Privacy Policy

Agentic Jesus Mobile Application

Operated by Agentic Jesus LLC, a Maryland Limited Liability Company

Effective Date: March 23, 2026 | Last Updated: March 23, 2026

1. Introduction

Agentic Jesus LLC ("Company," "we," "us," or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Agentic Jesus mobile application (the "App") and related services (collectively, the "Services").

By using the Services, you consent to the data practices described in this Privacy Policy. If you do not agree with the practices described herein, please do not use the Services. This Privacy Policy is incorporated into and subject to our Terms of Service.

We encourage you to read this Privacy Policy carefully. If you have questions or concerns, please contact us at team@agenticjesus.app.

2. Information We Collect

2.1 Information You Provide Directly

We collect information that you voluntarily provide when using the Services, including:

• Account Information: Name, email address, and password when you create an account.
• Faith Profile: Responses to our onboarding questionnaire (6 questions) regarding your faith background, spiritual interests, denomination, and spiritual growth goals. This information is used to personalize your AI companion experience.
• Conversation Data: Messages you send to and receive from the AI companion across all chat silos (General Chat, Bible Chat, Wisdom Library).
• Prayer Journal Entries: Prayers, reflections, and notes you create in the prayer journal feature.
• Journal Entries: Personal journal content you create, including entries marked as private.
• Garden Data: Spiritual growth milestones, stage progression, and related tracking data in the My Garden feature.
• Voice Data: Audio recordings when you use voice input features. Audio is processed for speech-to-text conversion and is not stored permanently after transcription.
• Payment Information: Billing details are collected and processed by our payment processor, Stripe, Inc. We do not directly store your credit card numbers or bank account details on our servers.
• Support Communications: Information you provide when contacting us for support or feedback.
• Referral Data: When you share a referral link or are referred by another user, we collect referral codes, referral source information (how you heard about the App), and referral attribution data to track the effectiveness of our referral program and deliver features such as Garden seed notifications.
• Shareable Content: When the AI generates a shareable card based on a conversation, the card contains only a Scripture reference and a universal spiritual reflection. No personal details, conversation specifics, or identifying information are included in shareable cards.

2.2 Information Collected Automatically

When you use the Services, we may automatically collect certain information, including:

• Device Information: Device type, operating system, unique device identifiers, and mobile network information.
• Usage Data: Features accessed, time spent in the App, message counts, subscription tier, navigation patterns, and interaction data.
• Log Data: IP address, access times, pages viewed, app crashes, and system activity.
• Location Data: Approximate location (city/region level) derived from IP address. Precise location data is only collected when you use the Church Directory feature and grant location permission. You may revoke location permission at any time through your device settings.
• Analytics Data: Aggregated usage statistics to improve App performance and user experience.
• Push Notification Tokens: Device push notification tokens are collected when you grant notification permissions, used to deliver check-in messages, prayer follow-ups, Garden seed notifications, journey reminders, and other service-related push notifications.

2.3 Information from Third Parties

We may receive limited information from third-party services integrated with the App:

• App Store Platforms: Purchase and subscription status from Apple App Store and Google Play Store.
• Stripe: Transaction confirmations and subscription management data.
• Sentry: Error and crash reporting data to improve App stability.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To provide, maintain, and improve the Services, including personalizing your AI companion experience based on your faith profile and conversation history.
• AI Processing: To process your messages through AI models (Claude by Anthropic) to generate personalized spiritual guidance, devotionals, and responses. Your faith profile and conversation history are included in AI prompts to provide contextually relevant responses.
• Voice Services: To convert your speech to text (via OpenAI Whisper) and to generate audio responses (via OpenAI text-to-speech) for voice interaction features.
• Subscription Management: To process payments, manage your subscription tier, enforce message limits, and provide tier-appropriate features.
• Proactive Features: To deliver check-ins, prayer follow-ups, and Garden outreach notifications based on your activity and preferences.
• Church Directory: To provide nearby church recommendations using Google Maps/Places API based on your location when you access this feature.
• Communications: To send you service-related notifications, including push notifications for check-ins, journey reminders, and prayer follow-ups. You may manage notification preferences in your device settings.
• Safety and Security: To detect and address technical issues, prevent fraud, and protect the security of our Services.
• Analytics and Improvement: To analyze usage patterns, measure feature adoption, and improve the App experience.
• Legal Compliance: To comply with applicable laws, regulations, and legal processes.

We do not use your personal information for targeted advertising. We do not sell your personal information to third parties. We do not use your conversation data, prayer entries, or faith profile to train AI models.

4. AI Data Processing

This section describes how your data is processed by artificial intelligence systems. Given the central role of AI in our Services, we believe transparency about AI data flows is essential.

4.1 Data Sent to AI Providers

When you interact with the AI companion, the following data may be transmitted to our AI providers:

• Anthropic (Claude API): Your current message, relevant conversation history (for context continuity), your faith profile summary, journey day and topic, active Wisdom Library context (if applicable), Matthew Henry commentary excerpts (for Bible Chat), and Garden spiritual growth data. This data is transmitted via encrypted API calls.
• OpenAI (Voice Services): Audio recordings for speech-to-text conversion (Whisper), and text content for text-to-speech generation (gpt-4o-mini-tts). Audio data is processed in real time and is not stored by OpenAI after processing, per their API data usage policies.

4.2 AI Model Selection

The App uses different AI models based on your subscription tier and the nature of your conversation. Model routing is determined automatically by our backend systems based on your tier and the AI's assessment of conversation context (e.g., crisis detection triggers escalation to more capable models regardless of tier). This routing is designed to optimize both response quality and operational costs.

4.3 What AI Providers Do Not Receive

• Your email address or account credentials.
• Your payment information or financial data.
• Your precise geographic location.
• Your journal entries (journal content stays on our servers and is not sent to AI providers unless you explicitly share journal content in a chat message).

4.4 Background Batch Processing

Certain AI-powered features operate on a scheduled background basis rather than in real time. These include conversation summary generation, daily devotional preparation, proactive check-in messages, prayer follow-up content, and Garden coaching. This background processing uses the same AI providers (Anthropic Claude) and the same data categories described in Section 4.1, but data is batched and processed during overnight cycles rather than at the moment of user interaction. No additional data beyond what is described in this Privacy Policy is collected or transmitted during background processing.

4.5 AI Provider Data Policies

Anthropic's API data usage policy states that data submitted via their API is not used to train their models. OpenAI's API data usage policy similarly provides that API data is not used for model training. The Company actively monitors these API terms and reserves the right to immediately suspend or reroute data processing to alternative providers if zero-data-retention policies are modified or revoked by our current AI infrastructure partners. We recommend reviewing their respective privacy policies for the most current information:

• Anthropic: https://www.anthropic.com/privacy
• OpenAI: https://openai.com/policies/privacy-policy/

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following limited circumstances:

5.1 Service Providers

We share data with third-party service providers who assist us in operating the Services, subject to contractual obligations to protect your data:

• Anthropic, PBC — AI conversation processing
• OpenAI — Voice services (STT/TTS)
• Stripe, Inc. — Payment processing
• Supabase / Railway — Database hosting and backend infrastructure
• Google (Maps/Places API) — Church directory location services
• Sentry — Error monitoring and crash reporting
• Expo / EAS — App build, update, and push notification services

5.2 Legal Requirements

We may disclose your information if required to do so by law, regulation, legal process, or governmental request, or when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.

5.3 Business Transfers

If the Company is involved in a merger, acquisition, or sale of all or a portion of its assets, your information may be transferred as part of that transaction. We will notify you via email and/or prominent notice in the App of any change in ownership or uses of your personal information.

5.4 With Your Consent

We may share your information with third parties when you have given us explicit consent to do so.

6. Data Retention

We retain your personal information for as long as necessary to provide the Services and fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Specific retention periods include:

• Account Data: Retained for the duration of your account, plus thirty (30) days after account deletion to allow for account recovery.
• Conversation History: Retained for the duration of your account to maintain conversation continuity. Deleted within thirty (30) days of account deletion.
• Prayer Journal and Journal Entries: Retained for the duration of your account. You may delete individual entries at any time.
• Voice Audio: Processed in real time for transcription; raw audio is not stored on our servers after transcription is complete.
• Usage and Analytics Data: Retained in aggregated, de-identified form for up to twenty-four (24) months for analytics and service improvement purposes.
• Payment Records: Transaction records retained for seven (7) years as required for tax and accounting compliance.

7. Data Security

We implement reasonable administrative, technical, and physical security measures to protect your personal information, including:

• Encryption of data in transit using TLS/SSL protocols.
• Database encryption at rest via Supabase/PostgreSQL encryption.
• Secure API authentication for all backend communications.
• SSL-required database connections (sslmode=require).
• Access controls limiting employee and contractor access to personal data on a need-to-know basis.
• Regular security monitoring via Sentry error tracking.
• Secure password hashing for account credentials.

While we strive to protect your personal information, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security of your data.

8. Your Rights and Choices

8.1 All Users

Regardless of your location, you have the following rights:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate personal information.
• Deletion: Request deletion of your personal information, subject to certain legal exceptions.
• Data Portability: Request your data in a commonly used, machine-readable format.
• Notification Preferences: Manage push notifications through your device settings. Manage email communications through the App or by contacting us.
• Account Deletion: Delete your account at any time through the App settings or by contacting us.

To exercise any of these rights, contact us at team@agenticjesus.app. We will respond to your request within thirty (30) days.

8.2 Maryland Residents (MODPA)

If you are a Maryland resident, you have rights under the Maryland Online Data Privacy Act (effective October 1, 2025), including the right to access, correct, delete, and obtain a portable copy of your personal data. You also have the right to opt out of targeted advertising, the sale of personal data, and profiling. We do not sell personal data or engage in targeted advertising. Religious data is treated as sensitive data requiring opt-in consent under MODPA.

8.3 California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act:

• Right to Know: You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purposes for collection, and the categories of third parties with whom we share your data.
• Right to Delete: You may request deletion of your personal information, subject to certain exceptions.
• Right to Opt-Out of Sale/Sharing: We do not sell or share your personal information for cross-context behavioral advertising. If our practices change, we will update this Policy and provide an opt-out mechanism.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.
• Right to Limit Use of Sensitive Personal Information: Your faith profile data may constitute sensitive personal information under CCPA. You may request that we limit its use to what is necessary to provide the Services.

To submit a verifiable consumer request, contact us at team@agenticjesus.app. You may also designate an authorized agent to submit requests on your behalf.

8.4 European Economic Area, United Kingdom, and Swiss Residents (GDPR)

If you are located in the EEA, UK, or Switzerland, you have additional rights under the General Data Protection Regulation or equivalent legislation:

• Legal Basis for Processing: We process your personal data based on: (a) your consent (for faith profile data and religious information); (b) performance of a contract (to provide the Services); (c) legitimate interests (analytics, security, service improvement); and (d) legal obligations.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing performed before withdrawal.
• Right to Restriction: You may request restriction of processing in certain circumstances.
• Right to Object: You may object to processing based on legitimate interests.
• Right to Lodge a Complaint: You have the right to lodge a complaint with your local data protection supervisory authority.
• Data Transfers: Your data may be transferred to and processed in the United States, where our servers and AI providers are located. We rely on Standard Contractual Clauses and other appropriate safeguards for international data transfers.

8.5 Other Jurisdictions

If you are located in a jurisdiction with applicable data protection laws (including but not limited to Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Indiana, Tennessee, Delaware, New Hampshire, New Jersey, Nebraska, Minnesota, Kentucky, Rhode Island), you may have similar rights to access, correct, delete, and port your data. Contact us to exercise these rights.

9. Children's Privacy

The Services are not intended for individuals under the age of sixteen (16). We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take prompt steps to delete that information.

If you are a parent or guardian and believe that your child under 16 has provided us with personal information, please contact us at team@agenticjesus.app so that we can take appropriate action.

10. Sensitive Personal Information

The App collects information about your religious beliefs and spiritual practices through the faith profile, conversations, and prayer journal features. Under various privacy laws, this information may be classified as sensitive personal information or special category data.

We process this sensitive information solely for the purpose of providing personalized spiritual guidance through the Services. We do not use this information for profiling, targeted advertising, or any purpose unrelated to the Services. We process religious data based on your explicit consent, which you provide when you affirmatively check an unbundled, explicit consent box presented during the UI onboarding flow specifically authorizing the processing of your Special Category Data under GDPR Article 9 and Sensitive Personal Information under CCPA.

You may withdraw your consent for the processing of sensitive personal information at any time by deleting your faith profile data or your account.

11. Crisis Support and Safety

The App includes crisis detection capabilities. If the AI detects that you may be experiencing a mental health crisis, suicidal ideation, or risk of self-harm, the system may:

• Escalate to a more capable AI model to provide a more thoughtful and careful response.
• Provide you with crisis resource information (e.g., 988 Suicide and Crisis Lifeline).
• Log the crisis detection event for safety monitoring purposes.

Crisis detection logs are retained for safety and quality assurance purposes. These logs do not include the full content of your conversation but may include metadata such as the time of detection and the type of crisis detected. We do not automatically contact emergency services or third parties based on crisis detection.

12. Cookies and Tracking Technologies

As a mobile application, the App does not use browser cookies. However, we may use similar technologies including:

• Device Identifiers: Unique identifiers associated with your mobile device for analytics and push notification delivery.
• Local Storage: The App stores certain data locally on your device (e.g., cached content, preferences) to improve performance.
• Analytics SDKs: We may use analytics tools to collect usage data in aggregate form.

You may limit data collection through your device privacy settings, including limiting ad tracking and revoking app permissions.

13. Do Not Track / Global Privacy Control

We respect Do Not Track (DNT) browser signals and Global Privacy Control (GPC) signals. Since we do not engage in cross-site tracking or sell personal information, these signals do not require changes to our data practices. If our practices change, we will honor these signals as required by applicable law.

14. Third-Party Links and Services

The App may contain links to third-party websites or services, including church websites discovered through the Church Directory feature. We are not responsible for the privacy practices of these third-party services.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the App or by email at least thirty (30) days before the changes take effect, update the "Last Updated" date, and where required by law, obtain your consent before implementing material changes to the processing of sensitive personal information.

16. International Data Transfers

The App is operated from the United States. If you access the Services from outside the United States, your information may be transferred to, stored, and processed in the United States. For transfers from the EEA, UK, or Switzerland, we rely on the EU-U.S. Data Privacy Framework (where applicable), Standard Contractual Clauses, and other appropriate safeguards.

17. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us at:

For GDPR-related inquiries, you may also contact your local data protection supervisory authority.

END OF PRIVACY POLICY

Document Version: 2.0 (Final — Maryland LLC)