Privacy Policy for Rapha

Introduction

Welcome to Rapha ("we," "our," or "us"). We are committed to protecting your privacy and ensuring you have a positive experience while using our mobile application. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Rapha mobile application (the "App").

Please read this privacy policy carefully. By using Rapha, you agree to the collection and use of information in accordance with this policy.

Information We Collect

1. Personal Information You Provide

When you create an account and use Rapha, we collect the following information:

• Account Information: When you sign in with Google, we collect your email address and name from your Google account
• Profile Information: Name, age range, gender, and other information you provide during onboarding
• Spiritual Profile: Your responses to onboarding questions about your spiritual journey, including:
  • Spiritual experience level
  • Devotional frequency preferences
  • Devotional goals and interests
  • Life stage information
  • Emotional needs and challenging issues
  • Preferred devotional themes and tones
  • Preferred devotional time
  • Additional notes about your spiritual journey

2. Information Collected Automatically

When you use Rapha, we automatically collect certain information:

• Usage Data: Information about how you interact with the App, including:
  • Devotional reading history and completion status
  • Bible passages read, highlighted, and favorited
  • Chat conversation history with our AI assistant
  • Feature usage patterns
  • Session duration and frequency
  • Streak tracking and progress metrics
• Device Information: Information about your mobile device, including:
  • Device type and model
  • Operating system version
  • Unique device identifiers
  • Mobile network information

3. Content You Create

• Chat Messages: Conversations you have with Rapha's AI assistant
• Bible Highlights and Favorites: Verses you mark as important or save for later
• Devotional Completions: Records of devotionals you've completed
• Progress Data: Your spiritual growth tracking, including streaks and milestones

How We Use Your Information

We use the information we collect to:

1. Provide and Improve Our Services

• Create and manage your account
• Personalize your devotional content based on your spiritual profile
• Generate AI-powered spiritual guidance tailored to your needs
• Track your progress and maintain streak records
• Provide Bible reading features with highlighting and favorites
• Improve the quality and relevance of devotional content
• Enhance the AI chat experience

2. Communication

• Send you important updates about the App
• Respond to your inquiries and support requests
• Notify you about new features or changes to our services

3. Analytics and Improvement

• Analyze usage patterns to improve App functionality
• Monitor App performance and identify technical issues
• Understand user engagement and feature adoption
• Develop new features based on user needs

4. Security and Safety

• Detect, prevent, and address technical issues
• Protect against fraudulent or illegal activity
• Enforce our Terms of Service

How We Share Your Information

We do not sell your personal information. We may share your information only in the following circumstances:

1. Service Providers

We share information with third-party service providers who perform services on our behalf:

• Supabase (Database and Authentication): Stores your account data, devotional progress, chat history, and user preferences. Supabase Privacy Policy
• Anthropic (AI Services): Processes your chat messages to provide AI-powered spiritual guidance. Your messages are sent to Anthropic's Claude AI, along with your spiritual profile for personalization. Anthropic Privacy Policy
• Google (Authentication): Handles user authentication through Google Sign-In. Google Privacy Policy
• Bolls Bible API: Provides Bible text for reading features. No personal information is shared.

2. Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

3. Business Transfers

If Rapha is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

4. With Your Consent

We may share your information for any other purpose with your explicit consent.

Data Storage and Security

Where Your Data is Stored

Your data is stored securely using industry-standard practices:

• Primary Database: Supabase (hosted on Amazon Web Services)
• Geographic Location: United States
• Encryption: All data is encrypted in transit (HTTPS/TLS) and at rest

Security Measures

We implement appropriate technical and organizational security measures to protect your information:

• End-to-end encryption for data transmission
• Secure authentication via Google OAuth
• Row-level security policies to ensure data isolation between users
• Regular security audits and updates
• Limited employee access to personal data

Data Retention

We retain your information for as long as your account is active or as needed to provide you services. If you delete your account, we will delete your personal information within 30 days, except where we are required to retain it for legal purposes.

Your Privacy Rights

You have the following rights regarding your personal information:

1. Access and Portability

• Request a copy of the personal information we hold about you
• Export your devotional history, chat conversations, and Bible favorites

2. Correction

Update or correct your profile information at any time through the App's settings

3. Deletion

• Request deletion of your account and associated data
• Delete specific content (chat messages, favorites, etc.) at any time

4. Opt-Out

• Opt out of certain data collection or processing activities
• Unsubscribe from promotional communications

5. Data Portability

Receive your data in a structured, commonly used format

To exercise any of these rights, please contact us at support@getrapha.co.

Children's Privacy

Rapha is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will delete such information from our systems.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country. By using Rapha, you consent to the transfer of your information to the United States and other countries where we operate.

Third-Party Links

The App may contain links to third-party websites or services (such as Bible study resources). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

AI-Generated Content

Rapha uses artificial intelligence technology (Anthropic's Claude) to:

• Generate personalized devotional content
• Provide spiritual guidance through chat conversations
• Tailor recommendations to your spiritual profile

Important Disclaimers:

• AI-generated content is intended for spiritual encouragement and personal reflection
• While we strive for theological accuracy, AI responses should not replace guidance from qualified spiritual leaders
• For important theological questions or significant life decisions, please consult with your pastor, spiritual advisor, or faith community
• The AI does not replace professional mental health services or crisis intervention

How Your Data is Used for AI:

• Your spiritual profile (preferences, interests, goals) is used to personalize devotional content
• Chat messages are sent to Anthropic's API for processing
• Conversation history (last 10 messages) is included for context
• Your data is not used to train Anthropic's AI models without explicit consent
• Chat sessions are isolated per user and not shared with other users

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Updating the "Last Updated" date at the top of this policy
• Sending you an email notification (if you have opted in)
• Displaying a prominent notice in the App

Your continued use of Rapha after any changes indicates your acceptance of the updated Privacy Policy.

Data Breach Notification

In the event of a data breach that affects your personal information, we will:

• Notify you within 72 hours of discovering the breach
• Describe the nature of the breach and data affected
• Provide steps you can take to protect yourself
• Report the breach to relevant authorities as required by law

California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request details about the personal information we collect and how we use it
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt out of the sale of personal information (note: we do not sell personal information)
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

To exercise these rights, contact us at support@getrapha.co.

European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Legal Basis for Processing: We process your data based on:
  • Your consent (for personalized devotional content and AI chat)
  • Contract performance (to provide App services)
  • Legitimate interests (to improve our services)
• Right to Lodge a Complaint: You may file a complaint with your local data protection authority

Cookies and Tracking Technologies

Rapha does not use cookies in the traditional web sense. However, we do use:

• Local Storage: To cache devotional content and preferences on your device
• Session Management: To keep you logged in securely
• Analytics: To understand app usage (anonymized where possible)

You can clear local data by deleting and reinstalling the App or clearing app data in your device settings.

Automated Decision-Making

We use automated systems to:

• Generate personalized devotional plans based on your preferences
• Recommend devotional topics and themes
• Provide AI chat responses

You can always override automated recommendations or request human review of AI-generated content by contacting support.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

• Email: support@getrapha.co
• Website: https://getrapha.co/privacy
• Support: Available through the App's settings → Help & Support

Response Time: We aim to respond to all privacy-related inquiries within 5 business days.

Summary of Key Points

• We collect account information, spiritual profile data, usage data, and content you create
• We use your information to personalize your experience and provide AI-powered spiritual guidance
• We share data only with essential service providers (Supabase, Anthropic, Google)
• We protect your data with encryption and security best practices
• You control your data with rights to access, correct, delete, and export
• We're transparent about AI usage and third-party services
• We don't sell your personal information to anyone

Acknowledgment

By using Rapha, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.