Qetoret — Privacy Policy

Overview

Qetoret, available at qetoret.com and as an Android app, is a prayer journal and discipleship companion. This page explains what data the app collects, how it is used, and who it is shared with. We collect the minimum data needed to run the app and never sell your data to third parties.

Account data

When you create an account we store your email address and authentication credentials with our database provider, Supabase. This is used solely to sign you in and identify your data.

Prayer content

Private prayers and journal entries are encrypted in your browser before upload. For convenient same-device access, the account content key is stored in this browser's IndexedDB and may be mirrored in tab-scoped session storage while unlocked. An optional passphrase and recovery code can wrap that key for recovery on another device. The passphrase, recovery code, and raw key are not sent to Supabase.

Community prayer content is encrypted under a group key distributed to current group members. Members can read content shared with their group. Removing a member rotates the key for future content, but cannot make historical content or keys already received disappear from that person's devices. Encryption does not protect content from malicious code running in an unlocked app or from someone controlling your device.

AI-assisted features (optional)

Qetoret can offer AI-generated prayer guidance, Bible references and translations through Claude by Anthropic, or a privately hosted Ollama model, depending on the configured service. These features are opt-in: the consent screen identifies the configured provider before text is sent. Switching from private processing to Claude requires fresh consent on your device; consent to private processing does not authorize sending your text to Claude.

When you consent, the selected text is decrypted in your browser, redacted to remove recognizable contact details and secrets, and sent through Qetoret's authenticated app server. When Claude is configured, the app server sends this text directly to Anthropic, which receives and processes this selected text. For prayer guidance, the prayer title is included by default; prayer details and the latest update are optional. Translation sends the selected text needed for that task. Requests also include task information such as language and selected guidance options. Redaction is imperfect and names remain in the selected text, so text can still contain sensitive personal information. Encryption of your saved journal does not hide text you choose to send to an AI service.

Translation caches are encrypted before storage. Qetoret does not automatically switch to a different AI provider when one is unavailable. You can withdraw AI consent in Settings at any time; this clears AI result caches and prevents further AI use until you consent again. Withdrawal cannot recall text already processed. Provider processing and retention depend on the service and its applicable settings and terms; contact us with questions about the configured service.

Scripture content

Bible verse text may be fetched from the YouVersion API (where enabled) and cached to reduce repeated requests. AI is not used as an authoritative source of Scripture text.

Notifications

If you enable reminders, we store a push notification subscription (via the standard Web Push protocol) used only to deliver the reminders you configure. You can disable this at any time in your device or browser settings.

Feedback

If you submit feedback through the in-app feedback form, the message you write is stored so we can read and act on it. Only submit information you're comfortable sharing with the Qetoret team.

AI output reports include your account ID so they can be removed with your account; your name and email are not attached. We do not automatically attach your prayer, AI prompt or generated answer. If you choose anonymous general feedback, it has no account link and cannot be found automatically during account deletion. Contact us to request help removing an anonymous submission.

Analytics

Automatic Vercel Analytics, Speed Insights, and custom product-event transmission are disabled in this release. Our hosting and database providers may process ordinary request metadata, such as IP addresses and request times, to operate and secure the service. We do not use this information for advertising or cross-app tracking.

Donations

The in-app donation link takes you to an external PayPal page. Qetoret does not process, see, or store any payment or card information.

Who we share data with

We do not sell your data. We use the following service providers (sub-processors) to run the app:

• Supabase — database, authentication, storage
• Anthropic (Claude) — optional AI guidance and translation of selected text sent through Qetoret's app server, only after consent when Claude is configured. A private Ollama deployment processes that text through a separate gateway on the operator's infrastructure instead.
• Vercel — website hosting
• YouVersion — scripture text, where enabled

Your rights

You can delete your prayers, testimonies, or account at any time from within the app. To request a full export or deletion of your data, or ask any question about this policy, contact us at arthur.meteng@gmail.com.

Delete your account and data

You can permanently delete your Qetoret account at any time:

• In the app or website: go to Settings → Privacy & Security, scroll to the danger zone, tap "Delete my account", and confirm. This immediately and permanently deletes your account, your prayers and testimonies (including encrypted private content), and any group memberships.
• By email: if you can't access the app, send a deletion request from your account's email address to arthur.meteng@gmail.com. We will confirm and complete the deletion within 30 days.

Account deletion removes your sign-in account, profile, private and authored shared prayers, updates, testimonies, group memberships, recovery records, feedback, translations, and notification subscriptions from the live app database. Groups used by other members remain, with your creator references removed. Copies that other people have already downloaded or saved on their devices cannot be recalled. Provider backups and operational logs follow the providers' retention schedules; contact us for questions about retained records.

Request deletion without installing or opening the app.

Children

Qetoret is not directed at children under 13, and we do not knowingly collect data from them.

Changes to this policy

We may update this policy as the app evolves. Material changes will be reflected here with an updated "Last updated" date.