Privacy Policy

Last updated: 12 August 2026

Gospeling is a personal Christian discipleship record. This policy explains exactly what data the app collects, how it is used, who can see it, how it is protected, and how you can delete it. It describes the app as it is actually built.

Who is responsible for your data

The data controller is Anton Eriksson Hjelm, Sweden. For any privacy question or request, contact info@gospeling.app.

Data we collect

Account and authentication data

Your email address and a securely hashed password when you register with email.
If you choose Google sign-in, the account identifier and email address Google returns to our authentication service. We never receive your Google password.
Account timestamps such as creation date, last sign-in and email-confirmation status, created by the authentication service.
Password-reset emails sent to your address when you use the “Forgot password?” flow.

Profile data

First and last name, display name and short bio.
Profile picture, if you upload one.
Country, ward or congregation, denomination (including a free-text option), previous denominations with the dates you enter, and how long you have been a member or a believer.
Preferred currency, used for tithing and offering records.
Optional Instagram, Facebook and X (Twitter) usernames you type in. These are stored as plain text links only; Gospeling does not connect to those platforms or read anything from them.

Content and tracking data you create

Tracking entries: prayers, Sunday meeting attendance, teaching or lesson attendance, fasting hours, service acts, tithing and offerings, and their dates and notes.
Temple and living ordinance records, including per-day notes.
Scripture reading: books, chapters and verses read, reading sessions, book completions, book ratings, bookmarks, tags, personal notes and streak data.
Scripture reflections and the reflection answers you write.
Your testimony text, if you choose to write one.
Social content: posts, comments, likes, follows, close-friend lists and post view counts.
Private “People” records you create about individuals you teach or support, including the contact details, planned communications and timeline notes you enter. Because you may enter another person’s information here, you are responsible for only recording what is appropriate and lawful.
Support tickets, support messages and screenshots you attach when you contact support.
Reports you submit about other members, blocks you create, and, where applicable, moderation records such as warnings, suspensions or bans, together with internal notes written by our administrators.

Notification data

Your notification preferences (reminders, social notifications, support updates, announcements).
If you switch on notifications for a device, we store the web push subscription your browser generates: the push endpoint URL, the encryption keys the browser provides, and basic device or browser information. This is used only to deliver Gospeling notifications and reminders, and is deleted when you turn notifications off for that device.
In-app notification records so you can see your notification history.

Technical data

Gospeling contains no advertising SDK, no third-party analytics SDK and no crash-reporting SDK. Our hosting and backend providers process standard technical request data (such as IP address, timestamp and user agent) in their server logs in order to deliver and secure the service. Your browser stores your sign-in session locally on your device so you stay signed in, and the published app may cache pages on your device so parts of it work offline.

Aggregate statistics

An internal administration dashboard shows aggregate figures calculated from the data described above, for example the number of registered accounts, daily, weekly and monthly active users, and total counts of logged activity. These are counts and trends, not profiling, and they are visible only to Gospeling administrators.

How we use your data

To create your account, sign you in and keep your session secure.
To store and display your discipleship records, statistics and streaks.
To operate the social features you choose to use: profiles, feed, follows, comments.
To send the reminders, announcements and notifications you have enabled.
To answer support requests and investigate reports of abuse.
To keep the community safe, including automated screening of submitted text against a list of prohibited terms, and manual moderation of reported content.
To understand overall usage through the aggregate statistics described above.

Under the GDPR, our legal bases are performance of a contract with you (providing the app), your consent (notifications and anything you choose to publish), and our legitimate interests (security, abuse prevention and service improvement).

What we do not do

We do not sell your personal data. We do not share it with advertisers, we do not show advertising, we do not run third-party tracking or advertising SDKs, and we do not use your private entries to train artificial-intelligence models.

Who can see your data

Every tracking category has its own sharing level: private, close friends, mutual follows, or everyone. Private is the default for every category. Content you publish to the feed, and profile fields you choose to make public, are visible to other members according to the level you set.

Your personal notes, scripture reflections, People records, bookmarks, block list, support messages and support screenshots are never shown to other members. Your email address is never displayed on your profile or in the feed.

Gospeling administrators can access account and moderation information needed to run the service and handle reports and support requests. When you report another member, that member is never told who reported them and never sees our internal notes.

Blocking works both ways: a member you block cannot see you or your content, and you no longer see theirs.

Third-party services we use

Lovable, hosts and serves the application, and brokers Google sign-in.
Lovable Cloud (Supabase), our backend: the database that stores everything described above, the authentication service that stores your credentials and sends account emails, and private file storage for profile pictures and support screenshots.
Google, only if you choose Google sign-in, in which case Google processes your sign-in and returns your account identifier and email address. Web fonts are also loaded from Google Fonts, which means your browser requests those font files from Google.
Your browser’s push service, if you enable notifications, delivery goes through the push service operated by your browser vendor (for example Google, Mozilla or Apple). The notification content we send passes through that service to reach your device.

These providers act as processors or independent controllers for the purposes above only. Because they operate globally, your data may be processed outside your own country, including outside the EU/EEA, under the safeguards those providers offer.

Security

All traffic between your device and Gospeling uses HTTPS. Passwords are stored only as salted hashes by the authentication service. The database enforces row-level security policies so records are readable only by their owner, or by the audience you have explicitly chosen. Profile pictures and support screenshots are held in private storage buckets and are served only through short-lived signed links. Administrative functions require an administrator or owner role that is stored server-side and checked on every request. No system is perfectly secure, so we cannot guarantee absolute security.

Data retention

We keep your data for as long as your account exists, because the purpose of the app is a long-term record. You can edit or delete individual entries at any time, and deleted entries are removed from the database. When your account is deleted, your account and the records linked to it are deleted. Limited records may be retained where we are required to do so by law, or where a moderation record is needed to enforce a ban.

Your rights and how to delete your account

You can access and correct your profile and entries directly in the app, and delete any individual entry yourself. There is currently no in-app button to delete a whole account. To delete your account and the data associated with it, or to request a copy of your data, email info@gospeling.app from the address on your account, or send the request through Help & Support in the app. We will complete deletion requests within 30 days.

Depending on where you live, you may also have the right to object to or restrict processing, to withdraw consent, to data portability, and to lodge a complaint with your data protection authority. In Sweden this is Integritetsskyddsmyndigheten (IMY).

Children

Gospeling is not directed to children. You must be at least 13 years old to create an account, or at least 16 where local law requires a higher age, including parts of the EEA and the United Kingdom. We do not knowingly collect data from anyone below that age. If you believe a child has created an account, contact us and we will delete it.

Changes to this policy

If we change this policy we will update the date at the top of this page, and we will notify you in the app when the change is significant.

Contact

Anton Eriksson Hjelm, Sweden, info@gospeling.app. See also Gospeling Support and our Community Guidelines.