- How is a member's journal protected?
- Journal entries and conversation messages get per-item envelope encryption with a Google Cloud KMS key bound to the member's account, on top of encryption at rest with customer-managed keys. A sealed item cannot be re-attributed to another user, even by us. Traffic is encrypted in transit.
- Do you train models on member data?
- No. We do not train models on conversations or journal entries, ours or anyone else's, and we never sell member data. Safety classification data is never used for training. Our privacy policy states this.
- What happens when a member is in crisis?
- Every conversation runs through a separate safety classifier whose only job is to detect suicidality, self-harm, abuse or acute crisis and surface real hotline resources. It is unchanged by any church setting.
- What about children?
- The Pastor is 13+. Children never have an account or a conversation with the AI. Sunday school tools, when they open, are for teachers and parents.
- How do we pay, and what is the contract?
- Custom, from $699/mo, billed annually through Stripe; monthly billing is available at +20%. It starts with a 60-day pilot, free, no card. Church plans are sold on the web only and never inside the iOS app.