Privacy

Imago holds some of the most personal data an app can hold: your honest answers about your walk with God, your identity, your struggles, your rest, and your seasons of suffering and joy. We treat that the way a pastor treats a confidence. It is yours. We do not sell it, we do not share it for advertising, we do not use it to train third-party AI models, and you can take all of it with you or delete all of it at any time.

Account basics: your name, email address, and password (stored as a hash we cannot read). Formation data, which is sensitive by nature: your instrument answers and scores, identity declarations, freedom diagnostics, rest and Sabbath patterns, spiritual gifts results, daily thread responses, how your walk with God has felt (your pulses), the seasons you name, notes you choose to write, and what the formation coach remembers about you. Operational data: when you signed in and basic usage events that keep the product working.

Under privacy law, much of this is treated as sensitive personal information, similar to health data. We treat it that way regardless of jurisdiction. You consent to this processing when you create your account, and the moment of that consent is recorded.

One reason: to show you an honest picture of your own formation and help you take it to God and your people. We do not have an advertising business, an audience-data business, or any other use for your interior life.

You. Your data is protected by row-level security, which means the database itself refuses to show your rows to any other user. If you choose to share a snapshot with one trusted person, they see exactly the frozen picture you chose to share, until it expires or you close it. No open feeds, no leaderboards, no comparisons.

A small number of service providers process data on our behalf (listed below). Growing Godly staff access production data only to fix a problem you raise, and never browse it.

Imago generates pastoral reflections using Anthropic's Claude models. When a reflection is generated, the relevant slice of your instrument data is sent to Anthropic's API to produce the text, under a commercial agreement in which your data is not used to train their models. The reflections describe what your data shows and ask questions. They never claim to speak for God.

For as long as you keep your account, because longitudinal history is the point of a formation mirror. When you delete your account, your formation data is deleted with it. Aggregate, de-identified counts (such as how many users engaged a feature) may survive, because they contain nothing of you.

Export everything, any time, from Settings, in a machine-readable file and a readable document. Delete your account and data, from Settings, without asking permission. Correct or delete what the coach remembers about you. If you are in a jurisdiction with formal data rights (GDPR, CPRA, and their siblings), these buttons are how we honor them, and you can also write to us for anything a button does not cover.

The services that touch data on our behalf:

• Supabase (database, authentication, storage). Your data at rest lives here, in the United States.
• Vercel (application hosting and delivery).
• Anthropic (AI reflections, as described above; not used to train models).
• Resend (transactional and formation email, when email sending is enabled).
• Stripe (payments, when billing launches; Stripe sees payment details, never formation data).

We use cookies only to keep you signed in. We prefer cookieless, first-party analytics and do not run third-party advertising or tracking pixels. There is nothing here that follows you around the internet.

Write to khalil@growgodly.com. A person reads it.