Salvazion, Inc. (“Salvazion”, “we”) respects your privacy. This policy describes what data we process in the Platform (https://salvazion.org), for what purposes, with whom we share it, and what rights you have. By using the Platform, you accept this policy together with our Terms of Service at Terms of Service.
1. Controller
Data controller: Salvazion, Inc., a Delaware corporation. Registered office: 131 Continental Dr, Suite 305, Newark, DE 19713, USA. Contact: info@salvazion.org.
2. Data we may collect
Depending on how you use the Platform, we may process:
- Account: email, name, language (English, Spanish, or Brazilian Portuguese), profile photo, onboarding preferences (purpose, city, country, date of birth, spiritual maturity, family, focus areas).
- Social sign-in: if you use Google or , identifiers and profile data the provider shares (for example email, name, photo, handle), subject to their settings and your consent.
- Platform usage: Salvation / Health / Freedom scores, streaks, badges, Bible reading progress, completed devotionals, calendar and prayer-motive entries, Community invitations you send or accept.
- Health: sleep, hydration, meals, sports, fasting, women’s-health logs, clinical notes you enter, phone-sensor or Bluetooth heart-rate metrics, and wearable metrics you enable (Fitbit, Oura, WHOOP, Garmin, HealthKit, Health Connect).
- Photos you choose to upload for meal or body-composition estimates.
- Location, only if you grant permission (for example outdoor climate or the churches map).
- AI conversations: messages you send to Salvazion AI, and limited profile context needed to personalize devotionals or coaching.
- Payments: if you subscribe to Premium, Stripe processes card or wallet details; we receive subscription status, customer id, and limited billing metadata — not your full card number.
- Web3 (optional): Solana wallet address if you connect one. We do not custody private keys.
- Technical: session cookies (Supabase Auth), device and browser data needed for security, PWA, and native-shell operation.
3. Purposes
- Create and maintain your account and session.
- Personalize devotionals, coach, language, and recommendations by life stage.
- Calculate scores, streaks, and badges for the three pillars.
- Provide Health features, photo estimates, and sensor or wearable sync only when you use them.
- Show nearby map or climate context if you enable location.
- Manage Community invitations and links.
- Process Premium subscriptions and prevent payment fraud.
- Improve security, prevent abuse, and operate the service (hosting, auth, AI, billing).
- Comply with legal obligations when applicable.
4. Legal bases
We process data to perform the contract of Platform use (these Terms and the service you request), with your consent (for example sensors, camera, location, social login, wearables, and system permissions), and where applicable for legitimate interests in security and product improvement, or legal obligation. Health and photo data are collected only when you use those features.
5. Processors and providers
We use providers that process data on our behalf, including:
- Supabase — authentication, database, and storage (with Row Level Security: generally only you access your rows).
- Vercel — Platform hosting.
- Stripe — Premium checkout, invoices, and the customer portal, on behalf of Salvazion, Inc.
- xAI (Grok) — AI coach, AI devotionals, voice-related generation, and meal or body-photo estimates; necessary prompt and image content is sent to produce the result.
- Google / — only if you choose to continue with Gmail or ; their use is also governed by their policies.
- Cloud wearable vendors (Fitbit, Oura, WHOOP, Garmin) — only if you connect them; HealthKit and Health Connect stay on-device except what you choose to sync.
- Jupiter / Solana network — if you use swap or wallet; blockchain transactions are public.
- Amazon — if you follow a book link; that purchase is between you and Amazon (we may receive an Associates commission).
- We do not sell your personal information to third parties for third-party advertising, and we do not use your health photos or coach chats to train public advertising models.
6. Health, photos, and other sensitive data
Health logs, wearable metrics, women’s-health entries, clinical notes, and meal or body photos can be sensitive. They are collected only when you use those features. We do not use them to diagnose disease. Photo analysis is an educational estimate and can be wrong. You may stop sensors, revoke wearable connections, or delete local data via the Platform and the device. On native shells, HealthKit / Health Connect require your explicit system permission.
7. Payments
Premium payments are processed by Stripe. Stripe’s privacy policy applies to the payment data it collects. We keep records of plan, status, and renewal needed to deliver Premium and for accounting or tax obligations.
8. Retention
We retain data while you keep an account or as needed for the service, security, accounting, and legal obligations. You may request account deletion by contacting info@salvazion.org. We will delete or anonymize personal data we control within a reasonable time, except records we must keep (for example invoices). Some cache may live on your device (localStorage) until you clear it or uninstall the Platform. Blockchain records we do not control cannot be erased.
9. Security
We apply reasonable measures (HTTPS, database RLS, secure session cookies, limited staff access). No system is 100% invulnerable; report relevant incidents to info@salvazion.org.
10. Your rights
Depending on your jurisdiction (including access, rectification, erasure, objection, portability, restriction, and — where applicable — California or GDPR-style rights), you may exercise rights by writing to info@salvazion.org. You may also revoke sensor, camera, location, or social permissions on the device or at the provider (Google, , wearable vendor), and manage billing in the Stripe portal.
11. Children
The Platform is not directed at children under 13, and we do not knowingly collect personal data from them. If a guardian believes a minor provided us data, contact us to review and delete it.
12. International transfers
Salvazion, Inc. is established in the United States. Providers such as Supabase, Vercel, Stripe, and xAI may process data on servers in the United States or other countries. We use recognized providers and standard industry contractual measures where applicable.
13. Cookies
We use cookies or similar storage essential for authentication, security, language, text size, and theme. We do not rely on third-party ad networks for the core Platform.
14. Changes
We may update this policy by publishing the new version on this URL with an updated date. Continued use constitutes acceptance of material changes to the extent permitted by law.
15. Contact
Privacy and personal data: info@salvazion.org. Salvazion, Inc., 131 Continental Dr, Suite 305, Newark, DE 19713, USA. Terms: see Terms of Service at Terms of Service.