IRON & LIGHT
Privacy Policy
Effective date: July 17, 2026
This privacy policy applies to the Iron & Light app for mobile devices, together with any related services operated by Iron & Light (collectively, the "Application"). Iron & Light is hereby referred to as the "Service Provider".
Information We Collect
The Application collects the following categories of information:
Information you provide directly
- Account information — your email address and, optionally, a display name. If you sign in with Google, we receive your email address and name from Google.
- Content you create — journal entries, weekly reviews, habit names, and messages you send to the Spiritual Mentor.
- Support communications — if you contact us or report an AI response, we receive the information you include.
Information collected automatically
- Account identifiers — a unique user ID assigned to your account.
- Subscription status — whether you have an active subscription, which plan, and whether you are in a trial period. We do not collect or store your payment card details; all payments are processed by Google Play.
- App usage information — screens you view, features you use, and similar interactions with the Application.
- Approximate location — a city-level location inferred from your IP address by our analytics provider. We do not collect precise or GPS location.
- Device identifiers — a push notification token (if you enable notifications) and a device/installation identifier used by our analytics provider.
- Technical information — your IP address, mobile operating system, and similar device information.
How We Use This Information
- To provide the Application — authenticating you, saving your habits, streaks, journal entries, and chat history, and delivering the Spiritual Mentor feature.
- To manage your account — account creation, sign-in, subscription entitlements, and account deletion.
- To send notifications — daily mission reminders, habit reminders, weekly review reminders, and rank notifications, if you enable them.
- To understand and improve the Application — analytics about how features are used.
- To send required notices — important information about your account, security, or the Application.
- To comply with law and protect rights — including fraud prevention and responding to lawful requests.
We do not use your information for advertising, and we do not sell your personal information.
Artificial Intelligence and the Spiritual Mentor
The Application includes an AI-powered Spiritual Mentor feature. When you send a message to the Spiritual Mentor, the content of that message, along with recent conversation history for context, is transmitted to Anthropic, PBC, which processes it to generate a response. Anthropic processes this data on our behalf in order to provide the feature.
Your Spiritual Mentor conversations are also stored in our database so you can revisit past sessions. You can delete individual conversations in the app at any time, and deleting your account removes all conversation history.
Please be mindful of what you share in these conversations. The Spiritual Mentor is not a substitute for a pastor, counselor, doctor, or other qualified professional, and it is not a confidential or privileged channel.
If you believe an AI response was inappropriate or harmful, you can report it by long-pressing the message in the app.
Analytics
We use Google Analytics for Firebase to understand how the Application is used and to improve it. This service collects information about your interactions with the Application, such as screens viewed and features used, along with a device identifier, your account's user ID, and an approximate (city-level) location inferred from your IP address. We do not use this information to identify you personally and we do not use it for advertising. For more information, see Google's Privacy Policy.
Third-Party Service Providers
The Application relies on the following third-party services, each of which has its own privacy policy governing how it handles data:
| Service | Purpose | Privacy policy |
|---|---|---|
| Anthropic, PBC | Generates Spiritual Mentor responses; receives your chat messages | anthropic.com/legal/privacy |
| Supabase | Authentication, database, and server functions | supabase.com/privacy |
| Google (Firebase) | Push notifications and analytics | policies.google.com/privacy |
| Google Play | Payment processing and subscription billing | policies.google.com/privacy |
| RevenueCat | Subscription management and entitlements | revenuecat.com/privacy |
| Expo | Application build and delivery infrastructure | expo.dev/privacy |
These providers act on our behalf and are not permitted to use your information for their own independent purposes.
When We Disclose Information
The Service Provider may disclose information:
- as required by law, such as to comply with a subpoena or similar legal process;
- when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request;
- to the trusted service providers listed above, who work on our behalf, do not have independent use of the information disclosed to them, and are bound to handle it consistently with this policy.
We do not sell your personal information, and we do not share it with advertisers.
Cookies and Tracking Technologies
The Application and its third-party SDKs may use SDKs, device identifiers, and similar technologies to support functionality, analytics, and service delivery. Where required by applicable law, the Service Provider will obtain consent before using non-essential tracking technologies.
Your Rights
You may request access to, correction of, or deletion of your personal data held by the Service Provider. To exercise these rights, or to withdraw consent where processing is based on consent, contact the Service Provider at support@ironandlightapp.com.
Your California privacy rights (CCPA/CPRA)
If you are a California resident, you have the right to know what personal information is collected, the right to delete personal information, the right to opt out of the sale or sharing of personal information, and the right to non-discrimination for exercising these rights. We do not sell or share personal information as those terms are defined under the CCPA/CPRA. To exercise your rights, contact the Service Provider at support@ironandlightapp.com.
Data Deletion
You can delete your account and all associated data at any time directly in the app:
Profile → Delete Account
Alternatively, you may request deletion by emailing support@ironandlightapp.com with the subject line "Delete My Account". We will process your request within 30 days.
Deleting your account permanently removes your profile, habits, streaks, journal entries, weekly reviews, Spiritual Mentor conversations, and mission and prayer completion history from our database.
You may also delete individual Spiritual Mentor conversations in the app without deleting your account.
A web-accessible deletion request page is available at https://ironandlightapp.com/delete-account.
Opt-Out Rights
You can stop further collection of information from your mobile device by uninstalling the Application. Uninstalling stops the Application from collecting data from your device, but it does not automatically delete information that has already been transmitted. To delete that information, use the account deletion options described above.
You can disable push notifications at any time in your device settings or in the app, and you can decline notification permission entirely.
Data Retention
- Account and user-provided data — retained while your account is active. When you delete your account, this data is removed from our database.
- Automatically collected analytics data — retained by our analytics provider for up to 24 months from collection, unless longer retention is required for legal compliance.
- Aggregated and anonymized data — retained indefinitely, as it no longer identifies you.
- Data required for legal or financial compliance — including transaction records, retained as long as required by applicable law.
International Data Transfers
The Service Provider or its third-party service providers may transfer personal data to countries outside your country of residence, including outside the European Economic Area (EEA). Where applicable law requires safeguards for international transfers, the Service Provider will use appropriate mechanisms, which may include:
- Standard Contractual Clauses (SCCs) approved by the European Commission;
- adequacy decisions or other legally recognized transfer mechanisms;
- your consent, where required and legally permitted.
Data protection laws in other countries may differ from those in your jurisdiction. Where required by law, the Service Provider will apply appropriate safeguards and obtain any consent required for the transfer.
Children
The Application is not intended for children under 13 years of age, or such higher age as required by applicable law. The Service Provider does not knowingly solicit data from children or market the Application to them.
Where parental or guardian consent is required under applicable law, the Application is not intended for use without that consent. In the event the Service Provider discovers that a child has provided personal information in violation of applicable law, the Service Provider will delete it from their servers. If you are a parent or guardian and you are aware that your child has provided the Service Provider with personal information, please contact support@ironandlightapp.com so that the necessary actions can be taken.
Security
The Service Provider is concerned about safeguarding the confidentiality of your information and provides physical, electronic, and procedural safeguards to protect the information it processes and maintains. All data transmitted between the Application and our servers is encrypted in transit using industry-standard TLS encryption.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Data Breach Notification
If a data breach occurs that affects your personal data, the Service Provider will notify you in accordance with applicable legal requirements, including, where required, providing information about the nature of the breach and the steps being taken to address it.
Changes
The Service Provider may update this Privacy Policy from time to time. The Service Provider will notify you of material changes by posting the updated Privacy Policy with a new effective date. Where required by law, the Service Provider will seek your consent to material changes before they take effect.
Previous versions of this Privacy Policy will be maintained and made available upon request by contacting support@ironandlightapp.com.
Your Consent
Where processing is based on consent, you provide that consent by affirmatively opting in to the relevant feature or action. You may withdraw consent at any time without affecting processing carried out before withdrawal. Processing based on other lawful bases is carried out as described above.
Contact Us
If you have any questions regarding privacy while using the Application, or questions about these practices, please contact the Service Provider by email at support@ironandlightapp.com.