Back to Home

Privacy Policy

Last updated: September 21, 2026

Introduction

Heart Soil ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website.

Information We Collect

Personal Information

When you create an account, we collect:

  • Email address (for authentication)
  • Display name (optional)
  • Profile preferences (theme, settings)

You can sign in with an email and password, with your Google account, or (in the iOS app) with Sign in with Apple. When you use Google or Apple sign-in, we receive only your basic account information (email address and name) from that provider — we never see your Google or Apple password.

Content You Create

We store the content you create within the app:

  • Prayer topics and descriptions
  • Scripture verses and reflections
  • Journal entries
  • Daily examen responses
  • Silence timer sessions

Usage Information

We collect information about how you use the app:

  • Device information (type, operating system)
  • App usage analytics (features used, session duration)
  • Crash reports and error logs

How We Use Your Information

We use your information to:

  • Provide and maintain the Heart Soil service
  • Sync your content across devices
  • Improve and optimize the app experience
  • Communicate important updates about the service
  • Respond to your support requests
  • Ensure the security and integrity of our service

Data Storage and Security

Encryption

Heart Soil protects your content with multiple layers of encryption:

  • Encrypted in transit and at rest: your data is protected with HTTPS/TLS while it travels and is encrypted at rest in our database
  • Encrypted on your device: your journal entries and prayer topics are additionally encrypted (AES-256-GCM) in your browser before they are saved
  • Private to your account: your content is protected by strict per-user access controls. We do not read your entries, and we never sell or share them
  • Not "zero-knowledge": because Heart Soil supports account recovery—so you never lose your journal if you forget your password—encryption is managed by your account rather than a personal passphrase that only you hold. In principle our systems can process your data to provide the service; we choose not to access your entries and never use them for advertising

Additional Security Measures

Alongside encryption, we implement industry-standard security measures:

  • Secure authentication via Firebase Auth
  • Per-user access controls and data isolation
  • Secure infrastructure using Firebase/Google Cloud Platform

Your Data, Your Control

You maintain complete control over your data:

  • Export your data: Download all your content in a readable format anytime from your Profile settings
  • Delete everything: Permanently delete your account and all associated data with one action - it cannot be recovered (how to delete your account)
  • No data retention: When you delete your account, your content is removed from the app immediately and permanently purged from our systems within 30 days

Notifications

If you turn on practice reminders, we store a push token for your device so we can deliver notifications at the times you choose (via Apple Push Notification service on iOS, or web push in the browser). Notifications are always optional — you can disable them anytime in your device or browser settings, and the token is removed when it becomes invalid or when you delete your account.

Reports and Blocks

If you report a check-in, a reply or a member in Grow Together, we store who made the report, who was reported, what kind of thing it was (a check-in, a reply or a member), the reason you chose, any details you added (up to 500 characters) and a copy of the reported text as it appeared at the moment you reported it, so the review does not depend on the text still being there. A report is kept for as long as it is needed to review it and to act on repeated behaviour. The person you reported is not told who reported them.

If you block a member, the block is stored on your account and is visible only to you; the person you block is not told. They can no longer react to, reply to, invite or nudge you, and their check-ins and replies are hidden from you. In a group you already share, they can still see that you practiced, but the reflections you write are not shared with that group while they are a member — the other members do not see them either, until they leave or the group's creator removes them. You can see and remove your blocks at any time in Profile → Blocked users.

AI-Assisted Features

Three features use Google's Gemini API: verse suggestions for a prayer topic, Bible search, and the daily prompts on the Today page. When one of them runs, the text described below is sent to Google for processing and the generated result is returned to you.

  • Off until you turn them on: AI features are off by default. The first time you use one, the app asks once whether to allow them, and you can change your answer at any time in Profile → AI suggestions. While they are off, nothing is sent to Google
  • Verse suggestions: the title and description of the prayer topic you ask about
  • Bible search: the words you type into search
  • Daily prompts: the names, categories, descriptions and frequency of your practices
  • We only send what is needed to generate the response — never your journal entries, prayers or reflections, and never your account credentials
  • Your private journal entries are not used to train AI models
  • The core practices work without AI features

Subscriptions

If you subscribe to Heart Soil Plus in the iOS app, Apple processes your payment; we never see your payment details. We use RevenueCat to confirm your subscription. RevenueCat receives your Heart Soil account ID and your App Store purchase history for Heart Soil (which plan, when it started and renews), and we store whether your account has Plus. None of your journal, prayers or reflections are shared.

Data Sharing

We do not sell your personal information. We may share your data only in the following circumstances:

  • With your consent: When you explicitly share prayer topics, reflections, or reading activity with friends in the app
  • Service providers: Firebase/Google Cloud for hosting, authentication, and push notifications; Google Gemini for AI-assisted features; RevenueCat for processing Heart Soil Plus subscriptions; Unsplash for imagery; Bible content providers (such as YouVersion) for scripture text and audio
  • Legal requirements: If required by law or to protect our rights

Your Rights and Choices

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Delete your account and all associated data
  • Export your data
  • Opt out of non-essential communications

To exercise these rights, contact us at newjourneydesigns.co@gmail.com

Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete all associated data within 30 days, except where we are legally required to retain certain information.

Children's Privacy

Heart Soil is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through the app. Your continued use of Heart Soil after changes indicates acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy, please contact us at:

Email: newjourneydesigns.co@gmail.com
Website: myheartsoil.com