Privacy Policy

Tapestry exists to help couples build strong, faithful marriages. That work depends on trust, and trust depends on how we handle your information. This policy explains, in plain language, what we collect, why we collect it, who touches it, and how you can take it back. If anything here is unclear, write to us at [email protected] and a human will answer.

1. Information we collect

We collect only what the product needs to work:

• Account information. Your name, email address, password (stored as a salted hash, never in plain text), and subscription status.
• Couple profile. Your relationship stage, anniversary and milestone dates, the partner link that joins your two accounts, and preferences you set together.
• Photos. Images you choose to add to your Snapshot memory book. We never access your camera roll beyond what you explicitly select.
• Prayer logs. Prayer requests, answered-prayer entries, and devotional progress you record in the app.
• AI conversations. Messages you exchange with Loom, our AI couples guide, along with the context Loom uses to personalize its responses.
• Usage data. Feature usage, streaks, and device information used to keep the service reliable and improve it.

2. How we use your information

We use your data to run Tapestry: syncing sparks between you and your partner, keeping your memory book, powering Loom's personalized guidance, processing subscriptions, and sending service messages you have opted into. We do not sell your personal information, and we do not use the content of your sparks, prayers, photos, or Loom conversations for advertising. Loom conversations are not used to train AI models.

Within a couple account, your daily spark answers are shared with your partner by design; that is the product. Private journal entries, individual prayer notes marked private, and your individual conversations with Loom are never shown to your partner.

3. Church plans

If your access comes through a church plan, your church sees only aggregate engagement statistics: counts of active couples, streak participation, and challenge completion. Your church can never see your answers, prayers, photos, or Loom conversations, and we will not build features that change that.

4. Who processes your data

We rely on a small set of vetted processors, each bound by contracts limiting how they may use your data:

• Anthropic processes Loom conversations to generate responses. Conversations sent through our commercial agreement are not used to train models.
• Supabase hosts our database and authentication, including account data, couple profiles, prayer logs, and photos.
• RevenueCat manages in-app subscription entitlements purchased through the App Store and Google Play.
• Stripe processes web subscription payments. We never see or store your full card number.
• DigitalOcean provides the cloud infrastructure our servers run on.

5. Crisis situations

Loom is designed to recognize conversations that suggest abuse, self-harm, or danger. In those moments it pauses guidance and surfaces licensed crisis resources. We do not proactively report conversations to third parties except where the law requires us to respond to valid legal process.

6. Data retention and deletion

You can delete your account at any time from the app's settings or by emailing [email protected]. When you do, your personal data, including photos, prayer logs, and Loom conversations, is permanently deleted from our production systems within 30 days. Backups age out on a rolling schedule shortly after. Because a tapestry takes two, shared couple content (like joint spark history) is deleted when either partner deletes their account, and your partner is notified that shared history was removed.

7. Security

All data is encrypted in transit with TLS and at rest. Access to production systems is limited to a small number of engineers under audit logging. No system is perfect; if we ever suffer a breach affecting your personal data, we will notify you promptly and plainly, as the law and basic decency both require.

8. Children

Tapestry is for adults in a marriage or a committed relationship heading toward one. It is not directed to children under 16, and we do not knowingly collect data from them. If you believe a minor has created an account, contact us and we will delete it.

9. Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to certain processing. We honor these requests for all users, not just where the law compels us. Email [email protected] and we will respond within 30 days.

10. Changes to this policy

When we change this policy in a meaningful way, we will notify you in the app and by email at least 14 days before the change takes effect. The effective date at the top always tells you which version you are reading.

Contact

Questions, concerns, or requests: [email protected]. We read everything.