Privacy policy

Who this applies to

This policy applies to your use of PocketShepherd across our web experience, iPhone experience, account flows, subscription flows, newsletter signup, support requests, and AI-powered study features.

Information we collect

Depending on how you use PocketShepherd, we may collect:

• Account and authentication details, such as your email address, login method, session identifiers, and account-confirmation status.
• Profile details you provide, such as first name, last name, and reading preferences.
• Study content you create, including bookmarks, highlights, AI notes, saved quote likes, reading progress, and scripture selections you choose to save.
• Refiners Fire data, including session messages, session context, generated reports, voice-session metadata, and related usage records.
• Subscription and billing records, including plan tier, billing provider, renewal status, provider transaction identifiers, and customer or subscription IDs returned by Stripe or Apple.
• Optional cancellation feedback you choose to share in account settings, including a structured reason and any private note you provide when ending a web-managed subscription.
• Optional Focus Plan path feedback you choose to submit from the iPhone app, including a rating, selected tags, and any note you provide. Daily reflections, closing reflections, and Shepherd reflection text remain device-local in the current iPhone experience and are not sent with this feedback.
• Newsletter signup details, such as email address, optional first and last name, and signup source for the Pocket Shepherd Sunday Letter.
• Support and operational information, such as emails you send us, error logs, device or browser context, and abuse-prevention or reliability signals.
• Privacy-safe product insights records, such as pseudonymous event telemetry for bookmarks, highlights, Focus Plan progress events, native reader activity, AI requests, newsletter signup funnels, checkout funnels, and derived high-level topic labels used to understand broad study interests without copying raw spiritual questions, prayers, reflections, search strings, or AI replies into analytics reports.
• Local browser data, such as auth cookies, local storage, and session storage used for sign-in continuity, onboarding state, preferences, and in-app experience continuity.
• Microphone audio and related voice-session transport data only when you intentionally use voice features.

How we use information

• Provide account access, sync your saved study data, and keep you signed in.
• Deliver scripture study tools, Refiners Fire responses, and voice features.
• Restore and manage premium entitlements, process renewals, reconcile subscriptions, and handle support questions about billing.
• Review optional cancellation feedback so we can improve product clarity, reliability, and value without storing that freeform feedback in the privacy-safe analytics tables.
• Review optional Focus Plan path feedback so we can understand which paths are helpful or need improvement without uploading daily journal reflections.
• Measure reliability, investigate abuse or fraud, enforce usage limits, and protect the service.
• Send the Sunday Letter or respond to support requests when you ask us to do so.
• Understand product health through analytics and error monitoring so we can improve the service.
• Review aggregate, anonymous product trends so we can plan newsletters, lesson ideas, product priorities, and support improvements without profiling users from raw conversations.

We do not sell your personal information.

Service providers and sharing

We share information only as needed to run PocketShepherd, comply with law, prevent abuse, or complete services you request. Our current processors and platform partners may include:

• Supabase for authentication, session management, and database storage.
• xAI for server-side AI text and realtime voice features.
• Stripe for web subscription checkout and related billing operations.
• Apple for iPhone subscription billing and account-level App Store purchase flows.
• Beehiiv for the voluntary Pocket Shepherd Sunday Letter mailing list.
• Resend for operational owner digest emails when internal product reporting is enabled.
• Sentry for error monitoring and incident diagnostics.
• Vercel Analytics, Vercel Speed Insights, and Vercel hosting infrastructure for product delivery, usage analytics, and performance diagnostics.
• Google, when you choose Google sign-in, under Google's own policies and terms.

We may also disclose information if required by law, to protect users or the service, or in connection with a merger, acquisition, financing, or asset transfer involving Winten AI Inc..

Cookies, storage, and device permissions

PocketShepherd uses cookies and similar storage technologies for auth continuity, onboarding state, theme and reading preferences, checkout continuation, and other account-related flows. If you use voice features, we request microphone access so audio can be sent to the voice session you start. You can change browser permissions and local storage settings, but some features may stop working correctly.

AI and voice features

AI requests are executed server-side. Your prompts, saved AI notes, Refiners Fire text sessions, voice-session metadata, and generated reports may be processed to produce responses, maintain session continuity, enforce usage and abuse controls, and improve reliability. Provider API keys do not live in the client application.

When product insights are enabled, we may also derive coarse topic labels from AI study requests and related study actions that the service already processes. Those labels are stored separately from raw conversation content and are used only in aggregate, internal reporting with low-volume suppression.

Retention, deletion, and your choices

We keep account and study data for as long as your account remains active or as needed to operate the service, comply with law, resolve disputes, prevent fraud, and enforce our rights. You can delete saved content in the product where those controls are available. You can delete your account in the iPhone app or ask us to help with deletion, access, or correction requests by contacting us. Fully anonymized analytics that cannot reasonably be linked back to you may be retained.

Our privacy-safe product-insights records follow shorter operational windows by default: pseudonymous product events are retained for about 60 days, derived topic labels for about 12 months, and aggregate reporting snapshots for about 24 months unless a longer period is required for security, legal, or abuse-prevention reasons.

Cross-border processing and security

Winten AI Inc. is based in British Columbia, Canada, but our providers may process information in the United States and other jurisdictions. We use administrative, technical, and contractual safeguards designed to protect your information, but no system can guarantee absolute security.

Children

PocketShepherd is a general-audience product and is intended for users age 13 and older. If you believe a child under 13 has provided personal information to us, contact us so we can review and address the report.

Changes to this policy

We may update this policy as PocketShepherd changes. If we make material changes, we will update the effective date on this page and may provide additional notice where appropriate. Continued use of PocketShepherd after an update means the revised policy will apply going forward.

Contact

Privacy requests and legal questions may be sent to privacy@pocketshepherd.com or legal@pocketshepherd.com. Support questions can be sent to support@pocketshepherd.com.

Mailing address: Winten AI Inc., British Columbia, Canada

These privacy terms work together with our Terms of Use.