Privacy Policy

This Privacy Policy describes the practices of glitchrun ("we," "us," or "our") with respect to the personal information collected, stored, used, and processed from or of our users, visitors, and others ("you") in connection with Psalm Pal, including the website at https://pslampal.charonvii.dev and all related products and services (collectively, the "Service" or "App"). This Policy is part of our Terms and Conditions.

Psalm Pal is a faith-based companion app designed to help you engage with Scripture, prayer, and community. We take your privacy seriously and are committed to being transparent about how we handle your information.

For questions or requests regarding this Policy, please contact us at: support@charonvii.dev

Information You Provide: We collect information you provide directly, including your email address, name, prayer requests, reflections, notes, prompts you submit to the AI, and any other content you create or share through the Service.

Account Data: When you create an account, we collect your email address and a username. You may also choose to provide additional profile information such as your church affiliation or denomination.

AI Inputs and Outputs: Psalm Pal uses AI to generate responses to your questions. The prompts you submit ("Inputs") and the responses generated ("Outputs") are processed to provide the Service. If you include personal information in your Inputs, we collect that information and it may be reproduced in Outputs.

Usage Data: We automatically collect information about how you interact with the Service, including your IP address, browser type, device information, pages visited, features used, and the dates and times of your activity.

Communication Data: If you contact us via email or through the Service, we collect your name, contact information, and the contents of your messages.

Community Content: Prayer requests, comments, and other content you share in community features are visible to other users as you intend.

We use the information we collect for the following purposes:

To provide, maintain, and improve the Service, including generating AI responses to your prompts and delivering daily verse and reflection content.

To personalize your experience, including remembering your preferences, study plans, and saved verses or notes.

To communicate with you, including sending daily reflections, responding to your inquiries, and notifying you of changes to the Service or this Policy.

To ensure the safety and integrity of the Service, including detecting and preventing abuse, fraud, or unauthorized access.

To analyze and improve our Service, including understanding how users engage with features and content.

To comply with legal obligations and enforce our Terms and Conditions.

If you are located in the European Economic Area or the United Kingdom, we process your personal information based on the following legal grounds:

Consent: Where you have given clear consent for us to process your personal information for a specific purpose. You have the right to withdraw this consent at any time.

Contract: Where processing is necessary for the performance of a contract with you, such as providing the Service you requested.

Legitimate Interests: Where processing is necessary for our legitimate interests, such as improving our Service, ensuring security, and communicating with users, provided those interests do not override your rights and freedoms.

Legal Obligation: Where processing is necessary to comply with a legal obligation.

Sensitive Data: Some information you provide may constitute sensitive data (such as religious beliefs or denomination). We only process this data with your explicit consent, and you may withdraw consent at any time.

We do not sell your personal information. We may share your information only in the following circumstances:

Service Providers: We engage trusted third-party service providers who help us operate the Service, including cloud hosting (Vercel, AWS), AI model providers (OpenAI), email communications, and analytics. These providers are contractually bound to protect your information and use it only for the services we request.

Legal Requirements: We may disclose your information if we believe in good faith that it is necessary to comply with a legal obligation, protect our rights or the safety of others, investigate fraud, or respond to a government request.

Business Transfers: If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control.

With Your Consent: We may share your information for any other purpose with your explicit consent.

We implement reasonable and appropriate technical and organizational measures to protect your personal information, including encryption in transit and at rest, access controls, and secure infrastructure. However, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to read their privacy policies before providing them with your information.

The Service is not intended for anyone under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete such information. If you believe a child under 13 has provided us with personal information, please contact us immediately.

We retain your personal information for as long as your account is active or as needed to provide you the Service. After you delete your account or cease using the Service, we will retain your information for up to 12 months unless a longer retention period is required by law.

We may retain certain information longer if necessary to comply with legal obligations, resolve disputes, enforce our agreements, or for legitimate business purposes such as fraud prevention and service improvement.

When we no longer need your information, we will delete or anonymize it securely.

If you are located in the European Economic Area or the United Kingdom, you have the following rights under applicable data protection law:

Right of Access: You have the right to request a copy of the personal information we hold about you.

Right to Rectification: You have the right to correct inaccurate or incomplete personal information.

Right to Erasure: You have the right to request deletion of your personal information, subject to certain exceptions.

Right to Restrict Processing: You have the right to request that we restrict the processing of your personal information in certain circumstances.

Right to Data Portability: You have the right to receive your personal information in a structured, commonly used format and to transmit it to another controller.

Right to Object: You have the right to object to processing based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise any of these rights, please contact us at support@charonvii.dev. We will respond to your request within 30 days. You also have the right to lodge a complaint with your local data protection authority.

If you are a resident of California or other US states with comprehensive privacy laws (including Virginia, Colorado, Connecticut, and Utah), you have the following rights:

Right to Know: You have the right to request that we disclose the personal information we collect, use, and share about you.

Right to Access: You have the right to request a copy of the specific pieces of personal information we have collected about you.

Right to Delete: You have the right to request deletion of personal information we have collected from you, subject to certain exceptions.

Right to Correct: You have the right to request correction of inaccurate personal information.

Right to Opt Out: We do not sell your personal information or share it for cross-context behavioral advertising. However, you have the right to opt out of any such processing if our practices change.

Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.

To exercise your rights, please contact us at support@charonvii.dev. We will verify your request and respond within 45 days. If we decline your request, you may appeal by replying to our response.

Your information may be transferred to and processed in countries other than your own, including the United States, where our service providers are located. When we transfer personal information from the European Economic Area or the United Kingdom to countries that have not been deemed adequate by the European Commission or UK Government, we rely on appropriate safeguards such as Standard Contractual Clauses approved by the European Commission.

By using the Service, you consent to the transfer of your information to the United States and other countries as described in this Policy.

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by updating the "Last Updated" date at the top of this Policy and, where appropriate, by sending you an email notification or displaying a notice within the Service.

We encourage you to review this Policy periodically. Your continued use of the Service after changes take effect constitutes your acceptance of the updated Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: support@charonvii.dev

We are committed to working with you to resolve any privacy concerns you may have.