Privacy Policy

IshVerse (“we”, “us”) builds discipline systems, including the IshGospel mobile app. This policy explains what information we collect, how we use it, and the choices you have. It applies to all IshVerse products and websites: ishverse.com, gospel.ishverse.com, rize.ishverse.com, and the IshGospel app.

What we collect

• Account information — your name, email address, and password. Passwords are stored only as a secure cryptographic hash; we cannot read them. If you sign in with Google, we receive your name, email, and profile photo from Google instead.
• Profile photo — optional, if you upload one.
• Content you create — Bible highlights and notes, reading history and plans, journal entries, prayer logs, formation streaks, goals and habit tracking, and anything you post in a community.
• Community information — the communities you join, your role in them, and invitations you send or receive.
• Technical information — device and app version, and server logs (including IP addresses) used for security, rate limiting, and debugging.

We do not collect your precise location, your contacts, or advertising identifiers.

The nature of your content

IshGospel is a spiritual formation app. Content you create in it — journals, prayers, reading activity — may reflect your religious beliefs. We treat all such content as private. It is never used for advertising, never used to profile you, and never sold or shared for commercial purposes. Journals and prayer logs are visible only to your account; content you post to a community is visible to that community.

How we use your information

• To provide the service and sync your content across your devices.
• To send transactional email — account verification, password resets, and security alerts. We do not send marketing email.
• To keep your account secure (login alerts, account locking, two-factor authentication).
• To respond when you contact support.

We never sell your data, and we show no third-party advertising.

Where your data lives

We use a small number of infrastructure providers to run the service. Each processes data only on our behalf:

• Railway — application and database hosting.
• Amazon Web Services (S3) — storage for profile and community images.
• Resend — delivery of transactional email.
• Google — only if you choose to sign in with Google.

All data is encrypted in transit (HTTPS/TLS). Passwords are hashed with a modern algorithm (Argon2id). Access to production systems is restricted.

Retention and deletion

We keep your data for as long as your account is active. You can request deletion of your account and all associated data at any time — in the app under Profile → Privacy → Delete My Account, or by emailing support@ishverse.com. We process deletion requests within 30 days. Minimal records required for security or legal compliance (for example, server logs) may be retained for a limited period.

Your rights

You can access, correct, export, or delete your information. Most of this is available directly in the app; for anything else, email support@ishverse.com and we will help.

Children

Our products are not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has created an account, contact us and we will delete it.

Changes to this policy

When this policy changes, we update this page and the date at the top. For material changes we will notify you in the app or by email.

Contact

Questions about privacy: support@ishverse.com