Privacy Policy — STEWARD

1. Who we are

STEWARD is a faith-based whole-life stewardship service operated by AIMPLIFY LLC ("STEWARD," "we," "us," or "our"), located at 2400 Old Brick Rd, #61, Glen Allen, VA 23060. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the rights and choices you have.

This Policy applies to both of our properties: stewardfully.com (our public marketing website) and app.stewardfully.com (the STEWARD application). Contact us at support@stewardfully.com.

2. The short version

STEWARD is for adults (18+). We don't knowingly collect information from anyone under 18.
We collect only what we need to run the service, and we don't sell your personal information.
A quiet AI helper supports your reflections. It's on by default, you can turn it off anytime in Settings, and we never use your reflections to train AI models — ours or anyone else's.
You can export all of your data anytime, and you can permanently delete your account and data whenever you choose.
Your personal reflections are private by default. You control what, if anything, you share with a mentor or group.

3. Who may use STEWARD (18+)

STEWARD is intended only for individuals 18 years of age or older. We do not direct the service to children, and we do not knowingly collect personal information from anyone under 18. If we learn we have collected information from someone under 18, we will promptly and permanently delete it. Contact support@stewardfully.com.

4. Information we collect

Information you provide: account information (name, email, password or social sign-in, date of birth or 18+ confirmation); profile and onboarding (season, roles, entrustments, preferences); your reflections and activity in guided sessions; community content you choose to share; mentor/group connections; support requests.

Collected automatically: usage and device data, approximate location derived from IP, essential and limited analytics cookies.

From third parties: sign-in providers (Google, Apple) and Stripe (payment confirmations only; we never store full card numbers).

5. How we use your information

Create and secure your account and verify eligibility (18+).
Provide the service — interview, assessment, guided sessions, dashboard, reminders, community, and mentorship.
Generate AI-assisted reflections and suggestions to help you discover, decide, and act (see §6).
Process payments and manage subscriptions (Stripe).
Send service messages and, with your consent, optional emails or texts.
Keep the community safe (moderation — see §7).
Improve and troubleshoot the service; comply with law and enforce our Terms.

Where GDPR applies, our legal bases include performance of our contract with you, your consent (for AI processing of sensitive content and optional communications), legitimate interests (security and improvement), and legal obligations.

6. How STEWARD uses AI

STEWARD uses AI to help you reflect — never to decide for you. The AI may notice patterns, surface possible next steps, and offer related Scripture or a reframing question. It proposes; you decide.

On by default, easy to turn off. AI assistance is enabled by default; one toggle in Settings turns it off entirely. STEWARD works fully without it.
What it will never do. Decide for you, judge your faithfulness, compare you to others, or provide financial, legal, medical, or counseling advice.
We never train AI models on your content.
Sensitive content & consent. Because your reflections may touch faith, finances, family, and emotional well-being, we ask for explicit consent at signup and record it. You can withdraw it anytime by turning AI off.
Where AI runs. AI processing runs on our secure servers; we do not expose your content to AI features you haven't enabled.

7. Community content and safety

If you post in community or mentor/group spaces, we process that content to operate those features and keep them safe. Our safety systems (automated checks and human review) may screen, hide, or remove content that violates our Community Guidelines, and we may warn, suspend, or remove accounts. Reports are handled confidentially.

STEWARD is not a crisis, counseling, medical, financial, or legal service. If our systems detect content suggesting self-harm, we may show you supportive resources (such as the U.S. 988 Suicide & Crisis Lifeline). If you are in crisis, please contact 988 or your local emergency number.

8. How we protect and keep your information

Privacy by default. Your reflections are private to you by default. Mentor or group visibility happens only when you explicitly choose it, scoped, and revocable.

Security. Encryption in transit, access controls, and row-level security so users can access only their own data.

Retention. We keep your information only as long as needed for the purposes described here. When you delete your account, we permanently delete your data as described in §10.

9. How we share information

We do not sell your personal information and we do not share it for cross-context behavioral advertising. We share information only:

With service providers under contract — Supabase (hosting/database/auth), Stripe (payments), Resend (email), Twilio (SMS if you opt in), and our AI providers Google (Gemini) and OpenAI (ChatGPT) for AI features you've enabled.
With mentors or group members you explicitly choose, scoped to what you select.
For legal reasons or in a business transfer, subject to this Policy.

We do not permit AI providers to train on your content.

10. Your rights and choices

From Settings → Privacy & Data, you can:

Export all of your data, anytime — a complete machine-readable copy.
Permanently delete your account and data, anytime — upon explicit confirmation, we permanently and irreversibly delete your personal data from our active databases and storage. A true deletion, not a hidden "deactivated" copy. We offer you the chance to export your data first.

Narrow, disclosed exceptions: (a) payment records retained by Stripe as required by tax and financial law; (b) safety records related to a content-moderation incident, kept access-controlled for as long as reasonably necessary for appeals, security, or legal preservation, then purged; and (c) personal data residing in encrypted backups, which is removed from active systems immediately and expires from rolling backups in the ordinary course and is never restored to repopulate deleted data. Outside these exceptions, your data is deleted without retention.

You may also access, correct, or update your information; manage communications (reply STOP to texts, use unsubscribe links, adjust Settings); and turn AI off anytime.

Depending on where you live, you may have rights under laws such as the EU/UK GDPR or the California CCPA/CPRA, including access, correction, deletion, portability, restriction, objection, withdrawal of consent, and non-discrimination. EU/UK users may lodge a complaint with their data protection authority. We market STEWARD only in the United States, but we honor these core rights for all users.

To exercise any right, use Settings or contact support@stewardfully.com.

11. Cookies

We use cookies strictly necessary to operate the service and limited analytics to improve usage. You can control cookies through your browser settings.

12. International users and data transfers

STEWARD is operated from the United States and intended for U.S. users. If you access STEWARD from outside the U.S., your information will be processed in the U.S. and other countries where we or our providers operate. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) for international transfers.

13. Changes to this Policy

We may update this Policy from time to time. Material changes will be communicated (email or in-app) and the "Last updated" date refreshed.

14. Contact us

support@stewardfully.com · AIMPLIFY LLC · 2400 Old Brick Rd, #61, Glen Allen, VA 23060.