Privacy Policy

1. Introduction

Open Altar, Inc. ("we," "us," "our") respects your privacy. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use Open Altar ("the Service").

By using the Service, you consent to the practices described in this Privacy Policy.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, display name (optional), chosen spiritual companion, faith traditions, sacred texts preferences
• Reflection Content: Text reflections, voice recordings (converted to text), emotions selected, spiritual questions, and prompts you respond to
• Subscription Information: Billing details processed by Stripe (we do not store full payment card details)

2.2 Information Automatically Collected

• Usage Data: Pages visited, features used, time spent, interaction patterns
• Device Information: Browser type, operating system, IP address, device identifiers
• Cookies & Similar Technologies: Session cookies, authentication tokens, analytics identifiers

2.3 AI-Generated Data

As you use the Service, we generate and store:

• AI-generated spiritual reflections and guidance
• Metadata about your reflections (themes, emotions, spiritual states, patterns)
• Semantic embeddings (mathematical representations of your reflection content used to surface connections between your past reflections)
• Periodic insights (weekly, monthly, quarterly, and annual summaries)
• Voice-generated audio files (if you use voice features)

3. How We Use Your Information

We use your information to:

• Provide the Service: Generate personalized reflections, track patterns, deliver insights, create voice content
• Improve the Service: Analyze usage patterns, test new features, fix bugs, enhance AI models
• Communicate with You: Send service updates, respond to support requests, deliver subscription notifications
• Process Payments: Manage subscriptions, process billing through Stripe
• Ensure Security: Detect fraud, prevent abuse, enforce our Terms of Service
• Comply with Legal Obligations: Respond to lawful requests, protect rights and safety

4. How We Share Your Information

We share data with:

4.1 Service Providers

• Anthropic: AI processing for generating reflections (text content is processed but not stored by Anthropic)
• OpenAI: Embedding generation for semantic search and voice synthesis
• Supabase: Database, authentication, and file storage hosting
• Stripe: Payment processing (we do not store full payment card details)
• Vercel: Application hosting and deployment
• Postmark: Transactional email delivery (password resets, account notifications)
• Sentry: Error monitoring and application performance (collects technical error data, not reflection content)

4.2 Analytics & Monitoring

We use privacy-focused, server-side analytics to track aggregate usage events (such as reflections created and subscriptions started). We do not use third-party advertising trackers or share analytics data with advertisers. Error monitoring (Sentry) collects technical diagnostic data to identify and fix bugs but does not capture reflection content.

4.3 Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect the rights, safety, or property of Open Altar, our users, or the public.

4.4 Business Transfers

If Open Altar is involved in a merger, acquisition, or asset sale, your information may be transferred. We will notify you before your information becomes subject to a different privacy policy.

5. Data Retention

We retain your information for as long as:

• Your account is active
• Needed to provide the Service
• Required by law or for legitimate business purposes

If you delete your account, we will delete or anonymize your personal data within 90 days, except where retention is required by law.

6. Your Rights

Depending on your location, you may have the following rights:

6.1 Access & Correction

You can access and update most of your information through your account settings.

6.2 Deletion

You may request deletion of your account and personal data by contacting us at support@openaltar.app.

6.3 Data Portability

You may request a copy of your reflections and personal data in a portable format.

6.4 Opt-Out

You may opt out of marketing emails by following unsubscribe instructions in those emails. You cannot opt out of service-related communications (e.g., subscription confirmations).

6.5 Do Not Track

Our Service does not respond to Do Not Track signals at this time.

7. AI Processing & Your Data

Your reflections are processed by AI models (Anthropic Claude) to generate personalized spiritual guidance. Important details about this processing:

• Your reflection text is sent to Anthropic's API for processing but is not used to train their AI models under their commercial API terms
• Anthropic does not retain your data after processing the request
• OpenAI receives text for voice synthesis and embedding generation under similar commercial API terms
• AI-generated metadata (themes, emotions, patterns) is stored in our database to provide insights over time
• Semantic embeddings are mathematical representations — they cannot be reverse-engineered back into your original text

8. Security

We implement industry-standard security measures to protect your information, including:

• Encryption in transit (HTTPS/TLS)
• Encryption at rest for sensitive data
• Access controls and authentication
• Regular security assessments

However, no system is completely secure. We cannot guarantee absolute security of your data.

9. Age Requirement

Open Altar is intended for adults only. You must be at least 18 years of age (or the age of majority in your jurisdiction) to use the Service. We do not knowingly collect personal information from individuals under 18. If you are a parent or guardian and believe we have collected information from someone under 18, please contact us immediately at support@openaltar.app, and we will delete that information.

10. International Data Transfers

Your information may be transferred to and processed in the United States or other countries where our service providers operate. By using the Service, you consent to these transfers.

If you are located in the European Economic Area (EEA), UK, or other regions with data protection laws, we take steps to ensure appropriate safeguards are in place.

11. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to read their privacy policies.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy on this page
• Updating the "Last updated" date
• Sending you an email notification (for significant changes)

Your continued use of the Service after changes constitutes acceptance of the updated Privacy Policy.

13. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information
• Right to opt out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your privacy rights

To exercise these rights, contact us at support@openaltar.app.

14. European Privacy Rights (GDPR)

If you are located in the EEA or UK, you have rights under the General Data Protection Regulation (GDPR), including:

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent

To exercise these rights, or if you have concerns about how we process your data, contact us at support@openaltar.app.

You also have the right to lodge a complaint with your local data protection authority.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: