Kingdom Habits stores Stripe customer identifiers and subscription status, while Stripe processes payment card details.
Technical data
Authentication cookies, request metadata, error reports, rate-limit keys, device/browser metadata, and security logs needed to operate and protect the service.
Why We Use Data
We use personal data to create and secure accounts, place users in groups, run app features, provide support, process donations and billing, send transactional messages, manage waitlist invitations, prevent abuse, and meet legal or security obligations. Waitlist and launch emails require explicit opt-in. Marketing or optional communications are not pre-checked.
Cookies And Tracking
The app currently uses essential Supabase Auth cookies and local preferences needed to keep users signed in and operate the product. The current codebase does not include Google Analytics, Google Tag Manager, PostHog, Meta pixels, Vercel Analytics, or Sentry browser tracking. Optional analytics or marketing trackers must be blocked until consent is collected for users where consent is required.
Sharing And Processors
- Supabase for authentication, database, storage, realtime, and local auth cookies.
- Vercel for hosting, edge routing, deployment logs, and request metadata.
- Stripe for checkout, recurring donations, customer records, invoices, and payment processing.
- Resend for transactional email and waitlist invitation delivery.
- OpenAI for support AI tooling when users interact with support chat.
- Google Maps and Places for optional church search in profile settings.
- Apple App Store and Google Play services if the app is distributed through mobile app stores.
Retention
Account and group records are kept while an account is active. Deleted accounts are deleted or anonymized where appropriate, while limited records may be retained for security, fraud prevention, payment, tax, support history, or legal reasons. Waitlist entries, invitations, support conversations, logs, and analytics-like operational metadata should be reviewed on a regular retention schedule and removed when no longer needed.
Your Privacy Requests
Email hello@mail.kingdomhabits.com to request access, export, correction, deletion, or withdrawal of optional consent. Account deletion requests are confirmed by email before processing.