Privacy Policy

Your trust and spiritual privacy are sacred. This Privacy Policy describes how GodCalm (iOS and Web/PWA) by DamilanTech handles your information with transparent, local-first privacy safeguards.

Clear & Transparent Summary: Your personal reflections, prayers, and spiritual progress live securely on your device by default. Cloud synchronization is 100% optional. We never sell data to advertisers, show zero third-party ads, and you can permanently delete your account with one click anytime.

1. Data Controller & Scope

This Privacy Policy governs your use of the GodCalm iOS application, the Progressive Web App (GodCalm Web / PWA), and all related services provided by DamilanTech ("we", "us", "our"). The data controller responsible for personal data is DamilanTech, reachable at [email protected].

2. Information We Collect

GodCalm is built around data minimization principles. We only collect the minimal information necessary to provide the service:

• On-Device Data (Local): Your daily spiritual journey completions, private journal reflections, prayers, bookmarked scriptures, and consistency streaks. Stored on your device (IndexedDB / SwiftData).
• Account Data (if you choose to sign up): Sign in with Google: Public display name, email address, and profile picture avatar provided by Google OAuth. We never access your Google password or Google Drive.; Sign in with Apple: Secure identifier and email (or private Apple Relay address) you authorize. We never receive your Apple ID password.; Email & Password: Email address and salted cryptographic hash stored securely in Supabase Auth.
• Cloud Synced Data: If logged in, journal entries, favorites, and plan progress are backed up over TLS to Supabase so you can seamlessly access your journey across iOS, Android, and Web.
• Subscription Entitlement: Status of your Pro subscription (active, trialing, canceled) managed via Stripe or Apple StoreKit. We never see or store full credit card numbers or CVCs.

3. Accounts & Sign-In (Google, Apple, Email, Guest Mode)

You can use GodCalm completely offline and anonymously in Guest Mode. If you choose to back up your progress, authentication is handled through Supabase with strict Row-Level Security (RLS) policies guaranteeing that only your authenticated user ID can read or write your personal data.

4. Local-First Architecture & Cloud Sync

Your reflections and prayers are private. Our local-first system allows full offline usage of the Bible, devotional reflections, and journal. Cloud sync occurs in the background via encrypted TLS connections.

5. Payments & Subscriptions (Stripe & Apple App Store)

GodCalm offers Weekly, Monthly, and Annual (with a 7-day free trial) subscriptions:

• Web & Android Purchases (Stripe): Securely processed by Stripe, Inc. (PCI-DSS Level 1 certified). Supports credit/debit cards, Google Pay, and Apple Pay Web. Users can manage or cancel subscriptions anytime via the self-service Stripe Customer Portal.
• iOS In-App Purchases (Apple App Store): Sold exclusively through Apple StoreKit 2. Subscriptions renew automatically unless canceled in Apple ID account settings under Apple's Privacy Policy.

6. Sound Sanctuary, Notifications & Audio

The Sound Sanctuary generates procedural ambient soundscapes in real time on your device using Web Audio API / AudioWorklets. Local reminders are scheduled on-device without location tracking or third-party ad networks.

7. Aggregated Analytics, Cookies & Zero Advertising Policy

Zero Ad Tracking: GodCalm contains zero third-party advertising SDKs or data brokers. We never sell, rent, or monetize your personal information with advertisers.

Anonymized Metrics: We use privacy-conscious analytics tools such as Google Analytics 4 (GA4) solely to measure aggregated platform performance, website traffic, device categories, and application reliability to continuously improve the user experience. These metrics are strictly aggregated and anonymous; they never capture, store, or transmit your personal devotional reflections, prayers, or private journal entries.

8. Data Retention & Permanent Account Deletion

You can permanently delete your account directly within GodCalm's Settings (Delete Account button). This automatically revokes third-party tokens and initiates a cascading database purge removing all user records, journals, and progress.

9. Security Safeguards & Encryption

We implement TLS 1.3 network encryption in transit, sandboxed local storage, and database row-level security (RLS) policies restricting each record strictly to its owner.

10. Children's Privacy

GodCalm is not directed at children under 13 and we do not knowingly collect personal data from children. Contact [email protected] for prompt removal if needed.

11. International Privacy Rights (GDPR & CCPA/CPRA)

Users in the European Union, UK, California, and worldwide have rights to access, export, correct, or erase their personal data. These rights can be exercised directly within the app or by emailing our privacy team.

12. Changes & Official Contact Details

Material updates to this policy will be indicated by the date at the top. For questions or privacy inquiries, contact:

Developer: DamilanTech Support Email: [email protected] Official Websites: damilantech.com / godcalm.com