Privacy policy
Updated October 6, 2026
FaithXFitness provides scripture, journaling, workout tracking, and optional account and community features. This policy describes the data used by FaithXFitness and how to control it. Contact us at support@faithxfitness.app.
Data on your device
The app stores your profile choices (such as name, goals, appearance, and training preferences), journal and prayer entries, scripture activity, saved verses, workouts and exercise history, manual step entries, and optional body check-ins. Body check-ins can include energy, soreness, sleep, and cycle context. Your writing may contain sensitive information, including religious beliefs or health information. These records support the features you choose to use.
Optional accounts and backup
You can use the core app without an account. If you create an account or sign in, we process your email address and account identifier for authentication. Supabase, our hosting and authentication provider, processes account credentials and a private account backup on our behalf. The backup contains the profile, journal/prayer entries, reading and workout progress, saved verses, manual steps, body check-ins, and preferences listed above. It lets you restore data on another device. Apple Health step totals are excluded from this account backup. We keep the latest backup; subsequent backups replace it.
Your backup is restricted to your account by server access controls and is not made available through social features. Authorized service operators and processors may access data as necessary to operate, secure, support, or troubleshoot the service. This is not a claim of end-to-end encryption. We require processors handling personal data on our behalf to provide the same or equivalent protection described in this policy and required by applicable rules. Hosting may process data outside your country.
Community and reports
Other signed-in users can see your display name, username, and published reading/training streak counts. Your follows and friendships connect these public profiles. Sending a verse or challenge shares its contents and any note you write with the selected friend. Your private journal and body check-ins are not shared with friends.
We process blocks and reports to prevent abuse. A report includes the selected reason and a server copy of the reported profile and, when applicable, the message. Reports are restricted to authorized support/moderation operators and are not shown to the reported user. We use automated text filtering and human review for community safety; neither should be treated as an emergency service.
Apple Health, running location, photos, notifications, and audio
If you choose to connect Apple Health, the app requests read access to step count only to display your daily movement and recent history. It does not write HealthKit samples. HealthKit data is not used for advertising, marketing, profiling for advertisers, or sold to third parties. New app versions protect the app database from iCloud device backup; records already present in older device backups are controlled through your Apple backup settings.
When you start a run, the app uses precise location on your device, including while the app is in the background, to calculate distance and pace. Accepted GPS coordinates are saved on your device with the run's start time, active duration, and total distance so you can view its route in your recap. Routes and raw coordinates are not sent to our analytics or account-backup services. Device-level backups may include these local preferences according to your Apple backup settings. A share image is created only when you ask and can include the route shape; it does not contain raw GPS data or map labels. You choose whether to share it.
Saving a verse wallpaper requests permission to add an image to Photos. You can also select a photo for your run recap using the system photo picker. An imported copy is stored on this device and may appear in a recap image you explicitly share; it is not sent to our analytics or account-backup services. Optional reminders use local notifications. Scripture narration plays either recordings included with the app or, as a fallback, an Apple speech voice on your device. The app does not send scripture, journal entries, or other personal writing to a third-party AI service for narration. Permission choices can be changed in iOS Settings.
Analytics and diagnostics
We use PostHog to understand which features are used and to improve reliability. PostHog receives a device identifier and app/device context. After you sign in, analytics are linked to your account identifier, email address, and display name. Events can record app lifecycle and onboarding activity; subscription purchase or restore; workout activity, including exercise and set counts and duration; run actions such as starting, pausing, completing, discarding, or sharing; and faith or wellness activity such as marking a devotional read, completing a reading plan, creating a journal entry (including the journal mode), or saving a body check-in. PostHog also receives app exceptions, crash information, and limited operational logs.
Analytics do not include journal or prayer text, prompts, saved verses, private backup contents, HealthKit step totals, body-check-in values, GPS coordinates, or running routes. We use this information for product analytics, troubleshooting, crash reduction, security, and service performance—not for advertising or tracking you across other companies' apps or websites.
Behavior analytics can also record named screen visits, coarse scroll-depth milestones, and interactions with workout demonstrations, rest-period Scripture, and listening controls. These events describe actions, not the contents of your private writing. Screen/session recordings are disabled. From October 4, 2026, our PostHog project is configured to disable IP-based location enrichment and discard client IP addresses from new analytics events; this does not retroactively remove previously collected records. Running GPS remains separate and local to your device as described above.
Purchases, service records, and sharing
Apple handles subscription payment details. We use StoreKit subscription status, product identifiers, and transaction timing to provide paid access; the app does not receive your payment-card number. Infrastructure providers may process IP addresses, request times, and technical logs to deliver and secure the service. Information you email to support is used to respond to your request. We do not sell personal information, run third-party advertising, or track your activity across other companies' apps or websites.
Retention and deletion
Local records remain until you remove them in the app or uninstall it. Account data and the latest private backup remain while your account exists. Deleting an entry while signed in updates the latest backup when backup next succeeds. Signing out stops subsequent account backups but does not erase the server copy.
Settings → Delete account removes the server account, its private backup, social relationships, sent/received items, and associated report records from the active service. Local records remain until you separately choose Delete all data on this phone. Local deletion alone leaves the account backup available. To remove both, delete the account first and then the local data. Deleting the account does not cancel an Apple subscription.
Operational logs, support correspondence, and provider disaster-recovery backups follow the applicable service retention schedules and may not disappear immediately when active records are deleted. Any records retained for security or legal obligations are limited to that purpose. Contact support for current retention details or a data-access/deletion request; we will explain any applicable retention restriction. There is no automated account-data export feature in the app.
Your choices
Use the app without signing in, omit optional journal/body-check-in information, disable reminders or Health access, stop backups by signing out, or delete your account in Settings. Contact support to request access or correction, ask about your privacy rights, or withdraw consent for optional processing. We may need to verify account ownership. If you believe a child has provided personal information without appropriate permission, contact us so we can investigate and address it.