Privacy Policy

Effective date: September 18, 2026

Christ's Reach ("we," "us," or "our") is a Christ-centered place for Scripture, prayer, private reflection, and optional connection with people you choose. We take your privacy seriously — especially because the things you share here are personal. This policy explains what we collect, how we use it, and the rights you have over your own data.

If you have questions, email us at care@christsreach.com.

1. What we collect

When you join the waitlist

• Your name (optional) and email address.
• Your IP address and browser info, used only to filter automated submissions.

When you use the app

• Account info: username, email address, and a hashed password (we never store passwords in plaintext).
• Profile & recovery context: your "why I'm here" selections and display name.
• Content you create: Reach Outs, Reflections, Resets, Temptation logs, and daily Routine check-ins.
• Circle & reach-outs: who you invite, reach-out requests you send or receive, and any responses or reactions.
• Notification preferences: whether you've enabled push or email notifications, and your daily email settings.
• Device push token: used only to deliver push notifications you've opted into.
• Activity logs: timestamps of logins and key actions, retained for security auditing.

We do not store your card or bank details on our servers. Christ's Reach is free to use; optional donations are handled entirely by our payment processor, Stripe — you enter and submit payment details on Stripe's secure page, and we never see or keep your card number. We do not use advertising SDKs or embed third-party advertising or analytics tracking pixels (no Google Analytics, no Meta pixel).

2. How we use your information

• To operate and deliver the service — show you your reflections, send reach-out alerts to your circle, surface your daily Scripture.
• To send you emails you've opted into: invitation notifications, daily Scripture emails, and app alerts.
• To keep the service secure — detect abuse, prevent spam, and protect you and your circle.
• To let you delete your account and content when you ask.

We will never use your content to train AI models or sell insights about your recovery journey.

3. Who we share it with

We share nothing with advertisers, data brokers, or analytics companies. The only disclosures that occur are:

• Your circle: content you intentionally share with your circle members (reach-outs, reactions, circle alerts). You control what is shared and with whom.
• Email delivery: we use Brevo (Sendinblue) to send transactional and notification emails. Your email address is transmitted to Brevo for this purpose only.
• Payment processing: if you choose to make an optional donation, it is processed entirely by Stripe on Stripe's own page, under Stripe's privacy policy. Christ's Reach does not receive, store, or record any part of your donation — not your card details, not the amount.
• Safety: Your private writing is private. Nobody at Christ's Reach reads your journal looking for problems, and what you write there does not trigger a report, a message, or a call. Content you intentionally share with other people — a Circle wall, a Reach Out, a request on the wider prayer board — may be reviewed if it is reported or flagged, because it is being shown to others and those shared spaces have to stay safe. Christ's Reach does not contact emergency services, your circle, or anyone else on your behalf, and no one here is monitoring members or standing by to respond. If you are in danger, the emergency numbers on our Get Help Now page reach qualified help directly — never us.
• Legal requirements: if required by a valid court order or law enforcement request, we may be compelled to disclose information. We will resist overbroad requests.

4. Email communications & how to opt out

When you join the waitlist, we will email you to let you know when Christ's Reach opens for you. Each email includes an unsubscribe link. You may also email care@christsreach.com at any time to be removed.

Inside the app, you control all notification and daily email settings from Settings → Notifications. You can disable any or all emails at any time.

5. Data retention

We retain your data as long as your account is active. When you delete your account — via Settings or by emailing us — your reflections, check-ins, temptation logs, reach-outs, circle memberships, and profile are permanently deleted. Waitlist entries are removed upon your request or when you are no longer needed to be contacted.

Anonymized aggregate statistics (e.g., total users, feature usage counts) may be retained but cannot be linked back to you.

6. Your rights

Regardless of where you live, you may:

• Access the personal data we hold about you.
• Correct inaccurate data (via Settings or by contacting us).
• Delete your account and all associated data.
• Opt out of email communications at any time.
• Object to any processing you believe is improper.

California residents have additional rights under the CCPA, including the right to know what categories of personal information are collected and the right to non-discrimination for exercising privacy rights. We do not sell personal information — ever.

To exercise any of these rights, email care@christsreach.com.

7. Security

All data is transmitted over HTTPS (TLS). Passwords are hashed with a modern one-way algorithm and are never stored in plaintext. Access to the database is restricted to authorized personnel only.

8. Children

Christ's Reach is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has provided us with information, please contact us and we will delete it promptly.

9. Changes to this policy

We may update this policy as the service grows. Material changes will be communicated via email or an in-app notice. The "effective date" at the top of this page reflects the most recent revision.

10. Contact

Questions, requests, or concerns: care@christsreach.com