Privacy Policy

This policy applies to the Life Is Spiritual web application, the LIS mobile app, and the backend services that power them, including streaming, account features, AI Erica, and donations made through our donation page.

We collect only what is needed to run the service:

• Account and authentication: your email address, a system-generated user ID, and an optional display name. On mobile, your session token is stored in the operating system keychain / secure storage.
• Account features: your favorites / My List entries, watch progress, and profile preferences, stored on our servers so they follow you across devices.
• AI Erica: questions you type are sent at request time to process your request. Conversation text is not stored as chat history.
• Technical information: a random install ID on mobile used for throttling, and your request IP address used only to derive a keyed, irreversible rate-limit hash — we do not store your raw IP for this purpose. Operational server logs and limited analytics events may include event names, a content slug, and an optional user ID.
• Donations: the donation record described in Section 5.

Search queries are not stored or logged. We do not currently run an advertising SDK or a crash-reporting SDK.

We use the information above to:

• authenticate you and keep you signed in;
• sync your favorites, My List, and watch progress across devices;
• answer your AI Erica questions and apply fair-use limits;
• process and reconcile donations and provide receipts;
• protect the service from abuse, overload, and unauthorised access; and
• understand, at an aggregate level, how features are used so we can operate and improve the app.

AI Erica answers from an approved library of LIS documentary, book, and screenplay material. When you ask a question, the text you typed is sent at request time through the Lovable AI Gateway to a downstream AI provider to generate the answer. Your conversation is not stored on our servers as chat history — the app keeps no archive of your prompts or Erica’s answers.

We retain minimal abuse and usage metadata: a salted one-way actor fingerprint or user ID for fair-use counting, and metadata-only operational telemetry such as latency, model, and token estimates. This telemetry contains no prompt or answer text and no name, email, or IP address. High-resolution AI Erica telemetry is deleted after 30 days.

In the mobile app, giving opens lifeisspiritual.org/donate in your system browser. Payments are processed by Paystack. Card numbers, M-PESA PINs, Apple Pay credentials, and other payment credentials are handled by Paystack and never enter LIS systems.

LIS may receive and store: the amount, currency, frequency, and status of a donation; the provider reference and payment channel; the donor email; an optional donor name; timestamps; and, if you were signed in, a link to your user account. If you give anonymously, your name is not retained in the LIS donation record.

We rely on the following providers, each processing only the data needed for its function:

• Lovable Cloud / Supabase — authentication, database, and storage;
• Paystack — payment processing;
• Mux — secure video delivery;
• YouTube — external playback of certain titles, where applicable;
• Expo / EAS — mobile build and distribution infrastructure (no mobile analytics SDK is enabled); and
• Lovable AI Gateway and its downstream AI provider — AI Erica request processing.

On the web, signing in stores a session token in your browser so you stay signed in. On mobile, the session token is stored in the operating system keychain / secure storage, and a random install ID is used to throttle abusive traffic. We do not use advertising cookies or third-party ad trackers.

We do not sell your personal data. We do not use your data for targeted advertising and we do not run advertising SDKs. Data is shared only with the service providers listed in Section 6, only as needed to operate the service, or where required by law.

Account, favorites, watch-progress, and preference records are kept while your account is active. Donation records may be retained for accounting and legal compliance. AI Erica high-resolution operational telemetry is deleted after 30 days. Some financial or compliance records may need to be retained as required by law even after account deletion.

All app and API traffic uses HTTPS in transit. On mobile, session tokens are held in the operating system keychain / secure storage. We also use row-level database authorisation, role-based staff access, signed short-lived video tokens, and server-side handling of all secrets. No online service can promise perfect security, but we take reasonable measures and review them.

You can edit your profile, export a copy of your account data, and permanently delete your account from your account page (also available in the mobile app). Deleting your account removes your profile, favorites, watch progress, and usage rows, and anonymises donation and prayer records where required. Some financial or compliance records may need to be retained as required by law.

Some catalog content is suitable for children and families. The service as a whole is intended for a general audience: there is no child-specific profile, no targeted advertising, and no child-specific data collection. We ask that a parent or guardian create and manage any account used by a child. If you believe a child has provided us personal information without a parent’s involvement, contact us and we will address it.

Our service providers may process data in countries other than your own as part of operating the service. By using the app you understand that your information may be processed where those providers operate, subject to the safeguards described in this policy.

If we change this policy we will update this page and the effective date above. Material changes will be highlighted where practical. Your continued use of the app after an update means the updated policy applies.

Questions about this policy or your data: [email protected].