1. Types of Data We Collect

We collect the following categories of personal information:

• Account Information: Name, email address, role (user/admin), and account preferences.
• Profile Data: Spiritual preferences, faith focus areas, timezone, and language settings.
• User-Generated Content: Prayer requests, testimonies, journal entries, goals, comments, and posts.
• Usage Data: Pages visited, features used, content viewed, and interaction timestamps.
• Health & Wellness Data: Temple habits, health metrics, and wellness goals (only if you use those features).
• Payment Information: Subscription tier and billing history (processed via Stripe — we never store raw card data).
• Device & Technical Data: IP address, browser type, operating system, and device identifiers.
• Communications: Support tickets and messages you send to us.

2. Purpose of Data Collection

We collect and process your data to:

• Provide, personalize, and improve the iDailyBread platform and its features.
• Send you Daily Bread devotional content, spiritual insights, and relevant notifications.
• Process payments and manage your subscription.
• Facilitate community interactions, prayer walls, and testimony sharing.
• Monitor platform security, prevent fraud, and enforce our terms.
• Provide customer support and respond to your inquiries.
• Generate aggregated analytics to improve the platform (never sold).
• Comply with legal obligations.

3. Data Sharing Practices

We do not sell your personal data. We share data only in these circumstances:

• Service Providers: With trusted vendors who help us operate the platform (see Section 4).
• Legal Requirements: When required by law, court order, or governmental authority.
• Business Transfers: In connection with a merger, acquisition, or asset sale (with notice to you).
• Safety: To protect the rights, property, or safety of iDailyBread, our users, or the public.
• With Your Consent: When you explicitly opt in to sharing (e.g., public testimonies).

4. Third-Party Services

We use the following third-party services, each with their own privacy policies:

5. Cookie Policy

We use the following types of cookies and similar tracking technologies:

• Essential Cookies: Required for authentication, session management, and basic platform functionality. Cannot be disabled.
• Functional Cookies: Remember your preferences (language, theme, notification settings). Stored in localStorage.
• Analytics Cookies: Help us understand how the platform is used (aggregated, anonymized data).

You can manage cookie preferences in your browser settings. Disabling essential cookies may prevent platform access.

6. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request that we correct inaccurate or incomplete data.
• Deletion: Request deletion of your personal data ("right to be forgotten").
• Export / Portability: Request your data in a portable format (JSON or CSV).
• Objection: Object to our processing of your data for certain purposes.
• Withdrawal of Consent: Withdraw consent for non-essential data processing at any time.

To exercise your rights, contact us at privacy@idailybread.com. We will respond within 30 days.

7. Data Retention

8. Children's Privacy (COPPA)

iDailyBread is intended for users 13 years of age and older. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will promptly delete it. If you believe a child under 13 has provided us personal information, contact us at privacy@idailybread.com. For users aged 13–17, we recommend parental supervision and encourage parents to review this policy with their children.

9. International Data Transfers

iDailyBread operates primarily in the United States. If you access our platform from outside the US, your data will be transferred to and processed in the United States, where data protection laws may differ from your country. By using our platform, you consent to this transfer. For users in the European Economic Area (EEA) or UK, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission as the legal mechanism for these transfers.

10. Security Measures

We implement industry-standard security measures to protect your data:

• All data transmission encrypted via TLS/HTTPS.
• Passwords hashed using secure algorithms (managed by Base44).
• Payment data handled exclusively by Stripe (PCI-DSS Level 1 compliant).
• Role-based access controls limiting data access to authorized personnel.
• Regular security audits and dependency updates.
• Admin actions logged in a secure audit trail.

11. Privacy Policy Updates

We may update this Privacy Policy periodically. For material changes, we will notify you via: (a) email to your registered address at least 14 days before changes take effect, (b) an in-app notification, and (c) a banner on this page. We will update the "Last Updated" date at the top. Your continued use of the platform after the effective date constitutes acceptance of the updated policy.

12. Contact for Privacy Inquiries

13. Opt-Out Mechanisms

• Marketing Emails: Unsubscribe via the link in any marketing email or in Notification Settings.
• Push Notifications: Disable in your device settings or in Notification Settings.
• Analytics: Contact us to opt out of analytics data collection.
• Public Profile: Set your profile to private in App Settings.
• Community Visibility: Post anonymously or set content visibility in Privacy Controls.
• Full Data Deletion: Request account deletion by contacting privacy@idailybread.com.