What we store, and what we do not

Your prayers, notes, reflections and reading are yours. Nobody at Journey 2 Christ reads them. There is no prayer wall and no feed anywhere in this application, nothing you write is used to advertise anything, and nothing is sold to anyone.

Almost everything works without signing up. As a guest, what you do is stored in your own browser on your own device. It is never sent to us, because there is no account to attach it to.

Clearing your browser data removes it, and we cannot recover it, because we never had it.

An account stores your email address and a password you choose. The password is handled by Supabase, our database and authentication provider, and is stored as a hash rather than as the password itself. We never see it.

With an account, these sync so they are on every device you sign in to:

• Prayers you have written
• Bible notes, bookmarks and highlights
• Reading history and progress
• Journey progress and reflections
• Reminders you have set, and the times you chose
• Your settings and preferences

We also store ordinary technical information any web server receives while handling a request. We do not build a profile from it.

These are the most private things in this application, so they get their own section rather than being folded into a general paragraph.

Every prayer, note, highlight and reflection is restricted at the database level to the account that created it. That restriction is enforced by the database itself rather than by application code, so a mistake in a screen cannot expose somebody else’s writing. We test it: a suite of automated checks signs in as separate accounts and attempts to reach the other’s rows, and the run fails if any attempt succeeds.

None of this content is ever sent to analytics or to error reporting. Error reports have request bodies removed entirely rather than filtered, and screen recording is switched off and will stay off, because on a screen showing your prayers a recording would be a recording of your prayers.

Nobody at Journey 2 Christ reads your prayers or notes, and no part of the application shows them to anyone but you.

We will not tell you that access is technically impossible, because that would not be true of any database that somebody administers. What is true is this: the application has no screen that displays another person’s private content, including the editorial tools. The one credential that could bypass the database’s own restrictions is used in exactly one place, the scheduled job that sends reminders, and an automated check fails the build if it is ever read anywhere else.

Somebody with direct database access could look. That is true of every service you use. We have made it so that nothing in the product requires or invites it.

What you type into search never leaves your device. When you search, we record only how long the query was, whether it looked like a Bible reference, and how many results came back. Not the words.

A search that finds nothing is the most useful thing we can learn, and we can learn it without knowing what you were looking for.

We use Vercel Web Analytics to count how the application is used. It sets no cookies, stores no identifier for your device, and does not follow you to other websites.

The events we record carry no account identifier, no email address and no free text. Two omissions are deliberate and cost us useful information:

• We do not record which book or chapter you open. Knowing which books are read most would help us decide what to write next. A record of the chapters somebody returns to at two in the morning is a description of their inner life, so we keep only the translation and where the reader was opened from.
• We do not record which sensitive topic you read. Sixteen topics in the resource library, including grief, anxiety and marriage, report only that a sensitive topic was opened. The count tells us people are finding help. Which help stays with you.

Journey 2 Christ sets cookies for one purpose: keeping you signed in. Those are set by Supabase and are necessary for accounts to work at all.

There are no analytics cookies, no advertising cookies and no third-party tracking cookies, because there is no advertising and no cross-site tracking in this application. That is why you have not been shown a cookie banner: there is nothing here to consent to, and a banner would be theatre that trains people to click through the real consent requests they meet elsewhere.

Separately, the application stores what you write in your browser’s local storage so it works offline. That storage is not encrypted and is readable by anybody with your device unlocked and developer tools open. That is true of every web application, and we would rather say so than call it secure.

If you turn reminders on, we store the times you chose and an address your browser gives us so a notification can be delivered. Turning reminders off on a device deletes that device’s record rather than keeping it and ignoring it.

A prayer reminder never says what the prayer is about. By default it says only that you have a reminder.

• Supabase stores accounts and synced data.
• Vercel hosts the application and provides the cookieless analytics described above.
• Your browser’s push service, meaning Google, Mozilla or Apple depending on the browser, delivers notifications if you turn them on.

We do not sell data to anyone, and there is no advertising network in this application. More about third-party services.

Privacy and data in your settings lets you:

• Export everything you have written, as a file you keep
• Delete individual kinds of data
• Delete your account entirely

Deleting your account removes your rows from our database. None of it can be undone. Backups may hold a copy for a period after that, depending on our hosting plan.

Journey 2 Christ is written for adults and for young people reading with their family. We do not knowingly create accounts for children under 13. There is no age check in the application, so this is a statement of how we intend it to be used rather than a control we enforce.

If what we store changes, this page changes with it and the dates at the top move. We do not keep previous versions.

Write to yourjourney2christ@gmail.com. This is a small project rather than a company, so an answer may take a few days. A proper contact route will replace that address in time.