Privacy Policy

Last updated: 17 May 2026

This Privacy Policy explains how Ready Reverend ("we", "us", "our") collects, uses, and protects your personal information when you use the Ready Reverend mobile application and website at readyreverend.com (together, the "Service").

Ready Reverend is operated by Recho AB, a company registered in Sweden (the "Company"). For all privacy matters you can contact us at privacy@readyreverend.com.

1. Summary (the short version)

• We collect only what we need: your email, age bracket, chosen Christian tradition, optional display name, and your conversations with the Ready Reverend.
• Your conversations are encrypted at rest. We never sell your data.
• Your choice of Christian tradition is special category personal data under GDPR. We only process it with your explicit consent, given at sign-up, to personalise pastoral guidance.
• You can delete your account and all associated data at any time from Settings.
• We use Supabase (United States) to host data and Anthropic (United States) and OpenAI (United States) to generate responses. Transfers outside the EU/UK are covered by Standard Contractual Clauses.
• If you are under 16 and live in an EU country where the digital age of consent is 16, you need a parent's consent before using Ready Reverend.

Read on for the full details.

2. Who we are and how to contact us

Data Controller: Recho AB (Sweden) Privacy contact: privacy@readyreverend.com Postal address: [LAWYER REVIEW — add registered business address before publication]

If you are in the EU or UK and have a complaint you believe we have not resolved, you have the right to lodge a complaint with your national data protection authority. In Sweden that is the Swedish Authority for Privacy Protection (IMY). In the UK that is the Information Commissioner's Office (ICO).

3. What information we collect

3.1 Information you provide

• Account details: email address, password (stored as a salted hash by our authentication provider, never visible to us), or the equivalent identifier from Google Sign-In or Sign in with Apple.
• Profile: your age bracket, chosen Christian tradition (Catholic, Anglican / Episcopal, or Mainline Protestant), optional display name, optional subscription tier.
• Conversations: the messages you send to the Ready Reverend and the responses generated. These are encrypted with a key held by us, not by the database provider.
• Saved prayers: any prayers you choose to save. Encrypted at rest.
• Payment information: if you subscribe, our payment providers (Lemon Squeezy, our Merchant of Record on the web, and Apple's In-App Purchase on iOS via RevenueCat) collect your payment details directly. We never see your full card or bank information.

3.2 Information collected automatically

• Device and technical data: device type, operating system version, app version, approximate region (from IP at the time of request), language.
• Usage data: when you open the app, how many messages you send per day, which features you use. Used to enforce subscription limits and to diagnose problems.
• Crash and error reports: if the app crashes or an error occurs, we receive a diagnostic report through Sentry. This may include a stack trace and non-personal context, but we configure Sentry not to capture message content.

3.3 Information we do not collect

• We do not collect your location below country level.
• We do not collect biometric data, contacts, photos, microphone data, or health data.
• We do not use third-party advertising or tracking cookies.

4. Our legal basis for processing (GDPR / UK GDPR)

4.1 Explicit consent for religious tradition

At sign-up, immediately below the "Create Account" action, the following statement appears:

By creating an account, you explicitly consent to Ready Reverend processing your religious tradition (Catholic, Anglican, or Protestant) to personalise pastoral guidance. You can withdraw this consent at any time by deleting your account.

Creating the account constitutes your explicit consent. You can withdraw consent at any time by deleting your account, which erases the tradition and all related data.

5. How we use your information

1. To run the Service — authenticate you, remember your tradition and preferences, generate pastoral responses from the Ready Reverend, save conversations and prayers you want to keep.
2. To personalise responses — the chosen Christian tradition, your age bracket, and your display name are passed to the AI model as part of each request so the Reverend's tone and theology fit you.
3. To enforce subscription limits — we count messages per day and per month against your plan.
4. To keep the Service safe and lawful — detect abuse, prevent fraud, comply with legal obligations, respond to valid legal requests.
5. To communicate with you — send account emails (password resets, billing), and if you opt in, occasional product updates.

We do not use your conversation content to train the AI models. See Section 8.

6. Who we share information with

We share personal information only with:

We do not sell your personal data, and we do not share it with advertisers.

7. International data transfers

Some of our service providers are based in the United States. When we transfer personal data of EU, UK, or Swiss users outside the European Economic Area, we rely on the European Commission's Standard Contractual Clauses (SCCs) with additional safeguards where appropriate.

8. Use of your data by AI providers

When you send a message to the Ready Reverend:

1. Your message, along with your tradition, age bracket, display name, and recent conversation context, is sent to Anthropic's Claude API to generate a response.
2. A short embedding of your message is sent to OpenAI's embeddings API to retrieve relevant Bible passages.

We ask these providers contractually not to use your data to train their models, and Anthropic and OpenAI do not use data submitted via their API for training by default. API providers may retain prompts and responses for a short period for abuse monitoring, then delete them.

9. Data retention

• Account data and conversations: kept while your account is active. If you delete your account, we erase all associated data within 30 days, except where we are required to retain records by law (for example, tax and accounting records of payments).
• Usage counters: kept for 90 days for abuse prevention, then aggregated anonymously.
• Error reports: 90 days in Sentry.
• Payment records: retained for 7 years for Swedish accounting law.

10. Your rights

Depending on where you live, you have some or all of the following rights:

• Access — request a copy of the personal data we hold about you
• Rectification — correct inaccurate data (you can edit profile fields yourself in Settings)
• Erasure — delete your account and all associated data (you can do this yourself in Settings, or by emailing us)
• Restriction — ask us to stop processing your data in certain circumstances
• Portability — receive your data in a portable format
• Objection — object to processing based on legitimate interest
• Withdraw consent — where we rely on consent (such as for your chosen tradition), withdraw it at any time by deleting your account
• Complain — lodge a complaint with your local data protection authority

To exercise any of these rights, email privacy@readyreverend.com. We respond within 30 days.

10.1 California residents (CCPA / CPRA)

If you are a California resident you have the right to know what categories of personal information we collect and share, the right to delete, the right to correct, the right to opt out of sale or sharing (we do not sell or share personal information in the CCPA sense), and the right to non-discrimination for exercising these rights. Exercise these rights by emailing privacy@readyreverend.com.

10.2 Australian residents

We comply with the Australian Privacy Act 1988 and the Australian Privacy Principles. You can request access to and correction of your personal information as above. If you have a complaint you believe we have not resolved, you can contact the Office of the Australian Information Commissioner (OAIC).

11. Children

Ready Reverend is for users aged 13 and over. When you create an account you confirm you are at least 13.

In EU member states that set the digital age of consent at 16 (including Germany, the Netherlands, Luxembourg, Ireland, France, and others — the list varies over time), users under 16 must have a parent or legal guardian's consent before using the Service. If you are a parent and believe a child under the applicable digital age of consent has given us personal data without your consent, email privacy@readyreverend.com and we will delete the account.

UK users under 18: the UK Age Appropriate Design Code applies. We have carried out a Data Protection Impact Assessment and designed the Service to minimise data collection from minors. If you are the parent or guardian of a UK minor using the Service and have concerns, please contact us.

12. Security

• Messages, conversation titles, saved prayers, and session summaries are encrypted at rest with AES-256-GCM using a key held only by the Company (not by the database provider).
• Transport is always TLS (HTTPS).
• Passwords are stored as salted hashes by our authentication provider; we never see them.
• We rotate API keys and encryption keys periodically.
• Internal access to systems is restricted to individuals who need it and is logged.

No online service is perfectly secure. If you suspect your account has been compromised, email privacy@readyreverend.com immediately.

13. Changes to this policy

We may update this Privacy Policy from time to time. If we make a material change, we will notify you by email or in-app before the change takes effect. The "Last updated" date at the top of this page always reflects the latest version.

14. Contact

Recho AB Email: privacy@readyreverend.com Postal address: [LAWYER REVIEW — add before publication]