Privacy Policy

IshGospel is built by IshVerse. This policy explains what information the IshGospel app and website (gospel.ishverse.com) collect, how we use it, and the choices you have.

What we collect

• Account information — your name, email address, and password. Passwords are stored only as a secure cryptographic hash; we cannot read them. If you sign in with Google, we receive your name, email, and profile photo from Google instead.
• Profile photo — optional, if you upload one.
• Spiritual content you create — Bible highlights and notes, reading history and plans, journal entries, prayer logs, formation streaks, goals, habit tracking, and anything you post in a community.
• Community information — the communities you join, your role in them, and invitations you send or receive.
• Technical information — device and app version, and server logs (including IP addresses) used for security, rate limiting, and debugging.

We do not collect your precise location, your contacts, or advertising identifiers.

The nature of your content

IshGospel is a spiritual formation app. Content you create — journals, prayers, reading activity — may reflect your religious beliefs. We treat all such content as private. It is never used for advertising, never used to profile you, and never sold or shared for commercial purposes.

Journals and prayer logs are visible only to your account. Content you post to a community is visible to that community only.

How we use your information

• To provide the service and sync your content across your devices.
• To send transactional email — account verification, password resets, and security alerts. We do not send marketing email.
• To keep your account secure.
• To respond when you contact support.

We never sell your data, and we show no third-party advertising.

Where your data lives

• Railway — application and database hosting.
• Amazon Web Services (S3) — storage for profile and community images.
• Resend — delivery of transactional email.
• Google — only if you choose to sign in with Google.

All data is encrypted in transit (HTTPS/TLS). Passwords are hashed with Argon2id.

Retention and deletion

We keep your data for as long as your account is active. You can delete your account and all associated data at any time from the app (Profile → Privacy → Delete My Account) or by emailing support@ishverse.com. We process deletion requests within 30 days.

Your rights

You can access, correct, export, or delete your information. Most of this is available directly in the app. For anything else, email support@ishverse.com.

Children

IshGospel is not directed at children under 13. If you believe a child has created an account, contact us and we will delete it.

Changes to this policy

When this policy changes, we update this page and the date at the top. For material changes we will notify you in the app or by email.

Contact

Questions about privacy: support@ishverse.com