About this policy
Eclesia is operated by Bun Network LLC, based in Sheridan, Wyoming, United States. This policy explains how we handle information when you use our iPhone app, preview builds, online companions, or this website. For privacy questions or requests, contact contact@eclesia.chat. Eclesia is currently non-commercial.
Your account
We store your account identifier, name, email address, preferred language, and account timestamps. For Apple sign-in, we verify the identity Apple provides and keep a hashed Apple account identifier; Apple Hide My Email addresses are supported. Private preview accounts are not verified Apple identities.
We use account information to sign you in, separate account data, provide requested features, and secure the service. Session credentials are protected in the device Keychain; the server stores token hashes rather than plain session tokens.
What stays on your device
Your journal, saved prayers, bookmarks, questionnaire profile, study enrollments, private lesson reflections, completion history, and saved personalized path are stored locally. They are not automatically uploaded to Eclesia's database. Downloaded editorial lessons, illustrations, and prepared audio are also cached on your device.
Local content may be included in device backups according to your Apple and device settings. Eclesia does not currently provide cross-device journal or study-progress synchronization. If you copy local content into an online conversation, that copied content becomes part of the message you choose to send.
Online companions are your choice
Before the first online conversation or personalization request, the app asks for your permission. Chat sends your message, selected Christian tradition, and up to six recent conversation messages through Cloudflare to DeepSeek for generation and TypeSafe AI (Jev) for safety checks. Generated replies and citations are also checked before delivery.
For a personalized path, selected questionnaire answers and your intention are processed by Cerebras and Jev. We exclude account contact details, age, and gender from that personalization context. Your saved journal is not automatically included.
Messages and intentions can contain sensitive information, including religious beliefs, wellbeing concerns, or personal experiences. Share only what you are comfortable having processed by these services. Providers may retain or use information under their own policies; we cannot promise that their copies disappear when an Eclesia session ends.
Eclesia does not store chat text or generated personal paths in its server database or application logs. Conversations are transient in the current app. You can pause online companions in your profile; this stops future use until you give permission again, but does not withdraw content already processed by a provider.
Limited usage and security information
Our infrastructure receives ordinary connection information, including an IP address, as part of delivering the service. Eclesia uses rotating, hashed network identifiers, request identifiers, timestamps, and usage counts to limit abuse. Our application logs record known route names, request identifiers, status codes, and durations—not message text, email addresses, credentials, or raw network identifiers.
Short-lived usage records are scheduled for cleanup after roughly two days and may remain until the next daily cleanup. Access sessions expire within seven days. Account information remains until you delete your account. Infrastructure logs, service backups, and third-party provider records can have separate retention periods under their service policies.
Illustrations, lessons, and narration
Public editorial content is stored in Cloudflare R2. Narration is prepared ahead of time using ElevenLabs and then published as audio files. Tapping Listen only downloads an existing recording; it does not send your text to ElevenLabs or create a recording on demand. Private chat replies, journal entries, and personal reflections are not part of that public audio catalogue.
Online Scripture reading
When you open an online Bible edition, book, or chapter, Eclesia requests that public resource through Cloudflare from API.Bible, provided by the American Bible Society. We do not send your name, email address, journal, questionnaire, or account token to API.Bible. The provider receives our server request and the requested resource; its policies govern its own service records.
Your chosen reading language, edition, last chapter, and saved verse references stay in your account-local profile on the device. Public chapter responses are cached in a separate Cloudflare database for up to 15 days, with a small excerpt limit and automatic eviction. This cache contains no account identifiers or personal reading history. The app holds the displayed chapter temporarily, rather than saving a downloadable Bible or placing it in our public R2 bucket. Online editions are read-only: their text is not automatically sent to AI services or converted into recordings. Existing prepared studies and public-domain passages are separate.
This website
We do not add advertising trackers, marketing analytics, or a newsletter form to this website. Hosting providers receive normal connection information to deliver and protect pages. The canonical eclesia.chat website is served on Cloudflare; a managed website mirror may also be provided through OpenAI Sites.
Contact links open your email application. If you email us, we receive the address and information you choose to include and use it to respond and handle your request. Please do not email passwords, sign-in tokens, or detailed private journal content.
Your choices and requests
You can edit your name and language, pause online companions, sign out, and initiate account deletion from your profile. You may also contact us about access, correction, deletion, or other privacy rights available under the laws that apply to you. We may ask for reasonable verification before disclosing or deleting account information.
Account deletion removes the Eclesia server profile and associated sessions and clears that account's local profile data on the current device. Copies on other devices, personal backups, prior messages held by external providers, and emails you sent us are not automatically erased by that action. Public editorial content is not personal account data. See the account-deletion page for the steps.
Children and changes to this policy
Eclesia is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has provided information, contact us so we can investigate and respond appropriately.
We may update this policy as the app changes. The date above identifies this version. If a change materially affects the information you choose to share with online companions, we will update the app's notice or consent flow as appropriate.
Service-provider policies
Provider policies are separate from this policy. Reviewing them is especially important before sending sensitive information to an online companion.