Privacy Policy

1. Introduction

Welcome to Selah Downloads ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our spiritual insights platform at www.selahdownloads.com.

2. Information We Collect

2.1 Personal Information

We collect the following personal information when you create an account:

• Name
• Email address
• Password (encrypted)
• Account creation date

2.2 Spiritual Download Content

Your spiritual downloads, insights, prayers, and reflections are encrypted client-side before being stored. We use your email address to derive an encryption key, ensuring that only you can decrypt and access your personal spiritual content.

2.3 Usage Data

We may collect information about how you access and use our platform, including:

• Device information
• Browser type
• IP address
• Usage patterns and features accessed

3. How We Use Your Information

We use the information we collect to:

• Provide and maintain our service
• Generate AI-powered spiritual insights and prayers
• Authenticate your account and ensure security
• Send you confirmations, updates, and administrative messages
• Improve and personalize your experience
• Respond to your requests and support needs
• Comply with legal obligations

4. Data Security & Encryption

Your privacy is paramount. We implement industry-standard security measures:

• Client-Side Encryption: Your spiritual downloads are encrypted on your device before being sent to our servers
• Password Security: All passwords are hashed using bcrypt with salt
• HTTPS: All data transmission is encrypted using TLS/SSL
• Limited Access: Only you can decrypt and view your personal downloads
• No Third-Party Sharing: We never sell or share your personal spiritual content with third parties

5. AI Processing & Third-Party AI Disclosure

5.1 What we disclose (Apple App Store 5.1.1(i) / 5.1.2(i))

Selah Downloads uses a third-party artificial intelligence service, OpenAI, to transform your voice reflections into structured spiritual guidance. We disclose this before any data is sent and require your explicit consent (via the in-app consent modal on first launch, and manageable at any time in Settings → Privacy & AI).

5.2 Exactly what data is sent to OpenAI

• Voice recordings that you capture inside the app (used for speech-to-text transcription).
• Transcribed reflection text (used to categorize the reflection, match it to Scripture, generate an activation prayer, and detect patterns across your journey).

We do not send: your name, email, IP address, precise location, contacts, photos, health data, financial data, or the encrypted contents of prior journal entries.

5.3 Who receives the data

OpenAI, L.L.C. — 3180 18th Street, San Francisco, CA 94110, United States. Our relationship with OpenAI is governed by their API Services Agreement and Enterprise Data Processing Agreement, which OpenAI publishes at openai.com/policies.

5.4 What OpenAI does with the data (equal-protection commitment)

• Processes the data solely to return AI-generated results to Selah.
• Does not use your submissions to train, improve, or fine-tune OpenAI's models.
• Retains submitted data for up to 30 days for abuse and safety monitoring, then permanently deletes it.
• Is contractually bound by an Enterprise Data Processing Agreement providing protections equivalent to those in this Privacy Policy.

5.5 Your explicit consent + revocation rights

• The first time you open Selah, a blocking modal shows this exact disclosure and asks whether you agree.
• If you Decline, no data is ever sent to OpenAI. Voice capture continues to work locally (audio saved to your device), but AI-generated insights, Scripture matching, and prayer generation are disabled.
• If you Agree, we record the exact consent version and timestamp on your account, and you may revoke it at any time under Settings → Privacy & AI → Revoke AI consent. Revocation is instant and blocks all future AI processing server-side.
• Consent is per-user (not per-device). Revoking on one device revokes everywhere.
• If we materially change what data is sent or who receives it, we will re-prompt you for consent before continuing AI processing.

5.6 What Selah stores after AI processing

Once OpenAI returns a result, Selah stores only the final analysis (category, themes, insights, Scripture reference, and prayer text) attached to your download, encrypted at rest. The raw audio is retained only if you have explicitly enabled audio archival in Settings; otherwise it is discarded once transcription completes.

5A. Ambient Capture & Third-Party Integrations

If you enable Ambient Capture (Siri Shortcuts, IFTTT, Zapier, Alexa Routines), the transcribed text you dictate is transmitted to our servers via a capture token you generate. Because these captures arrive without your device being unlocked, we cannot encrypt them client-side at the moment of arrival.

• Plaintext holding: Ambient captures are stored on our servers in plaintext until you open the app, review them, and press "Save to Journey" — at which point they are encrypted client-side just like your other downloads.
• Retention limit: Ambient captures you neither promote nor discard are automatically purged after 60 days.
• Third-party responsibility: Any content routed through Siri, IFTTT, Zapier, or Alexa is also subject to those providers' privacy policies. We do not control what they log.
• Revocation: You can revoke any capture token at any time from Settings, immediately stopping new captures from that source.

5B. Subprocessors

We use a small number of trusted subprocessors to deliver the service:

• OpenAI — AI analysis of the text you submit (categorization, insights, Scripture matching, prayer generation).
• Emergent — hosting, database, and API infrastructure.
• MongoDB Atlas — encrypted database at rest.
• Resend (optional) — transactional email (welcome, password reset).

6. Data Retention & Account Deletion

We retain your personal information and encrypted downloads for as long as your account is active. You may delete your account at any time via:

• Inside the app: Settings → Danger Zone → Delete Account
• Without signing in: selahdownloads.com/delete-account

Deletion permanently removes your profile, every download, every ambient capture, and every follow-up. Database backups are rotated within 30 days.

7. Your Rights

You have the right to:

• Access your personal information
• Update or correct your information (via Settings)
• Delete your account and all associated data (see §6 above)
• Export your data (via the Export & Share menu inside each analysis)
• Opt-out of promotional communications
• Lodge a complaint with your local data-protection authority (for EU/UK residents under GDPR)

8. Cookies & Tracking

We use localStorage and authentication tokens to maintain your logged-in state and remember your theme preference. We do not use third-party advertising cookies, analytics trackers, or tracking pixels.

9. Children's Privacy

Selah Downloads is intended for users 13 years of age or older (or the minimum digital-consent age in your country). We confirm this at signup via an age checkbox. We do not knowingly collect personal information from children under 13. If we learn we have collected information from a child under 13, we will delete it promptly. Parents or guardians who believe their child has provided us information may contact privacy@selahdownloads.com.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

11. Contact Us

If you have any questions about this Privacy Policy or our practices, please contact us at:

Email: privacy@selahdownloads.com
Website: www.selahdownloads.com