Privacy Policy

Faithify ("we," "us," "our") operates the website at www.faithifyz.com and the Faithify audio learning platform. We are the data controller responsible for your personal information collected through our Service.

This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you visit our website, create an account, subscribe to our Service, or otherwise interact with us.

2.1 Information you provide directly:

2.2 Information collected automatically:

• Usage data: Pages visited, features used, time spent on the platform
• Device data: Browser type, operating system, device type
• Log data: IP address, access timestamps, referring URLs
• Cookies: Session cookies and preference data (see Section 9)

2.3 Information we do NOT collect:

• Full payment card numbers (handled entirely by Stripe)
• Government-issued ID numbers
• Audio recordings or voice data from users
• Location data beyond country/region (for tax purposes only)
• Biometric data of any kind
• Social media profile data

We use the information we collect for the following purposes:

• Providing the Service: Creating and managing your account, processing payments, enabling audio streaming, managing child profiles
• Customer support: Responding to your questions, resolving issues, processing refund requests
• Service communications: Sending subscription confirmations, renewal reminders, payment receipts, and important service updates
• Improving the Service: Analyzing usage patterns to understand which content is most valuable and improve our platform
• Legal compliance: Meeting our legal obligations, enforcing our Terms of Service, and protecting our rights
• Security: Detecting and preventing fraudulent activity, abuse, or unauthorized access

Marketing emails: We may send promotional emails about Faithify features, new content, or special offers. You may opt out of marketing emails at any time by clicking "Unsubscribe" in any email or contacting us at info@faithifyz.com. Opting out of marketing emails does not affect transactional emails (receipts, account alerts).

We share your information only in the following limited circumstances:

4.1 Service providers (processors):

All service providers are contractually bound to:

• Process your data only according to our instructions
• Maintain appropriate security measures
• Not use your data for their own purposes
• Delete or return your data when our relationship ends

4.2 Legal requirements: We may disclose your information if required by law, court order, or government authority, or if we believe disclosure is necessary to protect the safety of any person, prevent fraud, or enforce our Terms of Service.

4.3 Business transfers: In the event of a merger, acquisition, or sale of all or part of Faithify's assets, your information may be transferred to the acquiring entity. We will notify you by email prior to any such transfer.

Protecting children's privacy is one of our highest priorities. Faithify is designed as a family platform managed entirely by parents or legal guardians. We comply with the Children's Online Privacy Protection Act (COPPA) and similar international regulations.

Our approach to children's data:

• Faithify does not allow children under 13 to create independent accounts
• All accounts are created and controlled by a parent or guardian aged 18+
• Child profiles contain only: first name, age, emoji avatar, and learning tier
• We do not collect email addresses, location data, or behavioral data from child profiles
• Child profile data is linked exclusively to the parent account and not shared with any third party
• We do not serve advertising of any kind to children or their profiles

Parents may review, update, or delete their children's profile data at any time through the parent dashboard or by contacting us directly.

We retain your personal information for as long as necessary to:

• Maintain your active account and provide the Service
• Comply with legal, tax, and accounting obligations
• Resolve disputes and enforce our agreements

Specific retention periods:

We implement industry-standard technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

Our security measures include:

• Encryption in transit: All data transmitted between your device and our servers is encrypted using TLS/HTTPS
• Encryption at rest: Stored data is encrypted using AES-256 encryption via Supabase
• Password security: Passwords are hashed and never stored in plain text
• Payment security: All payment processing handled by Stripe (PCI DSS Level 1 compliant) — we never store card details
• Access controls: Row-level security ensures users can only access their own data
• Secure authentication: Account access protected by secure session tokens

Depending on your location, you may have the following rights regarding your personal information. To exercise any of these rights, contact us at info@faithifyz.com.

• Right to access: Request a copy of all personal data we hold about you
• Right to correction: Request correction of inaccurate or incomplete data
• Right to deletion: Request deletion of your personal data ("right to be forgotten")
• Right to portability: Request your data in a machine-readable format
• Right to restriction: Request that we limit how we process your data
• Right to object: Object to processing based on legitimate interests or for direct marketing
• Right to withdraw consent: Where processing is based on consent, withdraw it at any time

How to submit a request: Email info@faithifyz.com with the subject line "Privacy Request" and describe your request. We may need to verify your identity before processing your request.

Faithify uses cookies and similar technologies to operate the Service and improve your experience.

Types of cookies we use:

Local storage: We use browser local storage to save child profile preferences and playback state on your device. This data stays on your device and is not transmitted to our servers unless you are logged in.

Managing cookies: You can control cookies through your browser settings. Disabling essential cookies will prevent you from logging in and using the Service.

Faithify integrates with a small number of carefully selected third-party services necessary to operate the platform. Each provider has their own privacy policy which we encourage you to review:

• Stripe (payments) — stripe.com/privacy
• Supabase (authentication & database) — supabase.com/privacy
• Squarespace (website hosting) — squarespace.com/privacy
• Google Fonts (typography) — policies.google.com/privacy

Our website may contain links to third-party websites (such as our Amazon book listings). We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

Faithify serves users globally, including families in the United States, Europe, Canada, Australia, and other countries. Our infrastructure (Supabase, Stripe, Squarespace) may process and store your data in the United States and other countries.

When we transfer personal data from the European Economic Area (EEA), United Kingdom, or other regions with data protection laws, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Transfers only to processors who maintain adequate data protection standards
• Reliance on our service providers' own compliance frameworks

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with specific rights regarding your personal information.

You have the right to:

• Know what personal information we collect, use, disclose, and sell (we do not sell)
• Request deletion of your personal information
• Opt out of the "sale" of personal information (we do not sell personal information)
• Non-discrimination for exercising your CCPA rights
• Correct inaccurate personal information
• Limit use and disclosure of sensitive personal information

To submit a CCPA request, email info@faithifyz.com with "CCPA Request" in the subject line. We will verify your identity and respond within 45 days.

If you are located in the European Union or United Kingdom, the General Data Protection Regulation (GDPR) or UK GDPR applies to our processing of your personal data.

Our legal basis for processing:

Your GDPR rights include: access, rectification, erasure, restriction, portability, and objection. You also have the right to lodge a complaint with your local supervisory authority.

To exercise your GDPR rights, contact us at info@faithifyz.com. We will respond within 30 days.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last updated" date at the top of this policy
• Send a notification to your registered email address
• Display a prominent notice on our website for a reasonable period

We encourage you to review this Privacy Policy periodically. Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated policy.

The current version of this Privacy Policy is always available at faithifyz.com/privacy.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: info@faithifyz.com
• Website: www.faithifyz.com
• Subject line: "Privacy Request" or "Privacy Question"
• Response time: Within 48 business hours for general questions; within 30 days for formal data rights requests