Privacy Policy

The privacy of your data, and it is your data, not ours, is a big deal to us. Here is what we collect, why, and what we never do.

What we collect and why

• Email: to sign you in with a link. No password.
• Nickname: whatever you choose. It is the only name anyone in your circle sees.
• Your breaths and words: each practice and the word you chose. Private unless you choose, breath by breath, to share it with a circle, a giver or publicly.
• How you arrived: whether you came from a member’s invitation, a gift or a public video, so we can tell whether the practice spreads on its own.
• Location level: only if you choose it, and never more precise than a city.
• Payments: handled by Stripe. We never see your card number.

WITNESS early access

Only if you choose to join, we save your email, when you joined, and the wording explaining your choice. We will share that email with Nekiesha Lynn for WITNESS early-access contact. Joining is separate from your practice and seat. Visitor addresses are unverified; signed-in addresses are marked verified only when confirmed by sign-in.

Return to the WITNESS page to leave the list: members can sign in; visitors can use the same browser that saved their signup. Deleting your account removes a signup linked to that account. Removing your address here cannot recall a copy already shared with Nekiesha Lynn; you can also unsubscribe from her emails.

What we never do

• We never sell your data. No ads, no ad tracking, no third-party trackers.
• Givers never see a recipient’s name, face, location, or whether a gift was received or declined.
• We never pre-check a consent box. Every yes is yours, and you can change it to no at any time in Settings.

Where it comes from

Breathe and Bond comes from a Christian understanding of God as Bond. Nothing about faith is required, and you choose whether to go further.

Your rights

Download everything we hold about you as a file from Settings. Delete your account in one tap; your records are removed and only anonymous counts remain. If you are in the EU, UK or another place with data protection law, these rights apply to you fully and you may contact [privacy email].

Who processes data for us

Supabase (database and sign-in), Vercel (hosting) and Stripe (payments). Each is bound by its own privacy terms, and we share only what each needs to do its job.

Security

All data moves over encrypted connections. Each person can read only their own rows in the database, enforced at the database level.

Changes

If we change this policy, we’ll update the date above and tell you in the app when it matters.

Contact

[privacy email] · [Company name], [country]

Adapted from the Basecamp open-source policies, licensed under CC BY 4.0.