Privacy Policy

This Privacy Policy describes how Spade & Cor Sdn. Bhd. (202101024053) ("we", "us") collects, uses, and protects your personal data in connection with the Being With God application and its landing page (restorebeing.me/beingwithgod), in accordance with the Personal Data Protection Act 2010 (Malaysia). Other parts of restorebeing.me, such as the home page, our free resources and our shop, have their own notices.

Data We Collect

Registration: When you register on our website, we collect your email address and, if you choose to give it, your name. We also record which option you chose, a unique access identifier (a UUID), the time, and your IP address, which we use to limit repeated sign-ups. Your name and email are processed via Kit (ConvertKit) for communications about Being With God. If you subscribe, Stripe gives us a customer reference and tells us whether your payment succeeded. We never receive your card details.

Account records: We keep a record of your email address, access identifier, plan (free, trial or Companion) and trial end date, so that you can sign in and we know what is open to you.

Stored on your device only: Your journal entries, profile photo and reading preferences are saved in your browser's local storage and are not sent to our servers. Your profile name stays on your device unless you use a feature that shares it, such as a group session or sending feedback.

Community features: If you use group reflection or community wall features, posts and session data you create are stored on our servers to enable sharing with other participants.

Access tokens: The access identifier lets you sign in from the link in your welcome email. A copy is kept on your device and on our servers.

Feedback: If you send us feedback, we receive your message, the name on your profile, your plan type and, during a trial, how many days remain, plus your IP address, which we keep to prevent abuse. If you also add an email address, we use it only to reply to you and do not store it with the feedback.

Usage analytics: We use PostHog to understand how the app and our website are used, so that we can improve them. It records events such as opening the app, signing in, using a reading, reflection or audio narration, saving a journal entry, and, on our website, the pages and buttons used, together with your plan and the date. After you sign in, these events are linked to a random code derived from your account's access identifier (not your email address), so that we can see, for example, whether someone who tried the app later subscribed. We do not send the text of your journal entries, reflections or feedback to PostHog, and we do not record your screen. You can switch this off in the app under Settings (Help improve the app), which stops the app sending usage events from that device. When someone subscribes, our own server also records that a subscription started.

Third-Party Services

Kit (ConvertKit): Handles email communications. Your email address is subject to Kit's privacy policy.

Stripe: Processes payments via secure payment links. We keep a customer reference and whether you paid. We do not store any payment card information.

PostHog: Provides usage analytics (see above). Your usage data is subject to PostHog's privacy policy.

Supabase: Stores our account records so that you can sign in.

ipapi.co: On our pricing pages, your IP address is sent to ipapi.co so that we can show prices in the right currency. We do not store the result against your identity.

Hostinger: Our website and servers are hosted by Hostinger.

Universalis: Provides daily scripture readings. No personal data is shared with Universalis.

Google Fonts: Fonts are loaded from Google's servers. Google may log font requests per their privacy policy.

How We Use Your Data

We use your data to provide the Being With God service, send updates and communications you have consented to, understand how the service is used and improve it, and reply to feedback you send. We do not sell your personal data to third parties.

Your Rights

Under the PDPA 2010, you have the right to access, correct, and withdraw consent for the processing of your personal data. To exercise these rights or to delete your account data, contact us at [email protected]. You can also ask us to delete the usage data linked to your account. We can find it using your access identifier.

Data Retention

Device-stored data (journal, profile) is retained until you clear it or uninstall the app. Server-side community data is retained while the service is active. Other data we hold, such as account records, usage analytics and feedback, is kept for as long as needed for the purposes described above. You may request deletion at any time.

Where Your Data Is Processed

Some of the services above, including PostHog, Kit, Stripe and Supabase, process data outside Malaysia, including in the United States.

Changes to This Policy

We may update this policy from time to time. Continued use of Being With God after changes constitutes acceptance of the updated policy.

Contact

Spade & Cor Sdn. Bhd. (202101024053)
[email protected]