Privacy Policy
DRAFT. NOT YET IN EFFECT. Must be reviewed by a qualified attorney before launch, and updated if you change providers. Bracketed items must be filled in. Not legal advice.
This policy explains how [COMPANY LEGAL NAME] ("Amenflow", "we") handles personal information when you use amenflow.com and the Amenflow app.
The short version
- Your recordings and content packs are private to your account. We don't publish, sell, or rent them, and we don't use them for advertising.
- To turn your sermon into content, your recording and transcript are processed by our infrastructure and AI providers (currently Cloudflare Workers AI). They are not used to train AI models.
- You can delete a sermon or your whole account anytime in the app.
- We use one essential cookie (your login session). We don't use advertising or analytics cookies. [UPDATE IF YOU ADD ANALYTICS OR AD PIXELS. ADS.md PROPOSES CONVERSION TRACKING, WHICH WOULD REQUIRE CHANGES HERE.]
What we collect
| Information | Examples | Why |
|---|---|---|
| Account details | Email, password (stored only as a bcrypt hash), church name, pastor/speaker name | To create and secure your account |
| Your content | Recordings, podcast episode links you choose, documents, transcripts, generated outputs, "Ask your sermon" questions and answers | To provide the Service |
| Billing details | Plan, Stripe customer and subscription IDs, subscription status | To manage your subscription. Card details go directly to Stripe; we never see full card numbers |
| Usage and logs | Number of uploads, processing status, IP address and request logs, AI usage counts (tokens, cost) per sermon | Security, rate limiting, preventing abuse, plan limits, and troubleshooting |
| Emails we send | Which onboarding or account emails were sent to you, and when | To avoid duplicates and honor your email preferences |
Sermon recordings can include the voices of people other than the account holder, such as readers, worship leaders, or congregants. Please upload only recordings you have the right to share with us.
How we use it
We use this information to provide and improve the Service, process payments, send essential account emails (such as "your content pack is ready") and, unless you opt out, a few onboarding tips; to keep the Service secure; and to comply with the law. We do not use your content to train AI models.
Who processes it (subprocessors)
We share information only with providers that help us run the Service, under agreements that limit what they can use it for: - Hosting: our application server, where your account data, recordings and generated content are stored [NAME THE SERVER/VM PROVIDER], and Cloudflare (website and app delivery, DNS and security). All traffic to amenflow.com and app.amenflow.com, including uploads, passes through Cloudflare's network. - Payments: Stripe (subscriptions and invoices). - Email delivery: [EMAIL PROVIDER, e.g. Postmark / Amazon SES] (once enabled). - AI processing: Cloudflare Workers AI transcribes your audio and writes your content from the transcript. Cloudflare's Workers AI terms classify these inputs and outputs as our customer content. They say Cloudflare doesn't use that content to train AI models, doesn't retain it after the request is processed (with limited legal and security exceptions), and doesn't make it available to other customers (Cloudflare Workers AI data usage, checked 2026-10-17). If Workers AI is unavailable or over its daily limit, the same work runs on open-source models on our own application server. [UPDATE THIS IF YOU ADD OR CHANGE AN AI PROVIDER.] - Fonts: Pages load fonts from Google Fonts, which receives your IP address and browser information. [CONSIDER SELF-HOSTING THE FONTS TO REMOVE THIS.]
We may also disclose information if the law requires it, to protect rights and safety, or as part of a merger or acquisition (and we'll tell you if that happens).
Retention and deletion
- Your content is kept until you delete it or your account.
- Deleting a sermon immediately removes its recording, transcript, clips and generated content from our live systems. Deleting your account also removes your account details and cancels any subscription.
- Encrypted database backups are kept for up to [14] days and then overwritten, so deleted data disappears from backups within that time. Uploaded media files aren't included in database backups. [CONFIRM THIS MATCHES YOUR BACKUP SETUP.]
- We keep billing records as long as tax law requires. Basic logs are kept for up to [30] days.
Security
We use HTTPS, hashed passwords, CSRF protection, rate limiting, per-account access checks, and restricted server access. No system is perfectly secure. If a breach affects your information, we'll notify you as the law requires.
Your choices and rights
You can view, download (DOCX, PDF, ZIP), correct, or delete your content and account in the app at any time, and you can turn off tip emails in Account settings or with the unsubscribe link. Depending on where you live (for example, California, Colorado, Virginia, or the EU/UK), you may have additional rights to access, correct, delete, or port your data, or to object to certain processing. Email [PRIVACY EMAIL] and we'll respond within the time the law requires. We don't sell or "share" personal information as California law defines those terms.
Children
Amenflow is for church staff and volunteers aged 18 and over. It isn't directed to children, and we don't knowingly collect personal information from children under 13. The "kids' lesson" output is written for teachers to use, not for children to use the Service.
International users
We're based in the United States and process data there. [ATTORNEY: ADD A TRANSFER MECHANISM IF YOU TARGET EU/UK USERS.]
Changes
We'll post updates here and email account owners about material changes before they take effect.
Contact
[COMPANY LEGAL NAME] · [MAILING ADDRESS] · [PRIVACY EMAIL]